Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
File: 59869761-7ba1-3163-bf71-c30740d5fd21.roa (raw, json)
Hash identifier: YLr8bZ9ChjB1wuvmCU/CmIOhpUimf5LKjBdV6O3GRRk=
Subject key identifier: 9B:C6:F8:86:90:16:72:C4:8B:20:06:14:D8:02:2B:CA:95:47:F3:EF
Certificate issuer: /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial: 010D0C9F43285848DEA11DE22C2506A4630C4680
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 14977
IP address blocks: 159.238.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1d:e2:2c:25:06:a4:63:0c:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=b334daa1-4baa-4f2b-b090-f605bd68aa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:73:77:32:9f:fd:9b:9b:cd:bf:dc:3f:2d:
75:6a:97:d0:96:ab:36:db:49:33:0c:c6:ed:d6:28:
16:7a:ce:68:34:b9:c5:d3:0d:37:0b:f3:a8:91:4e:
00:b4:a4:bf:42:d5:f1:4d:fc:f8:b9:84:d2:bc:e2:
f8:b5:88:65:ca:e8:da:ab:bf:05:d2:2a:4a:ad:58:
88:94:dc:9a:27:0d:1a:49:eb:1f:ce:a5:1e:d9:59:
ca:e4:44:1b:c0:0a:23:6e:40:d4:03:de:87:5a:e2:
21:71:c1:0c:da:b3:bf:e7:d3:70:14:20:0b:87:4e:
e9:4b:2c:ea:9c:cc:f9:de:73:ae:c9:86:8d:8a:b7:
d2:54:37:df:b1:ce:11:e8:b2:70:f7:92:f5:85:87:
33:5f:91:7b:e3:b8:22:26:cc:9c:b1:1a:41:a1:11:
74:47:cd:0f:50:ed:92:e4:cb:d5:23:9b:1f:73:96:
a4:28:30:c1:93:f2:6d:59:b7:92:af:61:06:26:d6:
77:ae:40:01:15:b6:dd:9f:66:af:0f:38:d8:0d:4a:
1b:b8:18:af:e7:b8:2e:4b:ad:e8:62:a9:0e:69:97:
7d:ef:b0:88:71:56:cd:e0:83:f2:ab:25:2b:f6:69:
c6:65:9e:0b:2d:2b:a1:0a:82:02:a7:85:0c:b7:37:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:F8:86:90:16:72:C4:8B:20:06:14:D8:02:2B:CA:95:47:F3:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
X509v3 Authority Key Identifier:
keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
sbgp-ipAddrBlock: critical
IPv4:
159.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d9:06:61:a7:d7:65:87:f9:cd:30:55:48:9f:69:6d:1a:b3:
88:6f:ec:06:2c:b9:3a:8a:c0:57:90:6f:b6:3a:e2:55:c1:99:
60:cd:fc:df:d9:1a:f2:27:94:02:2e:a9:2f:75:79:24:29:98:
0f:02:55:00:ee:90:74:32:b4:a4:df:ed:f7:44:e4:f3:b1:fc:
ac:ca:59:bb:0d:31:92:97:18:fb:13:0f:f4:4a:d4:ad:cf:43:
7e:9e:57:ac:89:bd:04:32:29:05:99:33:45:49:86:e3:f6:1d:
bf:7e:8d:a0:7f:1c:cf:a4:58:6e:ba:95:48:79:61:34:36:51:
5e:57:1d:cb:99:60:76:90:6b:26:3b:66:4f:df:f1:d9:f8:dc:
a4:f5:6b:a4:93:ce:ce:21:42:c9:c0:b7:4f:2b:23:37:31:8a:
90:2e:cc:c1:e0:ff:c0:b0:0c:c1:66:e7:45:50:69:d9:46:b1:
f8:f4:99:76:9e:0d:c1:60:ff:ff:f8:9d:5f:cf:d8:35:6a:33:
d1:aa:0e:d4:3c:58:03:d8:76:d6:27:3b:95:3c:27:42:33:6a:
df:6b:b9:c1:44:e8:3d:72:61:57:fb:89:a8:fa:54:34:55:d1:
a2:66:3d:19:78:c8:c9:fb:45:61:52:ed:2d:ec:f5:59:4a:36:
33:d1:39:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjeoR3iLCUGpGMMRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViMjNiMDMtOWQxZC00MTJkLWE1NmEtNDkzYWVhYTVk
MDU3MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
YjMzNGRhYTEtNGJhYS00ZjJiLWIwOTAtZjYwNWJkNjhhYTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBzdzKf/Zubzb/cPy11apfQlqs220kzDMbt
1igWes5oNLnF0w03C/OokU4AtKS/QtXxTfz4uYTSvOL4tYhlyujaq78F0ipKrViI
lNyaJw0aSesfzqUe2VnK5EQbwAojbkDUA96HWuIhccEM2rO/59NwFCALh07pSyzq
nMz53nOuyYaNirfSVDffsc4R6LJw95L1hYczX5F747giJsycsRpBoRF0R80PUO2S
5MvVI5sfc5akKDDBk/JtWbeSr2EGJtZ3rkABFbbdn2avDzjYDUobuBiv57guS63o
YqkOaZd977CIcVbN4IPyqyUr9mnGZZ4LLSuhCoICp4UMtzf8AwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJvG+IaQFnLEiyAGFNgCK8qVR/PvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZWIy
M2IwMy05ZDFkLTQxMmQtYTU2YS00OTNhZWFhNWQwNTcvNTk4Njk3NjEtN2JhMS0z
MTYzLWJmNzEtYzMwNzQwZDVmZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmViMjNiMDMtOWQxZC00MTJkLWE1
NmEtNDkzYWVhYTVkMDU3LzZlYjIzYjAzLTlkMWQtNDEyZC1hNTZhLTQ5M2FlYWE1
ZDA1Ny5jcmwwHwYDVR0jBBgwFoAUNjS2acy/hsHKvgZtNPMkpobTMY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82ZWIyM2IwMy05ZDFkLTQxMmQtYTU2YS00OTNh
ZWFhNWQwNTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn+4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZNkGYafXZYf5zTBVSJ9pbRqziG/sBiy5OorAV5BvtjriVcGZYM3839ka
8ieUAi6pL3V5JCmYDwJVAO6QdDK0pN/t90Tk87H8rMpZuw0xkpcY+xMP9ErUrc9D
fp5XrIm9BDIpBZkzRUmG4/Ydv36NoH8cz6RYbrqVSHlhNDZRXlcdy5lgdpBrJjtm
T9/x2fjcpPVrpJPOziFCycC3TysjNzGKkC7MweD/wLAMwWbnRVBp2Uax+PSZdp4N
wWD///idX8/YNWoz0aoO1DxYA9h21ic7lTwnQjNq32u5wUToPXJhV/uJqPpUNFXR
omY9GXjIyftFYVLtLez1WUo2M9E5sw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:37 2025 by rpki-client