Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
File: 95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa (raw, json)
Hash identifier: VKWdLDUTm92l6hVx1XT7jgLlf17A1dhHiS4TuGsNrNg=
Subject key identifier: B5:25:25:5A:95:5C:93:C7:D2:E5:24:6E:C3:57:F9:1A:F9:B7:D3:CA
Certificate issuer: /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial: 010D0C9F43285848A4042FDB2DF89DF7711F0C00
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
Signing time: Thu 23 Jan 2025 14:07:54 +0000
ROA not before: Thu 23 Jan 2025 14:07:54 +0000
ROA not after: Wed 23 Apr 2025 13:07:54 +0000
asID: 393607
IP address blocks: 192.152.158.0/24 maxlen: 24
198.169.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:04:2f:db:2d:f8:9d:f7:71:1f:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
Validity
Not Before: Jan 23 14:07:54 2025 GMT
Not After : Apr 23 13:07:54 2025 GMT
Subject: CN=1b2311ee-c00b-412a-a1f5-cdb7f903fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:cc:cd:00:8d:bc:93:89:af:54:5f:77:64:
b5:bb:6a:3e:02:df:3f:67:e3:03:2a:95:ec:7d:5f:
18:6a:34:bd:04:92:99:7b:ea:44:74:68:af:50:76:
b5:aa:77:28:7f:8c:45:4e:d8:9e:70:fd:4c:9d:c7:
8b:89:c8:88:35:df:28:92:0e:e2:69:4b:3b:8b:3e:
f2:78:f5:9c:12:96:a6:10:64:fd:c7:ca:46:9b:ca:
dd:68:38:67:50:d9:69:24:40:61:88:08:e5:2b:6f:
b0:bd:2a:a5:d7:5f:f3:97:bf:60:3a:5b:7a:a8:00:
b6:aa:bf:b4:82:2e:32:9f:2a:1c:83:a0:37:b2:33:
c5:f2:94:01:36:13:41:5b:52:5e:2c:0d:a5:71:81:
77:8f:77:6e:2e:56:de:99:07:d6:b6:a2:16:5a:28:
3c:23:7f:47:d3:b6:37:80:58:1e:c7:a6:a0:cb:2b:
73:36:cd:21:1d:a2:5c:81:52:11:6a:75:50:01:98:
c0:7f:3e:42:6a:37:3b:e3:7b:8c:18:50:b8:bf:69:
10:8a:ba:5e:9a:79:3b:ba:86:e4:69:1c:49:ea:6a:
10:71:87:54:9d:2b:ca:4f:5a:90:cb:dd:d0:4a:2a:
fa:08:33:d1:76:de:64:fd:c6:83:2d:86:2d:fc:0c:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:25:5A:95:5C:93:C7:D2:E5:24:6E:C3:57:F9:1A:F9:B7:D3:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
X509v3 Authority Key Identifier:
keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.152.158.0/24
198.169.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:06:9a:4b:a1:a7:01:a1:ac:db:3a:bf:80:8e:7c:5d:e2:71:
af:bd:bb:35:9f:72:5b:e4:62:24:a3:75:d7:36:57:8a:a8:73:
62:a8:d8:3f:88:a6:cc:94:b9:6b:fd:22:0d:86:cc:6a:95:e9:
3b:cf:9d:5d:11:2b:3c:1e:d8:df:bc:fe:69:0a:d1:39:3f:04:
a0:07:b0:1f:80:02:31:5d:86:33:00:a7:a2:34:07:96:90:b2:
c8:6c:6d:de:d4:63:f6:08:f6:20:63:1f:ff:3c:fa:53:11:3b:
16:a3:45:e4:06:ea:ae:5f:f4:ea:6c:fb:9b:6a:a9:c4:e4:18:
9e:6d:2e:3f:0f:ad:e1:06:38:31:e1:8c:aa:ff:e1:88:5e:12:
7a:39:86:b7:87:22:52:e6:79:09:1e:d6:6c:28:88:88:c8:3f:
a2:ae:93:0e:b1:95:1d:ec:1d:23:d1:8e:17:3d:b9:94:6b:5b:
ba:db:b0:59:24:ef:5c:f9:d1:63:0e:d2:08:36:54:8b:96:bc:
ac:b0:14:46:a0:d5:ea:dd:79:75:5c:09:6d:71:3b:ca:d7:77:
b8:a0:35:a9:24:79:5c:6a:95:10:11:68:6a:59:32:c2:63:7f:
e4:5b:cf:2e:aa:99:73:09:3a:38:29:60:c2:4d:67:f6:9d:5e:
95:f4:48:08
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEikBC/bLfid93EfDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1
YTFjMB4XDTI1MDEyMzE0MDc1NFoXDTI1MDQyMzEzMDc1NFowLzEtMCsGA1UEAxMk
MWIyMzExZWUtYzAwYi00MTJhLWExZjUtY2RiN2Y5MDNmYmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2vMzQCNvJOJr1Rfd2S1u2o+At8/Z+MDKpXs
fV8YajS9BJKZe+pEdGivUHa1qncof4xFTtiecP1MnceLiciINd8okg7iaUs7iz7y
ePWcEpamEGT9x8pGm8rdaDhnUNlpJEBhiAjlK2+wvSql11/zl79gOlt6qAC2qr+0
gi4ynyocg6A3sjPF8pQBNhNBW1JeLA2lcYF3j3duLlbemQfWtqIWWig8I39H07Y3
gFgex6agyytzNs0hHaJcgVIRanVQAZjAfz5Cajc743uMGFC4v2kQirpemnk7uobk
aRxJ6moQcYdUnSvKT1qQy93QSir6CDPRdt5k/caDLYYt/AwGpQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLUlJVqVXJPH0uUkbsNX+Rr5t9PKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3
NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvOTUxMDYzMTYtYTBkMS0z
ZGJmLThhYjItYzQ5OGM3MGY2YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA2NzcwMDEtYjA2Mi00OTk5LTg5
ZjktZDg4Mjg5M2Y1YTFjL2QwNjc3MDAxLWIwNjItNDk5OS04OWY5LWQ4ODI4OTNm
NWExYy5jcmwwHwYDVR0jBBgwFoAULwDv5B+OOmyQRa+di2BLcNn0tSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgy
ODkzZjVhMWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwJieAwQA
xql+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGUGmkuhpwGhrNs6v4COfF3ica+9uzWfclvkYiSjddc2V4qo
c2Ko2D+IpsyUuWv9Ig2GzGqV6TvPnV0RKzwe2N+8/mkK0Tk/BKAHsB+AAjFdhjMA
p6I0B5aQsshsbd7UY/YI9iBjH/88+lMROxajReQG6q5f9Ops+5tqqcTkGJ5tLj8P
reEGODHhjKr/4YheEno5hreHIlLmeQke1mwoiIjIP6Kukw6xlR3sHSPRjhc9uZRr
W7rbsFkk71z50WMO0gg2VIuWvKywFEag1erdeXVcCW1xO8rXd7igNakkeVxqlRAR
aGpZMsJjf+Rbzy6qmXMJOjgpYMJNZ/adXpX0SAg=
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:24:29 2025 by rpki-client