Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa
File: cb6b13a4-533f-3f52-bc18-86463fde6494.roa (raw, json)
Hash identifier: itkRsWCrYpeHO7SrkyZ+wKlp0o4FkJya5Xkyr3qSdYo=
Subject key identifier: 7A:57:8D:2B:B8:D8:AF:11:58:BF:30:1A:49:BC:12:C8:34:A6:BA:7A
Certificate issuer: /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial: 010D0C9F432858490B4C1FF02C5DD592808A6780
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 22768
IP address blocks: 152.160.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1f:f0:2c:5d:d5:92:80:8a:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=3a36d838-a209-46ac-95a6-845c55121d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:21:5c:28:44:9b:b6:d8:08:1a:5e:c8:85:
95:b9:14:0c:f5:38:23:70:92:be:a9:d0:7d:c0:2f:
e9:f1:9b:fe:c9:b3:f1:9f:d3:25:17:ca:b4:d6:f0:
aa:85:0f:d9:c0:4b:66:16:12:52:76:86:92:4f:43:
6b:9f:cb:21:51:c8:ca:a5:fc:70:57:c4:49:96:20:
a4:c0:74:4d:93:9d:19:19:40:a6:c2:bd:5f:e7:af:
83:cd:6e:44:d1:6f:1a:06:7d:08:87:7e:4c:af:4d:
db:62:0e:ca:ae:12:92:d4:e5:3f:a1:61:77:c0:40:
16:d2:1c:c8:21:84:d8:94:36:2e:2f:d9:9b:2c:d2:
41:5f:fe:e3:a7:1b:eb:c5:6e:a8:65:98:9c:cd:00:
26:68:68:49:15:4b:a5:ee:4f:2e:5a:21:14:d9:d8:
e5:6d:e7:05:4a:d8:11:5f:24:55:bc:ec:3a:40:f2:
11:0e:88:b0:97:6a:06:11:36:e7:c4:14:f0:b2:df:
da:20:6e:f8:25:f1:03:a0:a8:2c:4d:5d:27:b4:99:
4b:61:c0:c5:2d:ce:ba:16:5c:10:fa:9c:91:93:74:
56:a4:08:37:e1:4c:3e:17:33:cb:8c:6f:53:cb:6e:
f1:25:ba:f7:76:66:a1:e5:d5:f0:94:a9:c4:5d:f5:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:8D:2B:B8:D8:AF:11:58:BF:30:1A:49:BC:12:C8:34:A6:BA:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl
X509v3 Authority Key Identifier:
keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
sbgp-ipAddrBlock: critical
IPv4:
152.160.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:9f:5c:92:ef:2c:a1:a7:dc:9e:13:b9:32:96:e4:60:95:82:
fe:2a:62:c6:3e:a4:3a:ef:e1:9e:3e:93:b6:47:1e:b0:46:86:
f9:bd:de:d0:98:87:61:ed:d6:25:a2:e5:2f:da:28:47:28:ca:
6c:c6:27:5d:4c:cf:de:92:46:f0:2e:33:f4:23:6b:8c:2f:d8:
ce:ef:a6:4a:30:13:f3:42:c1:d3:8f:b9:5f:c9:b4:72:f5:b5:
30:fa:e4:05:b6:5d:3e:ac:e0:e0:7a:53:75:e7:f3:8f:3b:b9:
c9:02:b5:60:3b:ad:c6:11:9a:db:45:49:61:4d:8c:c5:fe:e3:
31:08:6b:30:46:b0:1d:d3:5a:bf:b9:37:96:89:2e:b1:39:b1:
04:e1:3c:21:3b:00:77:4e:91:f7:6c:1c:8f:76:5f:4b:95:e7:
d8:8b:91:d3:39:e8:a9:d8:f9:ce:be:b7:16:1b:98:ef:60:94:
10:6b:1a:d2:20:8b:f7:5d:c2:bc:44:31:b8:7e:3e:d0:13:b4:
ea:e5:bd:c0:17:d4:9c:5a:84:7f:06:76:5d:d0:21:c3:dd:f8:
92:30:24:3c:a4:f3:e1:7d:58:57:03:cb:95:d4:f8:f3:61:1c:
c4:5b:20:dc:be:cd:fb:5d:70:c4:b3:9b:4a:6f:16:15:d4:d8:
f3:d9:d2:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTB/wLF3VkoCKZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiY2E1NDYtY2E4MS00OGY1LWJkZDQtOGMxMTFiYTUy
M2VhMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
M2EzNmQ4MzgtYTIwOS00NmFjLTk1YTYtODQ1YzU1MTIxZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBQhXChEm7bYCBpeyIWVuRQM9TgjcJK+qdB9
wC/p8Zv+ybPxn9MlF8q01vCqhQ/ZwEtmFhJSdoaST0Nrn8shUcjKpfxwV8RJliCk
wHRNk50ZGUCmwr1f56+DzW5E0W8aBn0Ih35Mr03bYg7KrhKS1OU/oWF3wEAW0hzI
IYTYlDYuL9mbLNJBX/7jpxvrxW6oZZiczQAmaGhJFUul7k8uWiEU2djlbecFStgR
XyRVvOw6QPIRDoiwl2oGETbnxBTwst/aIG74JfEDoKgsTV0ntJlLYcDFLc66FlwQ
+pyRk3RWpAg34Uw+FzPLjG9Ty27xJbr3dmah5dXwlKnEXfUsuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpXjSu42K8RWL8wGkm8Esg0prp6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJj
YTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJhNTIzZWEvY2I2YjEzYTQtNTMzZi0z
ZjUyLWJjMTgtODY0NjNmZGU2NDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2FiY2E1NDYtY2E4MS00OGY1LWJk
ZDQtOGMxMTFiYTUyM2VhLzNhYmNhNTQ2LWNhODEtNDhmNS1iZGQ0LThjMTExYmE1
MjNlYS5jcmwwHwYDVR0jBBgwFoAUoYEZY9Vg9XWnqQ30oiBjUGbpybAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzEx
MWJhNTIzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmKCDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6fXJLvLKGn3J4TuTKW5GCVgv4qYsY+pDrv4Z4+k7ZHHrBGhvm93tCY
h2Ht1iWi5S/aKEcoymzGJ11Mz96SRvAuM/Qja4wv2M7vpkowE/NCwdOPuV/JtHL1
tTD65AW2XT6s4OB6U3Xn8487uckCtWA7rcYRmttFSWFNjMX+4zEIazBGsB3TWr+5
N5aJLrE5sQThPCE7AHdOkfdsHI92X0uV59iLkdM56KnY+c6+txYbmO9glBBrGtIg
i/ddwrxEMbh+PtATtOrlvcAX1JxahH8Gdl3QIcPd+JIwJDyk8+F9WFcDy5XU+PNh
HMRbINy+zftdcMSzm0pvFhXU2PPZ0m4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:28:28 2025 by rpki-client