Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa
File: 136bd2ea-ac73-303f-a105-1d31eb49b11b.roa (raw, json)
Hash identifier: 9075A292ngkUSuMzq++xTnUvgR86FSzNBeEZy35D3DQ=
Subject key identifier: 3A:4B:F0:BC:9F:09:62:73:08:17:E4:BD:38:63:AA:84:27:73:59:11
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817A1D79B6E9AE90EA3380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7a:1d:79:b6:e9:ae:90:ea:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=02d1254f-b810-40a9-9343-739c7987161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:2e:d2:8b:2a:61:51:a0:2a:bd:cb:e3:eb:
fd:61:3f:7e:40:22:5c:20:e2:1a:ed:98:bc:f7:03:
b9:c6:6d:5e:f1:3f:cb:df:9a:8b:e8:d4:be:13:7f:
d9:9f:49:f6:5e:4e:89:da:62:e4:cd:85:48:4c:6a:
c1:fd:3a:ad:01:2b:15:58:59:7c:63:10:0f:3c:0a:
16:ef:46:6d:d3:d2:1c:d8:1a:0e:53:0a:1c:7d:2e:
34:6c:d3:fe:33:8d:f7:ef:61:3e:8e:b0:cc:f0:2c:
0e:60:53:58:da:14:c6:19:33:4e:b2:1a:1c:43:ec:
d1:88:51:c4:73:5d:d7:16:71:76:65:23:4e:ed:f1:
b6:71:a9:7e:16:e6:35:1c:a0:ba:08:2b:25:f1:e8:
25:a9:33:52:da:78:77:f5:22:bc:86:d9:da:b4:53:
10:92:dc:90:5d:3b:61:20:b8:80:97:2f:60:55:b3:
aa:27:4d:47:a8:29:db:30:43:db:9f:b5:69:15:bb:
2b:8f:cf:5d:aa:fa:3f:99:e4:52:17:f9:10:c8:d9:
a1:fb:1d:ae:3f:e2:50:bf:dc:26:92:60:ae:55:d4:
52:8f:1d:69:3f:6e:77:d0:60:21:85:cf:fc:86:23:
e4:df:f2:ed:ef:b4:db:69:af:67:86:15:b9:5e:d6:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:F0:BC:9F:09:62:73:08:17:E4:BD:38:63:AA:84:27:73:59:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136bd2ea-ac73-303f-a105-1d31eb49b11b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:f2:b4:dd:62:0b:21:f5:4e:ba:77:a7:49:fb:3b:59:49:07:
e8:59:11:cd:f5:cd:8e:33:53:5e:4e:c8:ea:f8:66:23:bb:76:
47:79:70:bd:de:b0:67:ee:b3:49:22:64:b3:1d:b8:72:f5:e6:
02:bc:46:04:15:d0:f4:94:e8:ef:b6:4b:20:1a:07:68:d3:7d:
af:22:b1:a9:0a:b3:8f:41:cb:f1:89:ff:4d:2b:83:17:37:76:
18:84:47:02:b0:d4:cc:f1:d1:93:fc:b7:50:2a:3b:9e:78:2c:
1b:de:d0:87:95:51:40:4c:c5:ef:86:7e:01:58:b0:51:0c:da:
ca:97:99:2a:f0:97:5c:70:9e:41:4e:30:5f:0c:67:bc:66:ee:
e8:75:5c:14:f6:18:60:ba:a5:57:d0:b8:1d:df:c4:6d:fb:5c:
ba:03:84:2b:86:90:10:b3:7b:d5:1e:9d:c0:c1:f6:ba:65:34:
2d:86:82:f6:08:23:a7:b4:7d:2c:13:0a:95:40:0b:38:b5:40:
12:aa:0a:80:33:3c:67:65:ab:d0:25:7a:a1:0c:dc:cc:79:bc:
d7:6d:2a:05:85:51:13:4e:30:e1:29:b0:04:97:3c:25:62:dd:
eb:9b:d9:3f:f3:07:18:df:8a:1b:28:9c:9e:f9:ea:ef:42:c2:
32:c3:5a:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXodebbprpDqM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDJkMTI1NGYtYjgxMC00MGE5LTkzNDMtNzM5Yzc5ODcxNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwu0osqYVGgKr3L4+v9YT9+QCJcIOIa7Zi8
9wO5xm1e8T/L35qL6NS+E3/Zn0n2Xk6J2mLkzYVITGrB/TqtASsVWFl8YxAPPAoW
70Zt09Ic2BoOUwocfS40bNP+M43372E+jrDM8CwOYFNY2hTGGTNOshocQ+zRiFHE
c13XFnF2ZSNO7fG2cal+FuY1HKC6CCsl8eglqTNS2nh39SK8htnatFMQktyQXTth
ILiAly9gVbOqJ01HqCnbMEPbn7VpFbsrj89dqvo/meRSF/kQyNmh+x2uP+JQv9wm
kmCuVdRSjx1pP2530GAhhc/8hiPk3/Lt77Tbaa9nhhW5XtYY/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpL8LyfCWJzCBfkvThjqoQnc1kRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM2YmQyZWEtYWM3My0z
MDNmLWExMDUtMWQzMWViNDliMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjytN1iCyH1Trp3p0n7O1lJB+hZEc31zY4zU15OyOr4ZiO7dkd5cL3e
sGfus0kiZLMduHL15gK8RgQV0PSU6O+2SyAaB2jTfa8isakKs49By/GJ/00rgxc3
dhiERwKw1Mzx0ZP8t1AqO554LBve0IeVUUBMxe+GfgFYsFEM2sqXmSrwl1xwnkFO
MF8MZ7xm7uh1XBT2GGC6pVfQuB3fxG37XLoDhCuGkBCze9UencDB9rplNC2GgvYI
I6e0fSwTCpVACzi1QBKqCoAzPGdlq9AleqEM3Mx5vNdtKgWFURNOMOEpsASXPCVi
3eub2T/zBxjfihsonJ756u9CwjLDWlQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:50 2025 by rpki-client