Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ac2cf42f-84d7-30f6-ae19-4b031575e41d.roa
File: ac2cf42f-84d7-30f6-ae19-4b031575e41d.roa (raw, json)
Hash identifier: yrNgVwZ7qBSIJlDhs+oYQPue+gCpXUaIwJhLagXf7D8=
Subject key identifier: 21:87:64:FE:1B:63:00:CA:49:14:EE:84:C0:26:C6:35:00:AF:AA:20
Certificate issuer: /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial: 010D0C9F4328583F5EB9D9542FD4D5F01EDD8BC0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ac2cf42f-84d7-30f6-ae19-4b031575e41d.roa
Signing time: Wed 29 Sep 2021 20:03:54 +0000
ROA not before: Wed 29 Sep 2021 20:03:54 +0000
ROA not after: Sun 29 Dec 2024 05:00:00 +0000
asID: 207459
IP address blocks: 157.254.171.0/24 maxlen: 24
157.254.172.0/24 maxlen: 24
157.254.219.0/24 maxlen: 24
157.254.223.0/24 maxlen: 24
157.254.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5e:b9:d9:54:2f:d4:d5:f0:1e:dd:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Validity
Not Before: Sep 29 20:03:54 2021 GMT
Not After : Dec 29 05:00:00 2024 GMT
Subject: CN=d9154481-ed60-4543-9ab2-fb7b5d2b6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:fa:84:b0:e7:ec:13:3e:12:60:ce:9c:fc:
0d:0c:17:21:b8:57:aa:8c:5e:38:4e:0b:15:3d:f2:
df:c4:35:ac:17:63:d3:2f:57:41:bc:d3:62:ea:98:
e7:65:ba:60:33:b9:10:b1:7e:51:37:57:d3:bb:44:
cb:6c:87:4b:dc:81:dd:4d:c3:d0:fe:aa:2b:92:4f:
a2:de:80:b2:c5:f4:56:ad:9d:86:72:33:2f:61:61:
cd:a8:2a:fb:8c:b4:c6:c9:e0:73:bc:f5:64:34:30:
dd:7e:9d:2b:9f:07:75:a0:d8:10:2f:40:e6:8b:e5:
81:5b:f1:e2:6a:0c:06:b3:4d:bc:5a:c3:08:af:27:
3c:51:40:82:ca:0b:ef:ea:57:8a:59:da:6a:5a:5f:
ba:58:89:08:96:a4:81:fa:2b:a2:be:58:01:5d:95:
c0:59:1b:28:85:de:d9:63:bd:40:d5:bd:e6:c7:c0:
41:4c:f9:32:2e:1e:24:37:c5:77:43:83:f8:07:41:
b6:1b:4b:bf:56:84:b3:73:c9:79:13:51:02:25:2e:
cd:72:8c:c8:89:14:04:8e:af:66:b3:d3:15:5c:9c:
d5:0a:3b:fd:8c:92:d2:73:b8:9f:dc:2f:e4:58:64:
2b:e4:86:b6:92:1a:a8:04:6c:6a:5b:ae:25:ad:b8:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:64:FE:1B:63:00:CA:49:14:EE:84:C0:26:C6:35:00:AF:AA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/ac2cf42f-84d7-30f6-ae19-4b031575e41d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl
X509v3 Authority Key Identifier:
keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0-157.254.172.255
157.254.219.0/24
157.254.223.0/24
157.254.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5b:79:24:39:ac:ec:81:49:a8:40:df:65:e2:ca:f0:36:ec:
3e:07:12:0b:47:0f:6a:96:b4:65:9b:46:c7:81:ff:99:23:1e:
