Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4510497e-4be9-3c7b-a852-32c65b12dc51.roa
File: 4510497e-4be9-3c7b-a852-32c65b12dc51.roa (raw, json)
Hash identifier: ZxDVVoSyFB87qwtLP2oxvKq34TwTJzMS9dXrf6dRCUU=
Subject key identifier: 88:6B:CE:66:D4:76:E5:1A:43:0A:5E:AC:3B:61:3A:C3:2B:0F:A3:BD
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F43285848BA563085BC4627DEEDC01680
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4510497e-4be9-3c7b-a852-32c65b12dc51.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 23470
IP address blocks: 173.249.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:30:85:bc:46:27:de:ed:c0:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=46d03d23-2129-4700-bb03-353a408bc86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:17:62:5d:94:65:7b:e6:65:fc:04:b2:69:
c2:c5:4b:e6:23:33:c0:15:7b:d5:6c:b3:6a:23:84:
26:d1:18:7b:78:a8:3e:8a:87:1e:5e:03:4d:87:e8:
78:c8:7a:27:b5:9d:11:ca:5d:57:2c:84:14:67:65:
b7:1a:45:c0:3c:de:cd:9d:7b:c6:11:0f:8b:f0:a8:
e4:f5:f3:80:bd:45:4e:55:1d:d2:dc:c4:70:1c:cd:
54:9e:25:79:3a:b1:8d:9c:94:a4:a5:ec:ec:9a:79:
72:ea:b3:2f:70:c8:9d:8b:7e:f3:ed:a8:46:a2:e0:
e4:f2:9c:ab:fd:23:c4:96:74:fe:96:3b:40:ae:30:
f7:c1:d9:d0:b9:94:92:28:10:a3:5f:3b:23:0c:90:
6d:0a:d9:9a:23:72:42:af:25:fa:ea:b3:33:53:d3:
78:42:ea:86:4f:c1:5a:19:71:9e:d8:f1:23:0a:77:
ad:6e:0b:9b:11:79:99:6a:fc:b2:66:bf:4b:25:90:
e1:17:7c:da:1a:da:f0:c4:83:88:66:fe:34:d5:5b:
93:08:af:9e:2d:24:56:96:ec:68:39:18:5d:d7:4a:
41:c2:53:26:71:01:53:41:f9:e2:d9:2d:cd:d9:28:
96:2f:0c:28:b0:f3:16:cc:ec:4b:ab:9c:97:23:d7:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:CE:66:D4:76:E5:1A:43:0A:5E:AC:3B:61:3A:C3:2B:0F:A3:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4510497e-4be9-3c7b-a852-32c65b12dc51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
173.249.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:89:0f:4d:5b:b2:cf:94:2f:cf:d1:18:54:bf:59:95:2f:8e:
34:a8:9a:2b:a2:96:8e:2b:00:cb:23:9e:8a:d4:b8:8a:ad:e1:
44:02:3b:3a:5d:d4:13:58:70:9e:89:e1:42:07:de:50:35:3f:
c3:36:f8:6c:f8:9a:e5:25:f8:12:d2:a0:ee:f6:ec:ce:23:2a:
a6:87:ba:4d:d5:b9:47:d7:f1:06:2a:06:c9:b4:58:2f:ff:ce:
a7:94:e6:56:cf:c7:bb:75:f5:6b:ae:a9:a4:12:52:dd:2c:29:
58:6c:af:1e:65:f3:2e:e6:4e:e4:73:cf:7f:be:a3:47:99:0a:
34:8a:c3:74:68:3a:23:f3:be:b1:e4:46:4f:a9:3b:d7:82:07:
e5:76:89:be:d0:75:d1:ad:78:cd:80:5d:d5:d4:db:22:e3:17:
b3:18:94:c0:fb:9a:04:fc:38:a5:de:a1:9b:89:4c:8d:aa:e9:
6a:74:79:59:dc:80:b3:ef:05:d4:55:26:bc:ea:82:b3:96:af:
77:b1:96:06:32:37:b7:fb:8b:88:92:3b:38:cb:14:50:2d:02:
ab:32:01:db:f1:07:f6:34:23:c8:a9:e9:5c:38:f7:f2:b2:75:
eb:37:08:e9:84:aa:6f:80:36:d3:54:b8:c9:2a:54:94:52:78:
53:11:25:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VjCFvEYn3u3AFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
NDZkMDNkMjMtMjEyOS00NzAwLWJiMDMtMzUzYTQwOGJjODZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNYXYl2UZXvmZfwEsmnCxUvmIzPAFXvVbLNq
I4Qm0Rh7eKg+ioceXgNNh+h4yHontZ0Ryl1XLIQUZ2W3GkXAPN7NnXvGEQ+L8Kjk
9fOAvUVOVR3S3MRwHM1UniV5OrGNnJSkpezsmnly6rMvcMidi37z7ahGouDk8pyr
/SPElnT+ljtArjD3wdnQuZSSKBCjXzsjDJBtCtmaI3JCryX66rMzU9N4QuqGT8Fa
GXGe2PEjCnetbgubEXmZavyyZr9LJZDhF3zaGtrwxIOIZv401VuTCK+eLSRWluxo
ORhd10pBwlMmcQFTQfni2S3N2SiWLwwosPMWzOxLq5yXI9faiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhrzmbUduUaQwperDthOsMrD6O9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvNDUxMDQ5N2UtNGJlOS0z
YzdiLWE4NTItMzJjNjViMTJkYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfmkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuJD01bss+UL8/RGFS/WZUvjjSomiuilo4rAMsjnorUuIqt4UQCOzpd
1BNYcJ6J4UIH3lA1P8M2+Gz4muUl+BLSoO727M4jKqaHuk3VuUfX8QYqBsm0WC//
zqeU5lbPx7t19WuuqaQSUt0sKVhsrx5l8y7mTuRzz3++o0eZCjSKw3RoOiPzvrHk
Rk+pO9eCB+V2ib7QddGteM2AXdXU2yLjF7MYlMD7mgT8OKXeoZuJTI2q6Wp0eVnc
gLPvBdRVJrzqgrOWr3exlgYyN7f7i4iSOzjLFFAtAqsyAdvxB/Y0I8ip6Vw49/Ky
des3COmEqm+ANtNUuMkqVJRSeFMRJYo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:21 2025 by rpki-client