Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
File: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (raw, json)
Hash identifier: kH7APKWFCGtDSOJyi6QwMjVfwVzThGbt0Md3tBnAewo=
Subject key identifier: E0:6A:2E:60:06:9D:F1:AD:B3:19:A7:9C:BC:39:13:5D:7D:0E:93:F3
Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial: 010D0C9F4328584891464A5309C36E2123330800
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
Signing time: Thu 16 Jan 2025 21:00:43 +0000
ROA not before: Thu 16 Jan 2025 21:00:43 +0000
ROA not after: Wed 16 Apr 2025 20:00:43 +0000
asID: 396982
IP address blocks: 161.223.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:46:4a:53:09:c3:6e:21:23:33:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Validity
Not Before: Jan 16 21:00:43 2025 GMT
Not After : Apr 16 20:00:43 2025 GMT
Subject: CN=8d7b0ccd-1c9e-4044-9fbd-e9b65307998a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:6f:e7:f0:fa:65:b8:35:47:4c:ed:f7:1a:
c4:50:97:6a:d3:d5:93:3b:59:4d:e4:a8:b3:50:b8:
30:76:9c:c8:55:eb:5c:94:aa:94:0e:d7:b4:12:9b:
c5:26:d6:81:dd:bf:47:9a:09:ad:b5:87:29:b5:85:
89:f1:99:c2:72:14:17:86:17:d4:87:d8:30:38:1d:
e0:d7:f3:df:f3:ac:b8:b4:6d:3a:42:e0:38:74:8e:
d0:f4:ed:c8:43:f0:9e:90:45:45:40:51:9f:b2:83:
f7:a4:30:6b:ac:52:22:18:3c:a3:e0:8b:31:41:af:
6f:d6:f8:d6:06:a0:1c:18:91:06:fd:9c:f3:27:f5:
72:8f:c2:bf:b9:60:ba:bd:1f:37:b3:73:22:d2:66:
27:90:11:f3:7d:92:f7:b4:63:04:f2:aa:0e:3d:fb:
56:da:20:fe:69:e2:fe:3e:cc:69:4d:0c:9f:20:86:
f0:05:c4:13:ab:d9:34:d6:37:61:0a:2a:42:71:41:
68:ca:20:e2:f7:fe:91:53:bb:e2:6a:c4:1b:53:f5:
5c:cc:a5:27:af:65:4b:98:e6:a4:23:41:88:ca:fc:
10:f9:df:18:98:bf:dd:45:6d:67:5c:6d:a7:91:b8:
16:00:8c:aa:37:93:9e:8d:dc:0c:3b:72:8c:b9:01:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:2E:60:06:9D:F1:AD:B3:19:A7:9C:BC:39:13:5D:7D:0E:93:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
X509v3 Authority Key Identifier:
keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
sbgp-ipAddrBlock: critical
IPv4:
161.223.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:12:e9:10:c1:fd:90:83:1a:7f:34:45:87:02:e9:5c:8c:9e:
9d:c2:ce:19:10:39:2a:08:52:49:cc:c1:6e:2b:ed:ed:f2:5f:
19:40:d2:51:6e:f2:3c:51:54:37:aa:ed:f7:87:7f:74:ee:0a:
26:41:4a:ce:b5:12:25:ba:12:27:bc:30:2e:c3:41:9c:92:fb:
04:3e:78:a8:53:8c:6e:01:d3:66:40:c1:ca:14:86:a6:f5:70:
32:57:d5:8c:91:0c:4a:88:b0:ed:c3:b4:31:ec:7e:e8:40:9d:
7f:9b:e6:29:d3:6a:54:43:1b:e1:6a:40:2d:0d:ef:c2:55:c1:
c3:21:5a:3b:16:0a:e5:99:b2:6c:d8:04:9a:55:b0:f1:8e:ce:
37:f3:77:58:1d:b1:1a:e0:67:73:80:3b:80:1a:8d:1f:d9:11:
80:c0:e8:eb:bd:3b:36:1b:6a:50:75:6d:b6:cf:c5:35:ac:e1:
c5:e7:3b:e0:fc:fa:5c:8f:54:0f:ee:26:88:92:c1:bc:7f:cf:
da:d0:8e:84:41:e2:a9:31:5e:52:28:e0:e7:1f:5f:5b:19:93:
ec:4b:04:04:e1:c2:71:62:44:43:f0:5c:e9:4f:71:c5:d7:fc:
87:38:9f:2d:01:8c:b7:90:e7:6e:1d:7f:0b:c6:1e:7b:32:51:
e2:9d:e0:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiRRkpTCcNuISMzCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl
M2Q1MB4XDTI1MDExNjIxMDA0M1oXDTI1MDQxNjIwMDA0M1owLzEtMCsGA1UEAxMk
OGQ3YjBjY2QtMWM5ZS00MDQ0LTlmYmQtZTliNjUzMDc5OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWFv5/D6Zbg1R0zt9xrEUJdq09WTO1lN5Kiz
ULgwdpzIVetclKqUDte0EpvFJtaB3b9HmgmttYcptYWJ8ZnCchQXhhfUh9gwOB3g
1/Pf86y4tG06QuA4dI7Q9O3IQ/CekEVFQFGfsoP3pDBrrFIiGDyj4IsxQa9v1vjW
BqAcGJEG/ZzzJ/Vyj8K/uWC6vR83s3Mi0mYnkBHzfZL3tGME8qoOPftW2iD+aeL+
PsxpTQyfIIbwBcQTq9k01jdhCipCcUFoyiDi9/6RU7viasQbU/VczKUnr2VLmOak
I0GIyvwQ+d8YmL/dRW1nXG2nkbgWAIyqN5OejdwMO3KMuQGiYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBqLmAGnfGtsxmnnLw5E119DpPzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3
ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvNGEzZTM4MDAtNWVjNS0z
YjAwLTkzMmYtYTA5MDlhMDAxOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl
ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2
ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5
ZDlkNmUzZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod+6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMsS6RDB/ZCDGn80RYcC6VyMnp3CzhkQOSoIUknMwW4r7e3yXxlA0lFu
8jxRVDeq7feHf3TuCiZBSs61EiW6Eie8MC7DQZyS+wQ+eKhTjG4B02ZAwcoUhqb1
cDJX1YyRDEqIsO3DtDHsfuhAnX+b5inTalRDG+FqQC0N78JVwcMhWjsWCuWZsmzY
BJpVsPGOzjfzd1gdsRrgZ3OAO4AajR/ZEYDA6Ou9OzYbalB1bbbPxTWs4cXnO+D8
+lyPVA/uJoiSwbx/z9rQjoRB4qkxXlIo4OcfX1sZk+xLBAThwnFiREPwXOlPccXX
/Ic4ny0BjLeQ524dfwvGHnsyUeKd4Aw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:36 2025 by rpki-client