eb:88:06:8f:82:1f:2c:ee:ca:16:54:5c:14:b5:a5:32:b5:70:
77:7b:f0:ab:00:0b:af:98:41:2d:f9:36:aa:42:74:e1:c8:c7:
1d:e5:3d:6e:06:7c:1e:4c:4d:9b:3f:67:36:3c:81:5c:1c:ae:
3e:3d:21:0e:93:a9:67:ae:05:18:cc:b1:fa:0c:5b:3e:72:3a:
5e:52:6d:de:4e:61:40:76:7f:f2:2f:4e:68:b4:67:8a:cf:64:
e2:d7:85:16:ee:19:38:dc:e5:99:d5:57:ab:11:47:6f:c9:df:
c6:5b:a7:d2:ed:24:5d:e0:ec:94:dd:16:e4:75:98:b0:63:df:
ff:7c:7c:85:cf:db:fb:5c:15:1c:1a:8d:19:b8:51:60:c2:f8:
bf:5f:2e:23:2d:d3:57:83:c9:53:51:82:a6:e7:0d:39:92:27:
c0:90:4e:7e:15:53:b8:69:99:29:14:9c:35:62:66:4e:ab:a6:
00:aa:66:5a:86:98:01:d5:fb:a2:48:6e:b4:0c:60:66:c3:ba:
d7:13:4c:ac:be:7d:4d:28:ee:0c:b0:a4:e9:7f:7b:16:e8:44:
8b:55:28:27
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWD9eudlUL9TV8B7di8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA5N2JiZDEtZGRlMS00ZWU1LWE3MjctNWVlNDVkYTY5
MDUyMB4XDTIxMDkyOTIwMDM1NFoXDTI0MTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDkxNTQ0ODEtZWQ2MC00NTQzLTlhYjItZmI3YjVkMmI2YmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVT6hLDn7BM+EmDOnPwNDBchuFeqjF44TgsV
PfLfxDWsF2PTL1dBvNNi6pjnZbpgM7kQsX5RN1fTu0TLbIdL3IHdTcPQ/qorkk+i
3oCyxfRWrZ2GcjMvYWHNqCr7jLTGyeBzvPVkNDDdfp0rnwd1oNgQL0Dmi+WBW/Hi
agwGs028WsMIryc8UUCCygvv6leKWdpqWl+6WIkIlqSB+iuivlgBXZXAWRsohd7Z
Y71A1b3mx8BBTPkyLh4kN8V3Q4P4B0G2G0u/VoSzc8l5E1ECJS7NcozIiRQEjq9m
s9MVXJzVCjv9jJLSc7if3C/kWGQr5Ia2khqoBGxqW64lrbjtCwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFCGHZP4bYwDKSRTuhMAmxjUAr6ogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3
YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0NWRhNjkwNTIvYWMyY2Y0MmYtODRkNy0z
MGY2LWFlMTktNGIwMzE1NzVlNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA5N2JiZDEtZGRlMS00ZWU1LWE3
MjctNWVlNDVkYTY5MDUyL2MwOTdiYmQxLWRkZTEtNGVlNS1hNzI3LTVlZTQ1ZGE2
OTA1Mi5jcmwwHwYDVR0jBBgwFoAUJPi7rGPOAkRrt5MDB1f6l9N4JNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDk3YmJkMS1kZGUxLTRlZTUtYTcyNy01ZWU0
NWRhNjkwNTIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACd/qsD
BACd/qwDBACd/tsDBACd/t8DBACd/uIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJFt5JDms7IFJqEDfZeLK
8DbsPgcSC0cPapa0ZZtGx4H/mSMe64gGj4IfLO7KFlRcFLWlMrVwd3vwqwALr5hB
Lfk2qkJ04cjHHeU9bgZ8HkxNmz9nNjyBXByuPj0hDpOpZ64FGMyx+gxbPnI6XlJt
3k5hQHZ/8i9OaLRnis9k4teFFu4ZONzlmdVXqxFHb8nfxlun0u0kXeDslN0W5HWY
sGPf/3x8hc/b+1wVHBqNGbhRYML4v18uIy3TV4PJU1GCpucNOZInwJBOfhVTuGmZ
KRScNWJmTqumAKpmWoaYAdX7okhutAxgZsO61xNMrL59TSjuDLCk6X97FuhEi1Uo
Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org