Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
File: d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json)
Hash identifier: OG5Y6y32LaUu8UuiRTFSconZozqifseZ4r+ytJ4xXkQ=
Subject key identifier: 17:5D:70:D2:E4:26:8E:E7:27:C5:A8:AE:56:B3:69:EC:6C:76:B8:86
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F43285848ADC61E95E727A96EFD632FFE
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 396479
IP address blocks: 161.38.192.0/22 maxlen: 24
161.38.196.0/22 maxlen: 24
161.38.200.0/22 maxlen: 24
161.38.204.0/23 maxlen: 24
161.38.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:1e:95:e7:27:a9:6e:fd:63:2f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=4cac25e1-b4e3-48f9-9695-181161f98d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:e9:17:2a:8a:52:a6:de:3a:73:0e:04:b5:
5a:f4:3d:58:e9:cf:8f:82:c4:70:50:3e:75:3c:71:
87:29:e3:1f:4b:78:dd:49:3f:3d:ad:9f:7f:b1:56:
f6:05:17:51:8b:87:82:fa:26:1b:e6:a5:63:f1:24:
76:a4:42:17:4a:b2:30:72:a8:41:bc:66:28:ec:1c:
65:f2:88:d8:52:6d:e2:9a:73:57:61:ba:c9:86:7d:
07:e2:f4:40:df:db:b3:d8:c1:39:91:dc:e5:b3:7d:
91:8d:2d:3f:6f:80:f9:46:e7:0e:2a:34:d7:31:4a:
c6:56:d0:9e:c6:6e:d2:d3:b6:75:1a:9e:13:a9:a0:
bf:bc:df:64:ba:db:26:2b:d4:4b:80:1d:d0:92:ec:
88:d9:46:8d:dc:ab:11:37:22:89:2e:6d:42:20:bf:
84:e7:5f:02:23:d7:91:ad:3e:d4:ab:2d:4b:b1:4b:
70:ad:34:53:7f:08:0a:5e:b7:cd:e9:d2:c4:97:96:
c6:2c:b5:b4:99:eb:d4:6d:75:d2:47:49:0c:1f:f2:
93:74:bf:7b:37:ed:09:7a:02:3d:66:93:ee:f1:ab:
5e:2f:92:8f:59:6c:11:d1:d9:76:36:18:4d:01:d0:
33:35:4d:f4:26:4a:ec:91:9b:3b:c1:49:7d:96:0f:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:70:D2:E4:26:8E:E7:27:C5:A8:AE:56:B3:69:EC:6C:76:B8:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:2a:a8:84:e5:1c:c9:e2:c6:c8:6f:33:dd:d3:e3:b3:dd:27:
26:ee:86:05:2d:40:bb:84:6a:b6:b3:2b:c9:c3:d2:46:da:ec:
26:39:07:01:1d:56:be:7a:aa:ee:01:d0:0e:26:4a:7d:5e:91:
9d:fa:2e:c2:c6:0f:94:11:a4:a5:8e:c9:ed:e0:83:82:4a:7a:
0c:2a:96:eb:05:99:43:43:fb:b1:bc:5a:cf:b5:3a:c1:3b:e1:
d0:bd:35:de:3e:40:48:7b:76:44:af:c6:ea:a0:65:99:65:4e:
ef:83:5f:d8:f6:88:da:13:86:85:a5:43:fa:6c:24:e4:56:12:
20:29:4e:ee:f4:d0:37:80:68:85:e7:31:e5:06:bf:05:60:9b:
8a:c6:47:50:94:51:ff:cb:68:e0:b6:a4:df:cd:ba:90:aa:01:
49:c6:76:80:78:20:82:1e:bd:a5:96:b1:f9:cb:89:bc:e0:1a:
2b:a4:0f:44:af:b6:98:9f:ab:68:d0:ae:16:d0:32:ae:2e:3b:
01:da:5b:59:e4:41:27:5e:d5:5e:94:75:6f:bd:dc:19:ac:27:
ed:c5:6f:f3:90:62:c4:39:0d:c5:b9:d8:24:f3:d0:ca:a7:15:
2c:97:a9:54:71:d9:42:14:1a:c5:82:3c:67:cd:60:7b:da:fe:
1d:07:9e:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxh6V5yepbv1jL/4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3
OTI4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NGNhYzI1ZTEtYjRlMy00OGY5LTk2OTUtMTgxMTYxZjk4ZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nbpFyqKUqbeOnMOBLVa9D1Y6c+PgsRwUD51
PHGHKeMfS3jdST89rZ9/sVb2BRdRi4eC+iYb5qVj8SR2pEIXSrIwcqhBvGYo7Bxl
8ojYUm3imnNXYbrJhn0H4vRA39uz2ME5kdzls32RjS0/b4D5RucOKjTXMUrGVtCe
xm7S07Z1Gp4TqaC/vN9kutsmK9RLgB3QkuyI2UaN3KsRNyKJLm1CIL+E518CI9eR
rT7Uqy1LsUtwrTRTfwgKXrfN6dLEl5bGLLW0mevUbXXSR0kMH/KTdL97N+0JegI9
ZpPu8ateL5KPWWwR0dl2NhhNAdAzNU30JkrskZs7wUl9lg8xdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBddcNLkJo7nJ8WorlazaexsdriGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi
MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZDhjNGI5YjQtZDY0ZS0z
YWY3LTk1YTctYjY0MWEyNTg0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1
MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy
NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2
ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwqqITlHMnixshvM93T47PdJybuhgUtQLuEarazK8nD0kba7CY5BwEd
Vr56qu4B0A4mSn1ekZ36LsLGD5QRpKWOye3gg4JKegwqlusFmUND+7G8Ws+1OsE7
4dC9Nd4+QEh7dkSvxuqgZZllTu+DX9j2iNoThoWlQ/psJORWEiApTu700DeAaIXn
MeUGvwVgm4rGR1CUUf/LaOC2pN/NupCqAUnGdoB4IIIevaWWsfnLibzgGiukD0Sv
tpifq2jQrhbQMq4uOwHaW1nkQSde1V6UdW+93BmsJ+3Fb/OQYsQ5DcW52CTz0Mqn
FSyXqVRx2UIUGsWCPGfNYHva/h0Hnow=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:17 2025 by rpki-client