Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
File: 98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa (raw, json)
Hash identifier: uP8dOAPwhovSpTrIjveiABR4/DSWi/D12+wW6i4b2nY=
Subject key identifier: 88:63:B4:69:AB:D8:D0:30:4F:4E:CB:6B:9C:55:35:00:35:D2:87:A8
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F43285848A400B5AA2C7C04A9C3E40700
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 14555
IP address blocks: 170.10.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b5:aa:2c:7c:04:a9:c3:e4:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=f09704c1-9a70-4f2d-af55-d55603a07dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:0b:4e:07:e6:0b:40:d3:9b:e0:1c:02:c2:
8f:25:61:80:03:f7:57:cd:62:19:31:14:96:21:71:
6a:fb:b9:24:0b:c8:bf:99:bd:2e:38:99:15:e8:dc:
64:4e:68:3e:a0:01:71:51:54:85:74:49:f2:78:86:
39:eb:95:c1:ac:6d:a0:d5:59:0a:49:81:5c:65:20:
0d:81:c9:13:97:75:e0:66:33:4d:f7:e1:5d:ab:cb:
b6:b4:42:ab:d5:70:fa:62:48:f0:94:32:df:51:de:
6d:16:f0:e5:82:de:78:d8:53:5b:65:67:e8:fd:a7:
f1:de:87:78:2c:b8:14:7e:09:05:38:5c:bd:65:6e:
24:d1:73:d2:9d:66:be:75:3f:a9:5e:ec:ae:a2:a9:
26:d5:7a:14:f0:8a:96:04:53:36:26:04:85:be:fb:
0c:dd:16:6b:95:06:45:da:fc:c0:71:22:53:02:68:
db:f6:e0:14:f7:73:c9:3a:e7:95:bd:02:f1:fc:ee:
bb:61:5b:67:44:99:70:dc:8e:57:5c:83:46:bf:fb:
a2:eb:66:5d:e4:fd:91:ea:c7:21:6c:d9:ea:6a:11:
f5:a3:32:4c:fe:71:53:97:b2:99:12:55:61:ef:be:
bd:eb:30:43:a7:1f:2f:02:06:21:7c:fc:aa:f7:78:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:B4:69:AB:D8:D0:30:4F:4E:CB:6B:9C:55:35:00:35:D2:87:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ad:82:a0:b5:86:99:d1:3d:3a:85:36:de:6b:d2:2c:29:8e:
c3:32:53:f7:1e:92:a4:0e:85:14:a5:85:96:1e:2f:78:2e:c8:
9b:ca:cb:84:98:55:01:3f:1a:48:e7:d8:ff:34:99:0f:4c:b6:
4b:a8:96:b0:44:dd:c5:f7:1a:67:b2:1a:19:80:1d:89:24:66:
76:cc:34:6f:10:86:b3:df:9a:d2:3e:84:fb:82:95:b5:9a:13:
55:18:df:6b:03:aa:01:9c:7b:e6:55:64:be:0f:78:b1:74:82:
8a:bf:9e:cd:e2:dc:2f:8b:0f:d8:39:91:20:d3:7d:41:f0:66:
db:8d:89:b3:98:db:b2:d6:62:ae:74:22:58:10:2d:33:2e:29:
94:17:a9:28:e2:36:c9:72:d6:d1:c0:90:ed:ea:83:fb:73:cb:
d4:6d:11:5e:20:15:d2:df:a4:87:b1:37:8b:ee:bb:db:92:4c:
f8:0c:37:cc:52:4e:ad:dc:17:39:43:59:30:dc:df:4a:f1:25:
54:74:42:9c:b2:de:70:73:43:b2:8c:cb:1d:6a:3e:80:db:ec:
9e:f7:ec:cf:45:e2:ec:92:74:1d:1e:ac:6f:4d:3e:0b:d6:ff:
bb:a3:90:a2:ea:d5:13:ea:ac:a5:16:19:0d:ff:12:24:dd:c5:
7c:ed:52:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALWqLHwEqcPkBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjA5NzA0YzEtOWE3MC00ZjJkLWFmNTUtZDU1NjAzYTA3ZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mALTgfmC0DTm+AcAsKPJWGAA/dXzWIZMRSW
IXFq+7kkC8i/mb0uOJkV6NxkTmg+oAFxUVSFdEnyeIY565XBrG2g1VkKSYFcZSAN
gckTl3XgZjNN9+Fdq8u2tEKr1XD6YkjwlDLfUd5tFvDlgt542FNbZWfo/afx3od4
LLgUfgkFOFy9ZW4k0XPSnWa+dT+pXuyuoqkm1XoU8IqWBFM2JgSFvvsM3RZrlQZF
2vzAcSJTAmjb9uAU93PJOueVvQLx/O67YVtnRJlw3I5XXINGv/ui62Zd5P2R6sch
bNnqahH1ozJM/nFTl7KZElVh77696zBDpx8vAgYhfPyq93gnSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhjtGmr2NAwT07La5xVNQA10oeoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvOThmN2NjM2QtNmY4ZS0z
YTA2LWExOWYtYTBjMDM2NDBiYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgqoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGitgqC1hpnRPTqFNt5r0iwpjsMyU/cekqQOhRSlhZYeL3guyJvKy4SY
VQE/Gkjn2P80mQ9MtkuolrBE3cX3GmeyGhmAHYkkZnbMNG8QhrPfmtI+hPuClbWa
E1UY32sDqgGce+ZVZL4PeLF0goq/ns3i3C+LD9g5kSDTfUHwZtuNibOY27LWYq50
IlgQLTMuKZQXqSjiNsly1tHAkO3qg/tzy9RtEV4gFdLfpIexN4vuu9uSTPgMN8xS
Tq3cFzlDWTDc30rxJVR0Qpyy3nBzQ7KMyx1qPoDb7J737M9F4uySdB0erG9NPgvW
/7ujkKLq1RPqrKUWGQ3/EiTdxXztUow=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:47:38 2025 by rpki-client