Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76127ed4-ae51-3b3e-9654-3bd26500081a.roa
File: 76127ed4-ae51-3b3e-9654-3bd26500081a.roa (raw, json)
Hash identifier: eRLONkLemZWCCHuiZ86x+wZi8nRLZ3P2RfNuVFOKeb0=
Subject key identifier: 40:AB:88:67:8B:B4:FA:91:74:88:25:88:0C:2D:9A:18:E7:DD:03:C0
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F43285848B35B6EDC1FEC1A9ED3691D80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76127ed4-ae51-3b3e-9654-3bd26500081a.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 19886
IP address blocks: 171.162.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6e:dc:1f:ec:1a:9e:d3:69:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=ef59899b-834f-4cfb-9c37-22f7ebcc8057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:5e:a1:5f:ea:fd:fd:c4:60:38:16:1d:5f:
72:f7:96:75:92:f0:e2:ba:b7:d1:d9:d6:03:15:62:
55:90:38:9f:fd:9c:d0:a4:0e:d8:c8:be:a2:22:1c:
30:d6:4d:ce:38:80:93:25:d2:e0:da:a1:0e:12:53:
a2:ef:00:94:80:44:ab:ae:6a:16:be:b2:51:1e:92:
a2:ff:44:5c:15:78:8b:d3:e3:da:3c:5f:34:49:35:
00:10:df:7d:22:7a:65:f1:71:cb:c8:d8:9f:9c:68:
52:91:9a:ea:db:6c:47:f3:55:ef:12:86:16:79:96:
61:e1:d4:e3:0b:cf:0a:4e:57:17:78:74:9e:c8:47:
2a:ec:a9:03:63:32:39:68:31:56:c8:e2:db:b1:b6:
45:a7:42:aa:44:00:0a:54:e2:77:4e:6c:4a:f0:ce:
ab:52:4a:f1:74:1a:0a:30:e2:9f:77:18:37:13:9d:
4e:c0:20:3f:6f:af:41:d6:79:0f:8c:94:56:e7:3e:
46:86:6e:72:cc:8b:ec:04:21:6f:51:08:ea:04:f9:
91:90:0d:94:fe:fb:c7:b0:35:88:d6:c0:cf:a1:fc:
aa:37:81:d1:e5:20:fc:e1:44:ed:70:23:75:49:55:
40:88:7a:4e:d3:f9:11:11:20:95:93:84:35:11:17:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:88:67:8B:B4:FA:91:74:88:25:88:0C:2D:9A:18:E7:DD:03:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76127ed4-ae51-3b3e-9654-3bd26500081a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.162.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:7a:f7:33:1b:de:8f:11:d2:14:34:b7:1e:03:35:44:5f:7b:
4a:b2:9b:09:6d:95:d5:e6:fa:e8:3e:84:69:4f:ea:20:c1:be:
8f:db:b9:6b:85:5a:01:25:0b:84:de:24:83:92:6d:f4:7f:3b:
2a:24:4b:1b:6c:d5:72:47:98:12:8d:b7:17:06:11:4c:29:1d:
7f:d5:ca:4c:c9:d4:55:32:c4:e1:98:23:98:84:6d:9b:b8:f9:
dc:7d:79:f9:c7:06:ef:a6:fe:70:87:1f:0d:f1:35:d8:ad:17:
cb:a7:ab:51:72:f3:dc:e6:65:cb:78:5a:3e:8d:59:bc:3e:2d:
ee:22:ca:e6:85:98:59:b4:78:9e:c0:20:29:2a:f4:87:7b:71:
21:19:fc:35:75:75:bd:f4:81:6c:8d:32:50:8f:b3:c4:d6:36:
9c:97:04:c9:96:57:d1:b3:65:9d:4d:e5:1e:39:3f:e5:f1:2b:
4d:20:88:bf:87:2c:42:cf:66:aa:35:31:c8:30:fc:35:fc:67:
31:b3:bc:1d:91:cb:13:1d:1a:47:49:a4:e3:94:01:6d:28:36:
49:ad:3c:38:ea:07:4e:56:d2:ba:ae:49:24:9d:41:e6:ca:62:
fa:c3:97:06:1d:69:35:9f:d3:14:e2:87:91:77:21:0e:8a:0d:
30:95:dc:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW27cH+wantNpHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWY1OTg5OWItODM0Zi00Y2ZiLTljMzctMjJmN2ViY2M4MDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXdeoV/q/f3EYDgWHV9y95Z1kvDiurfR2dYD
FWJVkDif/ZzQpA7YyL6iIhww1k3OOICTJdLg2qEOElOi7wCUgESrrmoWvrJRHpKi
/0RcFXiL0+PaPF80STUAEN99Inpl8XHLyNifnGhSkZrq22xH81XvEoYWeZZh4dTj
C88KTlcXeHSeyEcq7KkDYzI5aDFWyOLbsbZFp0KqRAAKVOJ3TmxK8M6rUkrxdBoK
MOKfdxg3E51OwCA/b69B1nkPjJRW5z5Ghm5yzIvsBCFvUQjqBPmRkA2U/vvHsDWI
1sDPofyqN4HR5SD84UTtcCN1SVVAiHpO0/kRESCVk4Q1ERc0jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECriGeLtPqRdIgliAwtmhjn3QPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNzYxMjdlZDQtYWU1MS0z
YjNlLTk2NTQtM2JkMjY1MDAwODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZ69zMb3o8R0hQ0tx4DNURfe0qymwltldXm+ug+hGlP6iDBvo/buWuF
WgElC4TeJIOSbfR/OyokSxts1XJHmBKNtxcGEUwpHX/VykzJ1FUyxOGYI5iEbZu4
+dx9efnHBu+m/nCHHw3xNditF8unq1Fy89zmZct4Wj6NWbw+Le4iyuaFmFm0eJ7A
ICkq9Id7cSEZ/DV1db30gWyNMlCPs8TWNpyXBMmWV9GzZZ1N5R45P+XxK00giL+H
LELPZqo1Mcgw/DX8ZzGzvB2RyxMdGkdJpOOUAW0oNkmtPDjqB05W0rquSSSdQebK
YvrDlwYdaTWf0xTih5F3IQ6KDTCV3H4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:59:31 2025 by rpki-client