Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa
File: 78b98705-7ab7-340c-b066-b3bc2945da06.roa (raw, json)
Hash identifier: 5RZlta8CbpR56/QoJYLMldF05EAMahUkWL7OmCSMA20=
Subject key identifier: 47:84:02:1F:69:8E:27:28:E2:44:BA:92:DC:84:14:F3:86:68:94:AC
Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial: 010D0C9F43285849350EA6821297219FD2C3B780
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.176.212.0/24 maxlen: 24
170.176.213.0/24 maxlen: 24
170.176.214.0/24 maxlen: 24
170.176.215.0/24 maxlen: 24
170.176.216.0/24 maxlen: 24
170.176.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a6:82:12:97:21:9f:d2:c3:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=8e98fb49-982d-47a7-851f-25d76ad6938e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:da:11:4f:ef:3b:99:e9:7f:29:38:43:dc:
df:ab:7f:5f:f5:d8:49:b0:1d:ad:1f:16:35:6b:d6:
3c:ec:be:67:a9:5e:db:18:70:73:72:8f:8e:a9:d6:
66:f1:18:ed:53:08:16:b2:3c:49:e5:00:7f:e0:2d:
0a:ad:3e:f9:15:2f:4c:eb:0b:74:29:11:81:a5:4d:
a0:d2:de:b3:dc:9b:fa:8d:97:2d:31:a5:eb:cf:db:
e4:f9:5b:95:10:f8:cc:81:d8:48:d8:fe:ab:2f:c9:
29:02:74:f9:b1:62:31:b8:4c:8a:14:59:73:48:85:
e3:cb:50:89:c5:4b:25:38:43:3a:e0:67:e9:fa:f8:
10:20:29:cf:9d:40:fd:f8:95:a0:8e:5c:cd:44:c6:
dc:c2:a3:23:cf:a2:35:87:54:bc:7f:d1:b0:d8:c7:
fb:16:9c:c5:78:08:5f:6b:ec:c9:fd:41:8a:de:cf:
56:ab:bd:35:cf:c1:11:52:06:17:d7:6e:4f:09:b3:
69:89:a6:ee:75:e3:fe:b0:2f:86:ee:57:71:e7:b2:
0d:f9:fe:75:ac:ee:33:1e:fb:2e:79:c9:85:d9:6f:
c7:17:3c:7a:37:4b:79:74:bb:b1:7e:9b:ec:39:98:
ad:ae:c5:43:27:1a:42:b6:70:df:b3:4a:96:29:28:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:02:1F:69:8E:27:28:E2:44:BA:92:DC:84:14:F3:86:68:94:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
X509v3 Authority Key Identifier:
keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.212.0-170.176.217.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0c:1e:6a:31:9d:db:bb:24:c7:5b:ab:05:b8:5e:5e:9f:45:
37:31:43:52:19:29:d6:96:92:8c:cf:57:89:e9:2c:26:19:39:
86:07:0a:c2:e3:40:90:6a:c3:46:74:7c:97:ff:ee:17:69:aa:
fb:40:a1:11:eb:75:69:ac:dd:81:48:01:03:2e:23:33:b5:1b:
15:73:0e:d7:a7:e5:b9:c1:d6:a5:e9:28:28:73:b7:4d:7d:0e:
09:dd:e8:97:cf:4c:e0:b5:d1:2d:1d:9c:30:43:3b:bd:2f:97:
8a:25:4d:06:c1:c6:0b:f1:e2:f2:b4:11:5a:3d:83:ed:51:f8:
65:32:a4:60:7c:e7:61:b6:fb:b9:fd:c1:b2:86:46:67:86:1d:
58:e2:a2:a2:ff:d2:46:ed:a0:33:42:2b:0d:cd:b3:15:95:65:
31:3b:4d:b9:25:84:2e:8e:08:d9:cd:7d:3f:f3:d5:f5:79:97:
e8:bb:0f:b4:8c:47:96:41:cc:38:db:b3:d6:fe:f2:13:81:61:
32:cb:ca:b5:11:a8:3c:af:0e:89:37:ca:ed:f7:08:d6:09:28:
27:e3:bb:59:34:9a:7b:2f:d4:99:eb:16:af:4c:0a:d4:1a:4d:
20:72:cd:34:9f:c6:be:dd:ca:08:9d:24:ee:bf:e6:96:97:30:
87:9d:c7:89
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEk1DqaCEpchn9LDt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh
YmNiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OGU5OGZiNDktOTgyZC00N2E3LTg1MWYtMjVkNzZhZDY5MzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim/aEU/vO5npfyk4Q9zfq39f9dhJsB2tHxY1
a9Y87L5nqV7bGHBzco+OqdZm8RjtUwgWsjxJ5QB/4C0KrT75FS9M6wt0KRGBpU2g
0t6z3Jv6jZctMaXrz9vk+VuVEPjMgdhI2P6rL8kpAnT5sWIxuEyKFFlzSIXjy1CJ
xUslOEM64Gfp+vgQICnPnUD9+JWgjlzNRMbcwqMjz6I1h1S8f9Gw2Mf7FpzFeAhf
a+zJ/UGK3s9Wq701z8ERUgYX125PCbNpiabudeP+sC+G7ldx57IN+f51rO4zHvsu
ecmF2W/HFzx6N0t5dLuxfpvsOZitrsVDJxpCtnDfs0qWKSjJkQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEeEAh9pjico4kS6ktyEFPOGaJSsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk
Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvNzhiOTg3MDUtN2FiNy0z
NDBjLWIwNjYtYjNiYzI5NDVkYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw
Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh
YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew
NTI1YWFiY2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKqsNQD
BAGqsNgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEASwweajGd27skx1urBbheXp9FNzFDUhkp1paSjM9Xieks
Jhk5hgcKwuNAkGrDRnR8l//uF2mq+0ChEet1aazdgUgBAy4jM7UbFXMO16flucHW
pekoKHO3TX0OCd3ol89M4LXRLR2cMEM7vS+XiiVNBsHGC/Hi8rQRWj2D7VH4ZTKk
YHznYbb7uf3BsoZGZ4YdWOKiov/SRu2gM0IrDc2zFZVlMTtNuSWELo4I2c19P/PV
9XmX6LsPtIxHlkHMONuz1v7yE4FhMsvKtRGoPK8OiTfK7fcI1gkoJ+O7WTSaey/U
mesWr0wK1BpNIHLNNJ/Gvt3KCJ0k7r/mlpcwh53HiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:04 2025 by rpki-client