Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
File: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (raw, json)
Hash identifier: qqaR3NqEgsXxJFdg1Vn+NYMNvFFyJLOiSSN5gQn+Nio=
Subject key identifier: 31:B1:CE:C0:AB:84:AD:E0:BB:0C:B0:8A:35:78:C2:6D:4F:A5:E7:F6
Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial: 010D0C9F432858490E16C2DA7013021C26414C80
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 18986
IP address blocks: 148.163.160.0/24 maxlen: 24
148.163.161.0/24 maxlen: 24
148.163.162.0/24 maxlen: 24
148.163.163.0/24 maxlen: 24
148.163.164.0/24 maxlen: 24
148.163.165.0/24 maxlen: 24
148.163.166.0/24 maxlen: 24
148.163.167.0/24 maxlen: 24
148.163.168.0/24 maxlen: 24
148.163.169.0/24 maxlen: 24
148.163.170.0/24 maxlen: 24
148.163.171.0/24 maxlen: 24
148.163.172.0/24 maxlen: 24
148.163.173.0/24 maxlen: 24
148.163.174.0/24 maxlen: 24
148.163.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c2:da:70:13:02:1c:26:41:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=cf433054-c8b3-4256-93f9-040d473567b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:7f:ab:1e:07:07:cb:73:b5:dc:9d:dc:b5:
89:6d:66:66:e6:3a:a1:22:f1:ee:66:cb:cb:3a:14:
fb:ae:3c:81:12:a5:33:2a:49:b2:d8:dd:51:84:d3:
8b:12:9a:da:66:34:43:42:66:26:5b:cb:f7:2a:94:
ec:39:27:89:34:12:ab:7d:c6:76:e6:45:d3:1b:65:
fc:b3:00:c7:62:2b:2c:4b:f5:da:da:f8:00:88:ac:
6a:e4:a3:e9:4d:72:e1:94:3d:3d:a5:2a:e2:4f:03:
79:2c:53:38:95:15:92:1f:b9:b9:32:90:33:48:d3:
e0:7c:12:77:53:47:b6:7e:3e:ae:33:78:e6:35:fb:
a3:1d:8f:df:69:a2:5b:41:bf:5f:2d:d7:2c:16:13:
f9:84:bb:26:94:29:01:92:a8:d4:2c:4b:12:2c:26:
da:69:a4:6c:fb:ed:bf:3d:bd:99:59:ce:be:bc:3f:
bf:4f:33:be:60:89:61:6e:70:c5:f0:dc:5c:67:2a:
cf:db:68:d2:e7:7e:db:bf:89:44:dc:e3:27:18:d6:
38:3f:6a:1a:d9:20:62:3f:1e:d3:94:93:9c:80:21:
a6:7c:a9:bf:ef:43:a5:19:9f:e1:3a:a3:24:21:96:
32:2a:ff:61:73:97:f4:8c:7b:35:b3:eb:05:7c:04:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:CE:C0:AB:84:AD:E0:BB:0C:B0:8A:35:78:C2:6D:4F:A5:E7:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
X509v3 Authority Key Identifier:
keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
sbgp-ipAddrBlock: critical
IPv4:
148.163.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ba:85:9c:2f:23:0e:3c:54:46:1b:42:21:82:34:48:20:1b:
60:35:62:5a:fd:39:2f:96:18:ea:89:99:43:79:20:93:94:e3:
b4:f6:3a:14:97:ad:6e:e9:be:e2:4d:1c:72:d6:09:c3:1e:61:
e5:22:75:48:e5:9d:01:e0:63:9f:3f:f4:d5:ac:42:4c:d7:f6:
2f:c5:17:c2:d3:5b:a4:56:87:62:d7:b4:29:b6:96:2d:d7:e7:
6e:99:11:ab:62:0f:b0:ad:72:2e:01:b1:3e:fe:b6:06:e0:f1:
66:65:09:34:ad:16:8a:a6:d7:0b:a8:97:16:f1:bb:34:d6:f8:
7d:dc:98:63:d9:66:fe:1a:82:91:50:6f:d4:e7:8c:95:ee:ed:
ce:e9:8c:98:cb:29:fb:63:82:e9:b0:50:3f:ee:a7:23:0e:35:
0a:d5:45:8b:ad:2b:b5:da:cb:39:e3:4e:02:7e:24:37:bd:d5:
0a:30:cc:a3:17:19:8e:75:5e:a0:3b:a8:f4:b3:01:8e:e9:ae:
a6:bb:bf:67:3c:98:52:c8:d6:9a:f6:d3:fe:8d:b3:08:29:2f:
a1:3d:33:34:2e:cc:1f:3c:4a:c6:bb:f2:4e:1a:09:e1:ac:18:
37:ae:89:e3:4c:d9:92:bd:94:72:5b:63:0c:2c:17:d8:cc:d6:
ec:eb:9d:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsLacBMCHCZBTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4
ZmMxMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2Y0MzMwNTQtYzhiMy00MjU2LTkzZjktMDQwZDQ3MzU2N2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobp/qx4HB8tztdyd3LWJbWZm5jqhIvHuZsvL
OhT7rjyBEqUzKkmy2N1RhNOLEpraZjRDQmYmW8v3KpTsOSeJNBKrfcZ25kXTG2X8
swDHYissS/Xa2vgAiKxq5KPpTXLhlD09pSriTwN5LFM4lRWSH7m5MpAzSNPgfBJ3
U0e2fj6uM3jmNfujHY/faaJbQb9fLdcsFhP5hLsmlCkBkqjULEsSLCbaaaRs++2/
Pb2ZWc6+vD+/TzO+YIlhbnDF8NxcZyrP22jS537bv4lE3OMnGNY4P2oa2SBiPx7T
lJOcgCGmfKm/70OlGZ/hOqMkIZYyKv9hc5f0jHs1s+sFfAT+DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGxzsCrhK3guwywijV4wm1Ppef2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz
ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvYzEyNTViYTUtOTY0Yy0z
YTU0LTk2MjMtYjgzOTY3YWE1N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh
ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl
OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk
MjVlZThmYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElKOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES6hZwvIw48VEYbQiGCNEggG2A1Ylr9OS+WGOqJmUN5IJOU47T2OhSX
rW7pvuJNHHLWCcMeYeUidUjlnQHgY58/9NWsQkzX9i/FF8LTW6RWh2LXtCm2li3X
526ZEatiD7Ctci4BsT7+tgbg8WZlCTStFoqm1wuolxbxuzTW+H3cmGPZZv4agpFQ
b9TnjJXu7c7pjJjLKftjgumwUD/upyMONQrVRYutK7XayznjTgJ+JDe91QowzKMX
GY51XqA7qPSzAY7prqa7v2c8mFLI1pr20/6NswgpL6E9MzQuzB88Ssa78k4aCeGs
GDeuieNM2ZK9lHJbYwwsF9jM1uzrnfA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:55 2025 by rpki-client