Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d84065c-5009-3467-bc1d-891ad7a187d9.roa
File: 3d84065c-5009-3467-bc1d-891ad7a187d9.roa (raw, json)
Hash identifier: awuWAc9ZH9nLyYY1IL+ZhFdTTx44Fefgu5H/JOH/mzU=
Subject key identifier: 4D:F6:90:55:26:E0:22:09:75:41:C3:71:16:32:FC:E5:DC:7B:18:DF
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285848A1361CEEE233F4271CEC2F80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d84065c-5009-3467-bc1d-891ad7a187d9.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1c:ee:e2:33:f4:27:1c:ec:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=3eb6dfe1-1bf6-4192-968b-deb8ee2ba9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:2e:cc:2e:81:25:c3:14:8b:43:19:1d:bd:
78:82:5f:ad:84:50:62:36:eb:90:89:3f:a2:4b:48:
8b:c9:f9:2c:fa:12:30:74:ae:d7:a9:a1:72:3e:13:
80:3c:5c:fd:7d:15:11:7f:e4:63:4a:6a:18:33:d1:
e8:b6:bd:35:42:dc:ff:20:61:24:3b:19:9f:1e:7d:
0b:7e:b9:89:0e:fb:ef:6c:7b:dd:60:25:0a:62:4c:
b9:63:71:f0:25:6b:96:61:a1:7f:76:e3:df:0d:17:
38:a2:66:ce:e8:af:63:cc:f2:68:69:80:e3:de:37:
95:45:57:f2:e8:4a:b6:7e:79:a8:52:d9:11:f0:7c:
89:4a:bb:34:51:89:8a:9c:46:19:76:fa:e5:b5:bf:
60:c4:04:68:15:12:1c:0b:de:3c:20:d0:6e:7e:f9:
4d:7e:ed:84:cd:8c:96:0d:64:86:a8:7a:15:b5:72:
68:50:13:ac:08:26:c3:33:7e:84:22:c8:d4:d0:01:
f1:75:ae:4b:a6:41:1a:18:1c:7d:9f:e9:3e:30:83:
e2:92:9a:0b:c0:84:71:0b:7e:03:25:de:f6:2b:14:
32:d0:77:10:88:40:5e:2a:60:c3:50:5c:f6:b0:ce:
27:21:8f:ec:58:ae:99:56:87:82:00:55:3c:dc:0c:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:90:55:26:E0:22:09:75:41:C3:71:16:32:FC:E5:DC:7B:18:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d84065c-5009-3467-bc1d-891ad7a187d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:3d:cb:ab:a9:3e:52:90:74:6e:2f:25:36:09:79:f0:b9:fb:
e1:6f:1f:d9:e9:d1:69:b1:2b:a1:a7:dc:ac:85:8e:9a:18:96:
a5:90:85:c8:1e:a9:f4:c7:d4:bb:1a:9e:ae:81:07:c9:d6:a3:
63:48:a7:64:21:eb:60:99:27:02:f3:90:64:ad:a3:c9:6c:46:
f3:53:fd:d7:1a:19:5c:42:3d:46:f6:54:98:e8:8f:ad:aa:50:
d2:d8:8b:f5:00:01:bf:85:7d:b3:af:a6:a8:b7:78:dd:dc:87:
08:b9:a4:40:4d:3b:23:2d:ff:e1:9a:c4:67:01:75:64:2a:bb:
cc:b9:e5:00:30:a5:73:a4:73:d5:df:84:7f:e1:e5:e6:da:87:
b1:46:ba:c0:4d:4e:79:33:7a:2f:3d:ce:63:15:df:1c:bf:35:
a3:81:04:57:d8:27:db:10:c2:54:da:2b:dd:97:b9:3a:26:dc:
10:a0:b7:2c:c9:55:35:56:c6:69:d9:1d:65:3d:91:ba:39:2c:
93:44:2e:32:81:9e:95:ab:23:98:78:76:4c:3f:c7:b5:e2:24:
a0:36:47:9e:d7:5a:77:f7:23:35:b2:3a:47:d2:f7:c1:84:d3:
84:1d:3a:8a:76:aa:d3:f6:b6:74:c8:3b:e2:0e:76:f3:c7:70:
ac:e3:05:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhzu4jP0JxzsL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
M2ViNmRmZTEtMWJmNi00MTkyLTk2OGItZGViOGVlMmJhOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIsuzC6BJcMUi0MZHb14gl+thFBiNuuQiT+i
S0iLyfks+hIwdK7XqaFyPhOAPFz9fRURf+RjSmoYM9Hotr01Qtz/IGEkOxmfHn0L
frmJDvvvbHvdYCUKYky5Y3HwJWuWYaF/duPfDRc4ombO6K9jzPJoaYDj3jeVRVfy
6Eq2fnmoUtkR8HyJSrs0UYmKnEYZdvrltb9gxARoFRIcC948INBufvlNfu2EzYyW
DWSGqHoVtXJoUBOsCCbDM36EIsjU0AHxda5LpkEaGBx9n+k+MIPikpoLwIRxC34D
Jd72KxQy0HcQiEBeKmDDUFz2sM4nIY/sWK6ZVoeCAFU83AyUgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE32kFUm4CIJdUHDcRYy/OXcexjfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvM2Q4NDA2NWMtNTAwOS0z
NDY3LWJjMWQtODkxYWQ3YTE4N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA9y6upPlKQdG4vJTYJefC5++FvH9np0WmxK6Gn3KyFjpoYlqWQhcge
qfTH1Lsanq6BB8nWo2NIp2Qh62CZJwLzkGSto8lsRvNT/dcaGVxCPUb2VJjoj62q
UNLYi/UAAb+FfbOvpqi3eN3chwi5pEBNOyMt/+GaxGcBdWQqu8y55QAwpXOkc9Xf
hH/h5ebah7FGusBNTnkzei89zmMV3xy/NaOBBFfYJ9sQwlTaK92XuTom3BCgtyzJ
VTVWxmnZHWU9kbo5LJNELjKBnpWrI5h4dkw/x7XiJKA2R57XWnf3IzWyOkfS98GE
04QdOop2qtP2tnTIO+IOdvPHcKzjBVE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:09 2025 by rpki-client