Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
File: d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json)
Hash identifier: 5OWkCDLTAXOszS0JjagqSkVrQQIONkJ5u/QnkcodHNA=
Subject key identifier: CE:33:8E:8D:91:58:1A:EA:AE:E4:34:9D:DB:D6:0D:45:96:A2:98:DA
Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial: 010D0C9F432858488AE0A61C82A92892963EF9D0
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8070
IP address blocks: 137.70.156.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a6:1c:82:a9:28:92:96:3e:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=66996b66-44e7-4b8d-8309-be9cc87d5e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:68:49:15:53:39:db:e1:ac:6f:3b:cb:e4:
a1:5d:2b:d4:a2:8b:22:ad:fc:8d:40:2a:ce:5b:8a:
bb:a2:38:6b:f4:e3:c7:32:a1:07:c5:d9:81:38:b2:
75:21:e2:64:28:ac:66:1e:8f:64:d3:53:dd:4f:e7:
bd:57:e6:59:39:84:75:13:8e:45:e1:a3:f2:4d:98:
0f:26:e1:b8:12:78:5c:75:f9:96:f7:02:b7:ba:42:
66:a4:3b:33:da:ac:5b:60:95:ca:de:98:d5:e6:c4:
51:ce:c6:97:96:e7:8a:76:26:32:b8:ad:b7:07:0a:
b7:c5:00:3e:54:fd:67:60:06:68:cb:de:7b:ca:9e:
0e:c2:e0:7a:0c:1b:af:fb:96:1d:74:46:3a:72:c0:
67:a6:55:e3:3d:85:d2:eb:94:19:a5:15:1d:6f:f5:
fb:dd:c3:ae:de:30:8c:6c:a4:54:95:9d:8a:9b:c9:
9d:25:ab:a9:b5:3b:6f:bc:fc:a6:b6:20:83:25:b4:
42:9d:c6:43:f0:fb:85:09:53:49:31:5b:d7:d8:11:
d4:3b:dc:27:fd:38:85:38:db:f6:7c:3c:9b:4d:55:
f2:83:ef:75:0f:5a:91:03:b9:b2:d1:ad:a8:da:d0:
ae:df:f2:a3:80:4a:1b:68:9d:31:23:92:29:a5:2a:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:8E:8D:91:58:1A:EA:AE:E4:34:9D:DB:D6:0D:45:96:A2:98:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
X509v3 Authority Key Identifier:
keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
sbgp-ipAddrBlock: critical
IPv4:
137.70.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:5f:fa:8c:87:45:c9:61:56:9f:a1:81:c4:e6:a6:65:58:65:
19:89:f0:6f:f8:1e:93:b7:3e:9f:31:67:32:ef:fe:83:79:74:
7f:d1:e8:66:d3:31:b4:f0:b1:f4:bf:a0:70:09:07:d8:70:48:
33:e0:75:13:91:15:3d:62:4c:dc:cf:4a:28:2b:ca:61:6b:cb:
50:eb:78:0e:76:38:f8:31:d3:fe:98:8f:0c:66:95:47:18:57:
15:37:f6:6a:7c:76:34:b6:e5:5d:88:5c:6a:8c:30:d1:bf:eb:
4d:22:3c:a8:91:8d:67:30:22:7e:dd:19:62:8a:b4:29:5c:e4:
15:db:11:f6:b3:2b:bf:68:89:10:33:fd:86:47:c4:ea:c6:09:
7c:cd:88:a9:4b:f8:c2:f5:ad:8f:17:d1:99:97:07:10:ab:12:
b0:c0:44:b7:c7:5d:80:4c:65:fb:7f:69:b9:01:0c:42:1b:a6:
70:f9:1a:fc:11:ee:08:47:48:43:c8:ea:af:6d:42:13:d4:36:
b9:44:29:35:94:e7:7b:10:d6:16:e9:e0:58:88:2f:99:48:12:
1c:cf:52:b9:f9:1e:e7:87:f4:e1:d1:b1:42:98:47:76:2a:38:
45:d3:f6:94:54:b3:97:8f:8c:8c:dd:fc:06:b3:51:f2:10:da:
d5:4e:5a:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KYcgqkokpY++dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0
NGY0MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
NjY5OTZiNjYtNDRlNy00YjhkLTgzMDktYmU5Y2M4N2Q1ZTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk5oSRVTOdvhrG87y+ShXSvUoosirfyNQCrO
W4q7ojhr9OPHMqEHxdmBOLJ1IeJkKKxmHo9k01PdT+e9V+ZZOYR1E45F4aPyTZgP
JuG4EnhcdfmW9wK3ukJmpDsz2qxbYJXK3pjV5sRRzsaXlueKdiYyuK23Bwq3xQA+
VP1nYAZoy957yp4OwuB6DBuv+5YddEY6csBnplXjPYXS65QZpRUdb/X73cOu3jCM
bKRUlZ2Km8mdJauptTtvvPymtiCDJbRCncZD8PuFCVNJMVvX2BHUO9wn/TiFONv2
fDybTVXyg+91D1qRA7my0a2o2tCu3/KjgEobaJ0xI5IppSo33QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4zjo2RWBrqruQ0ndvWDUWWopjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1
ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvZDY3M2M2ZmUtYjg0OS0z
MmIwLWFhOTAtMzM1YWMxMmMyYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj
YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2
NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi
OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFf+oyHRclhVp+hgcTmpmVYZRmJ8G/4HpO3Pp8xZzLv/oN5dH/R6GbT
MbTwsfS/oHAJB9hwSDPgdRORFT1iTNzPSigrymFry1DreA52OPgx0/6YjwxmlUcY
VxU39mp8djS25V2IXGqMMNG/600iPKiRjWcwIn7dGWKKtClc5BXbEfazK79oiRAz
/YZHxOrGCXzNiKlL+ML1rY8X0ZmXBxCrErDARLfHXYBMZft/abkBDEIbpnD5GvwR
7ghHSEPI6q9tQhPUNrlEKTWU53sQ1hbp4FiIL5lIEhzPUrn5HueH9OHRsUKYR3Yq
OEXT9pRUs5ePjIzd/AazUfIQ2tVOWjs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:37 2025 by rpki-client