Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c6ceaec3-4918-3a28-b706-ff60e42aeeda.roa
File: c6ceaec3-4918-3a28-b706-ff60e42aeeda.roa (raw, json)
Hash identifier: 2W9wV0tnzZyHsiX5mF41EDwKaKeEtZCnE7VVn/KcfDY=
Subject key identifier: 7F:8D:52:02:29:1B:0B:8D:DB:58:38:56:6D:C0:4D:CF:8B:23:F8:83
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6080BF8822FD7FEC6A180
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c6ceaec3-4918-3a28-b706-ff60e42aeeda.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:08:0b:f8:82:2f:d7:fe:c6:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=36a582c1-b383-4651-9f62-df6e9920b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:51:cc:1e:0f:3a:1d:85:f8:e2:e8:bf:9a:
73:e7:f2:ea:58:f1:31:04:01:8d:ca:64:f2:8e:9f:
87:1a:36:02:fd:1f:af:64:42:f0:65:02:f8:6f:00:
de:ca:6f:04:10:38:4a:fb:6b:ba:dd:fc:a0:af:63:
ea:c5:66:d9:d9:fb:76:d4:8d:c9:84:54:48:32:bf:
3b:8e:e0:79:54:dc:0f:ab:df:fe:b7:6e:9b:88:2f:
12:55:ff:3b:71:41:67:bd:a1:e9:c1:2b:c6:6b:b5:
c8:5f:4b:04:cd:4b:ab:d9:24:33:e1:0e:be:ca:77:
c4:fb:57:52:bf:57:d8:48:ef:bb:cf:9e:a4:5d:9a:
54:ef:75:ab:9e:9b:bd:be:60:17:56:6d:c7:fa:ab:
26:d8:9e:1e:a2:f5:ae:b7:d0:34:43:92:7b:ce:96:
a4:8f:78:d6:db:e6:d3:2e:3b:a6:68:32:48:3b:3f:
e3:15:93:23:d2:e2:05:5d:cd:2f:84:19:58:e4:db:
92:e4:31:a0:a4:d1:58:5a:10:50:e9:df:a3:2e:67:
d9:c8:0c:f2:79:7e:b1:8f:78:68:7d:00:c2:4a:fc:
45:99:19:aa:27:03:b7:17:54:1c:97:3c:19:4d:0e:
fd:c9:31:ce:c6:ad:2e:b6:37:b5:e6:81:d2:50:9f:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:52:02:29:1B:0B:8D:DB:58:38:56:6D:C0:4D:CF:8B:23:F8:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c6ceaec3-4918-3a28-b706-ff60e42aeeda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:25:0c:d8:d8:02:13:d2:bb:e3:1a:1f:94:4d:b5:3f:7b:e1:
bd:39:a0:e8:d6:d9:fe:91:1d:a2:57:48:a0:eb:28:f6:05:5a:
fd:71:c3:60:92:45:f6:2a:59:cf:98:a5:7c:c4:0e:97:71:35:
3a:2f:7e:cb:45:08:e7:fc:44:ac:9e:42:63:40:40:8d:41:f0:
79:c4:10:98:36:95:23:12:f8:a8:a2:93:60:79:7b:d2:2a:b8:
fa:df:61:52:0b:f2:8d:05:df:40:15:ac:26:19:1a:30:7d:32:
62:2c:26:a0:ac:2d:5d:d3:9c:e2:2c:21:38:16:c0:68:34:6d:
aa:09:8e:be:c8:a5:ab:b9:15:1f:92:43:a3:30:a7:07:cd:d5:
b7:83:a8:25:7e:63:51:a7:63:d4:43:86:fc:80:51:52:3a:aa:
06:b3:a9:66:c3:a9:9a:2e:6a:c2:61:37:3a:06:cd:f4:c8:b9:
51:f8:31:35:42:69:87:bf:74:fe:06:06:cd:38:6a:26:06:a5:
17:7f:95:e7:38:a9:30:ac:c1:83:67:a9:09:cd:35:08:ed:03:
76:60:58:4b:2b:b2:5a:07:19:68:95:13:d6:76:60:23:7c:cb:
83:2a:89:62:d2:50:5a:2a:ae:ea:1b:f9:6e:5d:b0:e3:dd:8a:
9a:85:d5:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1ggL+IIv1/7GoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzZhNTgyYzEtYjM4My00NjUxLTlmNjItZGY2ZTk5MjBiODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D5RzB4POh2F+OLov5pz5/LqWPExBAGNymTy
jp+HGjYC/R+vZELwZQL4bwDeym8EEDhK+2u63fygr2PqxWbZ2ft21I3JhFRIMr87
juB5VNwPq9/+t26biC8SVf87cUFnvaHpwSvGa7XIX0sEzUur2SQz4Q6+ynfE+1dS
v1fYSO+7z56kXZpU73Wrnpu9vmAXVm3H+qsm2J4eovWut9A0Q5J7zpakj3jW2+bT
LjumaDJIOz/jFZMj0uIFXc0vhBlY5NuS5DGgpNFYWhBQ6d+jLmfZyAzyeX6xj3ho
fQDCSvxFmRmqJwO3F1QclzwZTQ79yTHOxq0utje15oHSUJ9bPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+NUgIpGwuN21g4Vm3ATc+LI/iDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzZjZWFlYzMtNDkxOC0z
YTI4LWI3MDYtZmY2MGU0MmFlZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAclDNjYAhPSu+MaH5RNtT974b05oOjW2f6RHaJXSKDrKPYFWv1xw2CS
RfYqWc+YpXzEDpdxNTovfstFCOf8RKyeQmNAQI1B8HnEEJg2lSMS+Kiik2B5e9Iq
uPrfYVIL8o0F30AVrCYZGjB9MmIsJqCsLV3TnOIsITgWwGg0baoJjr7Ipau5FR+S
Q6MwpwfN1beDqCV+Y1GnY9RDhvyAUVI6qgazqWbDqZouasJhNzoGzfTIuVH4MTVC
aYe/dP4GBs04aiYGpRd/lec4qTCswYNnqQnNNQjtA3ZgWEsrsloHGWiVE9Z2YCN8
y4MqiWLSUFoqruob+W5dsOPdipqF1RY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:28:24 2025 by rpki-client