Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/9b5fea9c-1798-35b4-a9f9-72082a140243.roa
File: 9b5fea9c-1798-35b4-a9f9-72082a140243.roa (raw, json)
Hash identifier: se9NEgKTRGpCVT7BjWkCVsStJzmkkF6W7CkNB0Z0xfg=
Subject key identifier: F9:B4:E7:2A:61:EF:E8:E0:7C:25:D4:4B:0B:83:64:54:0D:DF:E0:26
Certificate issuer: /CN=b9c977fd-e7c6-4227-a8e7-dbc2d910825a
Certificate serial: 010D0C9F432858404F6FB6CBC949847279B062B8
Authority key identifier: 75:12:87:DB:92:4A:22:E7:F7:BC:8B:57:39:ED:C5:08:5C:A3:8B:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/9b5fea9c-1798-35b4-a9f9-72082a140243.roa
Signing time: Wed 21 Dec 2022 16:34:34 +0000
ROA not before: Wed 21 Dec 2022 16:34:34 +0000
ROA not after: Tue 25 Mar 2025 04:00:00 +0000
asID: 63255
IP address blocks: 158.146.84.0/24 maxlen: 24
158.146.85.0/24 maxlen: 24
158.146.86.0/24 maxlen: 24
158.146.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4f:6f:b6:cb:c9:49:84:72:79:b0:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c977fd-e7c6-4227-a8e7-dbc2d910825a
Validity
Not Before: Dec 21 16:34:34 2022 GMT
Not After : Mar 25 04:00:00 2025 GMT
Subject: CN=396c02d4-1eb5-4fbf-ada3-37e00db9c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:20:5e:d1:ac:d0:77:8c:ce:fc:bd:90:3b:
ab:89:1e:4c:6d:07:fd:dd:a6:d6:c5:ef:2c:26:31:
e4:7d:35:fa:32:67:a7:1a:58:e8:57:d0:cb:c6:ad:
0e:64:95:0b:4c:f8:54:14:b8:2a:12:69:a1:49:73:
ae:ca:e1:65:3c:5e:77:16:59:48:c3:e2:93:47:d8:
0b:4e:8a:c8:5a:7a:42:d6:18:5f:d3:07:34:82:44:
1b:c5:75:9d:81:47:0a:02:fc:9c:18:85:2b:3d:7d:
bb:45:14:af:df:a9:01:c8:b6:f8:5e:19:5f:b4:75:
23:21:af:15:e0:b9:7e:90:e6:dd:70:4f:97:56:71:
07:7c:0d:0e:be:13:ca:1a:05:c4:b7:9b:18:e2:de:
51:28:cf:ec:56:8d:36:7a:c0:ba:2f:f9:6a:18:69:
84:22:1a:ed:99:25:24:4c:4c:ff:62:a3:00:65:30:
83:63:2a:e2:5a:7a:eb:ae:d7:fd:77:9e:bb:09:f3:
06:4b:bd:2b:d1:9d:5d:c8:59:e3:09:f3:c5:59:e7:
2f:cb:ef:36:77:30:1a:7e:eb:1e:64:9a:1c:5c:74:
8c:28:e6:21:df:c2:59:12:30:66:2a:1a:4c:00:38:
a8:02:e3:4f:59:4f:c1:c1:99:1e:4f:03:1a:00:d7:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:E7:2A:61:EF:E8:E0:7C:25:D4:4B:0B:83:64:54:0D:DF:E0:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/9b5fea9c-1798-35b4-a9f9-72082a140243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.crl
X509v3 Authority Key Identifier:
keyid:75:12:87:DB:92:4A:22:E7:F7:BC:8B:57:39:ED:C5:08:5C:A3:8B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.cer
sbgp-ipAddrBlock: critical
IPv4:
158.146.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:2d:67:6f:9a:5a:a4:c9:f5:82:98:d5:2b:7f:ac:aa:7d:e9:
d4:0a:71:31:9d:ee:65:f8:9a:38:a0:9e:68:c9:fa:dc:1c:48:
6f:53:a1:97:81:59:c5:a4:4c:28:8b:ed:37:27:8b:fc:13:86:
0d:26:b0:eb:c4:ba:98:c5:61:2c:16:79:77:69:0f:4e:c2:66:
2f:e5:7b:dc:23:fc:95:c2:31:c9:8a:05:7d:b7:8f:73:d6:0d:
ba:32:4a:8e:ad:48:d9:61:0b:09:2f:bb:ee:02:0b:04:9f:3c:
b0:15:b8:f3:2e:71:e1:17:c8:d0:79:a4:92:76:6f:83:44:b0:
74:e5:67:67:40:c2:b4:8a:09:4d:a6:9d:4f:f7:e1:11:ce:3d:
97:c6:23:8b:a6:5d:32:c2:01:b8:9f:0c:28:9d:0d:7f:69:6c:
11:b9:01:95:56:f9:e6:ed:f3:cc:a8:b7:97:45:6a:8a:59:34:
9a:9e:f4:01:c3:ae:6f:f7:df:f4:18:59:bc:04:f3:2b:bc:82:
2b:8b:e0:e4:10:ac:c1:5c:fb:cf:37:8b:85:6b:59:c0:f5:c1:
ba:7e:0a:f2:75:00:84:a3:12:71:2a:9a:d8:ac:53:14:9a:cf:
cb:02:a0:45:bb:89:51:3e:7e:63:13:ee:c2:05:a4:4b:e5:6e:
81:47:6b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBPb7bLyUmEcnmwYrgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjljOTc3ZmQtZTdjNi00MjI3LWE4ZTctZGJjMmQ5MTA4
MjVhMB4XDTIyMTIyMTE2MzQzNFoXDTI1MDMyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Mzk2YzAyZDQtMWViNS00ZmJmLWFkYTMtMzdlMDBkYjljMjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V0gXtGs0HeMzvy9kDuriR5MbQf93abWxe8s
JjHkfTX6MmenGljoV9DLxq0OZJULTPhUFLgqEmmhSXOuyuFlPF53FllIw+KTR9gL
TorIWnpC1hhf0wc0gkQbxXWdgUcKAvycGIUrPX27RRSv36kByLb4XhlftHUjIa8V
4Ll+kObdcE+XVnEHfA0OvhPKGgXEt5sY4t5RKM/sVo02esC6L/lqGGmEIhrtmSUk
TEz/YqMAZTCDYyriWnrrrtf9d567CfMGS70r0Z1dyFnjCfPFWecvy+82dzAafuse
ZJocXHSMKOYh38JZEjBmKhpMADioAuNPWU/BwZkeTwMaANds5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPm05yph7+jgfCXUSwuDZFQN3+AmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOWM5
NzdmZC1lN2M2LTQyMjctYThlNy1kYmMyZDkxMDgyNWEvOWI1ZmVhOWMtMTc5OC0z
NWI0LWE5ZjktNzIwODJhMTQwMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjljOTc3ZmQtZTdjNi00MjI3LWE4
ZTctZGJjMmQ5MTA4MjVhL2I5Yzk3N2ZkLWU3YzYtNDIyNy1hOGU3LWRiYzJkOTEw
ODI1YS5jcmwwHwYDVR0jBBgwFoAUdRKH25JKIuf3vItXOe3FCFyji/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOWM5NzdmZC1lN2M2LTQyMjctYThlNy1kYmMy
ZDkxMDgyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnpJUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgtZ2+aWqTJ9YKY1St/rKp96dQKcTGd7mX4mjignmjJ+twcSG9ToZeB
WcWkTCiL7Tcni/wThg0msOvEupjFYSwWeXdpD07CZi/le9wj/JXCMcmKBX23j3PW
DboySo6tSNlhCwkvu+4CCwSfPLAVuPMuceEXyNB5pJJ2b4NEsHTlZ2dAwrSKCU2m
nU/34RHOPZfGI4umXTLCAbifDCidDX9pbBG5AZVW+ebt88yot5dFaopZNJqe9AHD
rm/33/QYWbwE8yu8giuL4OQQrMFc+883i4VrWcD1wbp+CvJ1AISjEnEqmtisUxSa
z8sCoEW7iVE+fmMT7sIFpEvlboFHa04=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org