Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
File: f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa (raw, json)
Hash identifier: PvNFdLC853QKT57UXsLbEep/6zddDDFiPALqs8Pf1ZE=
Subject key identifier: D1:10:52:68:11:8B:0C:43:72:B2:33:A4:11:CE:A3:B4:82:73:42:54
Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial: 010D0C9F43285848F4F69A59C07C9C3120B9D400
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 14618
IP address blocks: 158.51.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9a:59:c0:7c:9c:31:20:b9:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=205fde10-ed4f-4233-a43e-166b2b5f940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:8a:73:7c:c0:f9:24:ac:1c:ba:e1:77:84:
fa:3e:67:85:19:6a:32:9e:f6:5d:ec:d7:02:6f:84:
a7:b7:b3:a4:0a:bb:79:94:76:85:ba:e7:da:a5:c0:
de:11:f1:d7:d3:c2:ee:53:0f:cc:e6:4d:70:ed:d8:
ed:84:53:87:2a:64:79:45:78:69:70:2e:e3:6f:16:
26:c7:37:dd:b9:36:7a:12:34:4a:89:46:21:83:b6:
33:f5:a8:c0:8d:2c:0b:aa:c1:ac:5f:f4:5c:06:d9:
0a:eb:af:04:2e:5a:72:20:a7:1f:d4:d6:2e:fb:cf:
3c:3f:2a:0a:38:4b:b4:1b:8c:cd:c7:38:f7:a3:da:
aa:3b:75:5a:aa:ae:b1:fd:f9:b1:45:4b:b0:ac:ac:
e3:68:c4:5d:84:71:c9:ee:8a:14:fd:96:d1:8e:62:
e8:9e:c6:00:20:cf:43:37:55:83:cc:b7:5e:e3:9f:
d7:96:26:56:3d:0b:6d:20:77:64:ee:57:55:ff:de:
88:c7:d4:7d:2a:40:3a:0d:8d:38:29:83:a1:3b:67:
3a:48:91:65:cf:b4:d2:c7:8a:36:f5:04:ce:3f:09:
1f:28:91:41:62:78:2b:c3:85:02:62:9b:ec:1a:59:
6a:fb:e4:5c:45:1a:df:74:b9:2b:25:aa:55:b4:dd:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:52:68:11:8B:0C:43:72:B2:33:A4:11:CE:A3:B4:82:73:42:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
X509v3 Authority Key Identifier:
keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:35:33:34:a5:20:5f:b7:44:60:ae:07:19:57:60:97:05:c3:
09:e3:87:ad:dd:50:5a:81:2d:4a:0d:f6:b9:01:cc:a0:47:c7:
99:33:7f:ca:d4:18:59:08:e3:a5:5e:f9:89:24:db:a8:4a:5a:
cb:2c:44:fd:08:60:3d:f2:a3:0e:c4:bd:09:63:c7:4c:7d:6f:
ed:26:7e:3d:2c:2e:76:02:8e:71:e0:46:1a:e1:8d:78:69:79:
2f:2e:35:e5:6c:33:cc:d6:a3:a2:f3:ff:bb:99:08:c8:56:eb:
ea:d3:ec:ca:26:92:5a:5a:13:5f:e7:d2:4e:95:df:f5:c8:de:
dc:bd:4a:86:73:b6:88:df:73:89:45:d4:ea:a8:f7:cc:91:f4:
e2:c1:3f:ab:a5:a4:34:a1:8b:fe:a0:d3:64:dd:62:82:29:73:
8f:43:7f:6c:93:2b:b7:45:d9:8e:41:d9:e2:77:54:27:84:a6:
5a:dc:1a:74:93:2a:bb:2c:c0:f4:cd:19:3c:fb:11:19:de:12:
6b:d8:0d:6f:e8:3d:af:40:95:7c:2c:ae:11:33:77:02:b1:5f:
95:77:28:5b:1c:61:1f:95:0c:36:4a:08:81:d0:85:79:3e:2a:
cf:bd:1e:a4:47:0a:dd:88:a4:65:25:f1:a4:c9:da:fe:c1:48:
ec:86:eb:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09ppZwHycMSC51AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmNTBiM2MtMDAwNC00NzUzLWJiNTAtYjA4OGU3ODRk
ZTRlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MjA1ZmRlMTAtZWQ0Zi00MjMzLWE0M2UtMTY2YjJiNWY5NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaWKc3zA+SSsHLrhd4T6PmeFGWoynvZd7NcC
b4Snt7OkCrt5lHaFuufapcDeEfHX08LuUw/M5k1w7djthFOHKmR5RXhpcC7jbxYm
xzfduTZ6EjRKiUYhg7Yz9ajAjSwLqsGsX/RcBtkK668ELlpyIKcf1NYu+888PyoK
OEu0G4zNxzj3o9qqO3Vaqq6x/fmxRUuwrKzjaMRdhHHJ7ooU/ZbRjmLonsYAIM9D
N1WDzLde45/XliZWPQttIHdk7ldV/96Ix9R9KkA6DY04KYOhO2c6SJFlz7TSx4o2
9QTOPwkfKJFBYngrw4UCYpvsGllq++RcRRrfdLkrJapVtN3TlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEQUmgRiwxDcrIzpBHOo7SCc0JUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1
MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4ZTc4NGRlNGUvZjBjZDFmMDItMjg5OS0z
YzkxLWI2NTUtMGFhMWExZWRhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJmNTBiM2MtMDAwNC00NzUzLWJi
NTAtYjA4OGU3ODRkZTRlLzIyZjUwYjNjLTAwMDQtNDc1My1iYjUwLWIwODhlNzg0
ZGU0ZS5jcmwwHwYDVR0jBBgwFoAU0Z+cLma+QyGVSqqdFPgeY/ROTVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4
ZTc4NGRlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw1MzSlIF+3RGCuBxlXYJcFwwnjh63dUFqBLUoN9rkBzKBHx5kzf8rU
GFkI46Ve+Ykk26hKWsssRP0IYD3yow7EvQljx0x9b+0mfj0sLnYCjnHgRhrhjXhp
eS8uNeVsM8zWo6Lz/7uZCMhW6+rT7MomklpaE1/n0k6V3/XI3ty9SoZztojfc4lF
1Oqo98yR9OLBP6ulpDShi/6g02TdYoIpc49Df2yTK7dF2Y5B2eJ3VCeEplrcGnST
KrsswPTNGTz7ERneEmvYDW/oPa9AlXwsrhEzdwKxX5V3KFscYR+VDDZKCIHQhXk+
Ks+9HqRHCt2IpGUl8aTJ2v7BSOyG62k=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:22 2025 by rpki-client