Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa
File: ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa (raw, json)
Hash identifier: 2kkwwzQvzm2fi68OorjU8+RjWHdvBLmKdsPfFEw1/KA=
Subject key identifier: DA:B1:50:BC:C1:A1:B8:DD:8E:08:F1:57:66:5B:FB:5F:08:51:5C:AC
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858487C7A86B4B1776DFC55746AC0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa
Signing time: Thu 09 Jan 2025 10:14:00 +0000
ROA not before: Thu 09 Jan 2025 10:14:00 +0000
ROA not after: Wed 09 Apr 2025 09:14:00 +0000
asID: 31898
IP address blocks: 161.69.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:7a:86:b4:b1:77:6d:fc:55:74:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 9 10:14:00 2025 GMT
Not After : Apr 9 09:14:00 2025 GMT
Subject: CN=c3aee3b4-333e-4962-bf8c-64a23295081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:9d:88:8e:54:92:c6:52:70:3e:c0:29:9e:
e8:0b:78:0f:7e:93:f8:e8:85:11:f8:ae:bb:dd:d6:
1e:24:35:81:a2:1a:5a:9e:75:e5:8d:1b:cc:b6:e1:
7b:49:51:e3:05:73:29:99:a7:0e:b3:c4:14:41:fa:
84:a1:68:d2:9e:f2:9e:7b:3f:5f:42:62:cf:94:8b:
18:d9:8d:63:d3:64:b2:08:ee:24:b0:5b:40:d8:7f:
75:69:86:9c:e8:ad:aa:21:d5:1b:85:fa:48:ca:06:
21:07:f9:0f:58:dd:a7:01:7d:e5:12:c4:9d:5d:2e:
3b:3d:09:75:f2:a4:2e:79:80:88:e9:33:53:f7:75:
de:fc:00:a4:4a:8a:59:7f:db:c6:02:57:b7:ac:71:
af:79:71:ce:76:a9:33:71:92:e9:57:92:64:f2:88:
a0:f9:92:ce:49:ac:57:5e:3a:79:5e:09:51:50:a3:
e3:7e:3c:28:c5:3b:f1:5d:bc:ae:08:94:87:04:2c:
68:bc:57:e0:bd:17:c9:dd:9e:6b:46:45:47:14:42:
8e:5d:9c:8f:76:17:b5:59:17:84:a8:85:91:c6:7c:
62:e8:47:1b:0f:c5:50:08:f3:90:40:7f:7c:e9:8b:
a2:26:d3:80:bc:1e:19:15:0f:97:78:0b:1f:d9:ee:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:50:BC:C1:A1:B8:DD:8E:08:F1:57:66:5B:FB:5F:08:51:5C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:f6:36:66:82:c4:40:2e:92:9f:cf:38:09:31:81:0d:eb:38:
fe:f9:df:ae:a1:ca:4e:91:4a:22:b6:c0:f5:21:63:2f:96:ca:
f7:a4:cd:7b:00:e7:d9:41:3f:40:0f:fc:2b:7f:0d:d2:f9:1e:
0d:96:c4:e7:c1:6a:4a:49:e9:bc:26:20:cf:97:ed:3e:e4:b0:
77:df:49:65:88:b6:02:9d:e3:e2:ee:9a:7e:be:0d:1f:f6:00:
da:19:a7:e9:7d:24:2c:dd:ce:12:0b:2f:97:a3:c2:fd:22:c3:
5c:c1:37:c3:d3:df:d9:07:33:f4:a0:da:6b:84:24:1d:36:f5:
aa:40:7d:9f:28:01:5c:79:fa:51:4c:4b:bb:8e:78:af:d1:78:
63:f2:90:cf:de:43:60:d0:64:82:f7:d5:f5:c9:2b:a3:d8:9e:
35:9e:94:2e:04:bd:78:a6:be:71:22:6e:6f:0a:91:df:51:48:
91:7b:0a:c2:43:53:ef:1e:4f:7a:be:2b:6b:76:bb:8c:d2:77:
cf:7b:a0:a5:84:70:0b:14:58:55:2f:41:ab:0d:fa:4a:96:1e:
80:92:d6:19:88:6c:ed:bc:00:0e:6c:1c:b2:d4:b3:fa:08:49:
7c:cd:d3:ce:5f:c9:6c:25:5e:58:c7:ba:b8:a4:6f:c7:34:02:
01:6d:46:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh8eoa0sXdt/FV0asAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDEwOTEwMTQwMFoXDTI1MDQwOTA5MTQwMFowLzEtMCsGA1UEAxMk
YzNhZWUzYjQtMzMzZS00OTYyLWJmOGMtNjRhMjMyOTUwODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTOdiI5UksZScD7AKZ7oC3gPfpP46IUR+K67
3dYeJDWBohpannXljRvMtuF7SVHjBXMpmacOs8QUQfqEoWjSnvKeez9fQmLPlIsY
2Y1j02SyCO4ksFtA2H91aYac6K2qIdUbhfpIygYhB/kPWN2nAX3lEsSdXS47PQl1
8qQueYCI6TNT93Xe/ACkSopZf9vGAle3rHGveXHOdqkzcZLpV5Jk8oig+ZLOSaxX
Xjp5XglRUKPjfjwoxTvxXbyuCJSHBCxovFfgvRfJ3Z5rRkVHFEKOXZyPdhe1WReE
qIWRxnxi6EcbD8VQCPOQQH986YuiJtOAvB4ZFQ+XeAsf2e7MKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqxULzBobjdjgjxV2Zb+18IUVysMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWMwYTRiZGEtOTE3MC0z
YTRiLThhMjQtYTdkOTAwMzFhMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD32NmaCxEAukp/POAkxgQ3rOP75366hyk6RSiK2wPUhYy+WyvekzXsA
59lBP0AP/Ct/DdL5Hg2WxOfBakpJ6bwmIM+X7T7ksHffSWWItgKd4+Lumn6+DR/2
ANoZp+l9JCzdzhILL5ejwv0iw1zBN8PT39kHM/Sg2muEJB029apAfZ8oAVx5+lFM
S7uOeK/ReGPykM/eQ2DQZIL31fXJK6PYnjWelC4EvXimvnEibm8Kkd9RSJF7CsJD
U+8eT3q+K2t2u4zSd897oKWEcAsUWFUvQasN+kqWHoCS1hmIbO28AA5sHLLUs/oI
SXzN085fyWwlXljHurikb8c0AgFtRu0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:23:28 2025 by rpki-client