Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
File: 9685251b-82c4-3025-86c9-cb5bf2145c58.roa (raw, json)
Hash identifier: HCUH3uOMc0xGvhJ8aHxHS/RHYGh9DNI9VD1qZhO3Gv4=
Subject key identifier: 60:EC:D1:28:F5:FC:3E:9D:35:9B:B6:A1:5C:9A:31:F8:A0:E2:53:AE
Certificate issuer: /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial: 010D0C9F4328584886B079209A6971763B124180
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 16437
IP address blocks: 162.247.220.0/23 maxlen: 23
162.247.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:79:20:9a:69:71:76:3b:12:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=5c728704-5bd6-4d57-8dfe-1c6c20105be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:21:12:1c:b2:95:eb:3b:3b:b9:86:7b:e1:
93:bc:62:15:90:bb:3c:ee:b4:12:66:7f:fc:56:2a:
c7:03:1e:11:21:da:88:1b:a2:16:03:52:6e:d6:db:
ee:34:f2:dc:7e:e8:b2:19:01:84:46:1f:58:3d:fc:
47:c6:b1:f1:bf:cd:a6:5d:31:b4:bf:b7:5e:b6:86:
4d:ac:c0:2c:bf:1c:5d:3f:f2:0c:b4:3d:c6:1c:4f:
36:cd:b9:0e:89:be:e4:5f:7a:f5:3c:9b:0d:9a:c2:
04:e2:c0:69:81:98:05:56:61:79:f8:3a:4d:6c:e7:
23:89:f6:f7:e8:f8:35:6e:c2:d5:49:3f:ed:98:3b:
ed:83:96:f8:24:7b:72:c9:b4:33:29:3f:0c:8f:d7:
a3:b1:88:29:9b:c7:ff:1a:f5:ed:43:87:04:53:d9:
21:76:64:9c:39:75:06:d5:6e:a2:1c:50:50:6d:5a:
ec:8d:0e:b0:4b:10:c2:e0:a6:cb:3b:e6:17:77:05:
cb:27:dd:f7:b9:73:55:6f:4a:43:97:c7:91:75:ff:
a3:33:57:e6:6e:ec:2c:b2:e6:59:bf:18:21:23:9d:
09:3c:e3:8a:13:ae:bc:92:61:fa:0c:1c:67:26:d4:
43:89:e1:21:db:8e:9f:72:c5:5d:60:4f:51:3b:3e:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:D1:28:F5:FC:3E:9D:35:9B:B6:A1:5C:9A:31:F8:A0:E2:53:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
X509v3 Authority Key Identifier:
keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:4f:ae:93:21:08:19:67:13:b3:8a:61:ea:dd:45:81:cb:e5:
37:c7:56:f1:75:49:02:ad:02:22:e3:7d:c6:9b:25:f6:7e:37:
08:8b:db:8a:f2:da:80:ec:77:01:6c:81:34:a2:c5:67:1f:b0:
90:54:64:fb:7b:6c:36:98:6d:2d:f3:c6:62:e0:96:75:ce:3c:
fa:36:ce:c2:b3:3d:b5:b0:c5:ff:aa:ad:87:bc:8a:68:aa:7d:
e6:6e:ff:6a:80:ba:6a:f7:be:56:5b:f0:52:61:0a:b5:c9:52:
ff:dc:65:99:a6:ba:9a:03:81:8d:d2:1f:36:ff:2a:bc:a3:f9:
96:bf:61:6c:54:a7:ae:d7:39:be:3e:42:b8:7c:93:15:fd:9c:
f2:a6:c2:55:f2:99:1a:df:b5:f5:3c:3b:f9:19:91:f6:4e:c3:
4a:7f:35:40:7d:c2:37:98:b4:3b:11:9d:ef:c6:07:c8:40:ab:
1b:d2:af:a9:ac:97:90:9d:5a:7e:a1:b8:62:4e:db:37:68:ac:
30:0d:f2:58:17:1b:aa:8d:03:0d:e2:8c:0c:0a:57:fc:4a:73:
c3:47:f8:d1:62:93:19:25:3c:14:a9:51:97:ab:bc:09:f1:d3:
de:ea:49:ac:e5:03:f6:13:87:dd:0b:d1:5f:0a:47:5d:6f:c0:
1e:9d:c7:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHkgmmlxdjsSQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJmZGZlNmEtYmMyYy00MTgwLWJjNWQtN2JkNmRlNWNm
YTYyMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
NWM3Mjg3MDQtNWJkNi00ZDU3LThkZmUtMWM2YzIwMTA1YmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjshEhyyles7O7mGe+GTvGIVkLs87rQSZn/8
VirHAx4RIdqIG6IWA1Ju1tvuNPLcfuiyGQGERh9YPfxHxrHxv82mXTG0v7detoZN
rMAsvxxdP/IMtD3GHE82zbkOib7kX3r1PJsNmsIE4sBpgZgFVmF5+DpNbOcjifb3
6Pg1bsLVST/tmDvtg5b4JHtyybQzKT8Mj9ejsYgpm8f/GvXtQ4cEU9khdmScOXUG
1W6iHFBQbVrsjQ6wSxDC4KbLO+YXdwXLJ933uXNVb0pDl8eRdf+jM1fmbuwssuZZ
vxghI50JPOOKE668kmH6DBxnJtRDieEh246fcsVdYE9ROz4MHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDs0Sj1/D6dNZu2oVyaMfig4lOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZk
ZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2ZGU1Y2ZhNjIvOTY4NTI1MWItODJjNC0z
MDI1LTg2YzktY2I1YmYyMTQ1YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGJmZGZlNmEtYmMyYy00MTgwLWJj
NWQtN2JkNmRlNWNmYTYyLzBiZmRmZTZhLWJjMmMtNDE4MC1iYzVkLTdiZDZkZTVj
ZmE2Mi5jcmwwHwYDVR0jBBgwFoAUTbUvRrI70QyJnoiDdxKwfisk6gcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZkZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2
ZGU1Y2ZhNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovfcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZPrpMhCBlnE7OKYerdRYHL5TfHVvF1SQKtAiLjfcabJfZ+NwiL24ry
2oDsdwFsgTSixWcfsJBUZPt7bDaYbS3zxmLglnXOPPo2zsKzPbWwxf+qrYe8imiq
feZu/2qAumr3vlZb8FJhCrXJUv/cZZmmupoDgY3SHzb/Kryj+Za/YWxUp67XOb4+
Qrh8kxX9nPKmwlXymRrftfU8O/kZkfZOw0p/NUB9wjeYtDsRne/GB8hAqxvSr6ms
l5CdWn6huGJO2zdorDAN8lgXG6qNAw3ijAwKV/xKc8NH+NFikxklPBSpUZervAnx
097qSazlA/YTh90L0V8KR11vwB6dx50=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:55 2025 by rpki-client