Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1c3d83-50ca-3612-96e9-02cb22ecfc6c.roa
File: 7d1c3d83-50ca-3612-96e9-02cb22ecfc6c.roa (raw, json)
Hash identifier: 4hEh8xvWWvXF7MYQAE4Uz2Ie2LZGuYHwIPu1GDDblYo=
Subject key identifier: 7D:F1:47:8A:2A:DA:40:A0:82:19:5F:3E:18:B6:CE:40:EB:CB:8B:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E576243201518676C63E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1c3d83-50ca-3612-96e9-02cb22ecfc6c.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 7725
IP address blocks: 67.191.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:76:24:32:01:51:86:76:c6:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=3bfe1655-85ae-41c1-bac4-0af131023f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:34:6f:31:a1:5f:a4:5b:0a:35:cc:c0:06:
e8:e5:6e:c1:1f:9d:bb:75:7d:32:6e:90:aa:83:96:
c6:79:de:1b:d6:3e:8d:54:9b:e6:d4:73:2e:a9:34:
9f:bd:bb:41:9b:35:48:43:30:9c:59:27:8f:17:32:
49:2b:83:e4:bc:6c:54:c3:80:ef:0b:c4:67:9f:8b:
4a:36:3f:c0:87:03:1b:79:22:63:f1:0a:bb:e1:b0:
83:fc:57:16:76:27:96:55:20:a3:7c:13:ec:69:a5:
78:44:d1:a3:96:12:3a:16:ff:7b:ee:b7:03:a3:6d:
88:e5:f9:b6:b4:d2:ed:1a:52:d0:ae:ab:39:c7:d7:
fe:70:09:b1:85:14:57:67:ea:94:25:a6:c0:7d:0a:
34:6c:2c:ae:0a:d9:f4:ca:3e:c1:8f:51:96:87:73:
15:40:24:24:a1:c1:c4:3b:ff:4c:34:59:ed:02:5a:
bd:f3:7f:a9:32:bf:ee:39:b0:a2:05:c7:f1:b4:2d:
cf:e0:36:20:03:6b:ec:dd:0e:9d:6a:8e:15:a9:94:
25:29:6a:ab:55:26:38:de:0d:02:33:50:a1:c9:a6:
bf:78:fe:fc:09:25:38:df:02:8b:4f:80:0a:1e:1d:
16:26:7e:33:4f:0f:31:4e:3b:7c:fb:06:de:31:3f:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F1:47:8A:2A:DA:40:A0:82:19:5F:3E:18:B6:CE:40:EB:CB:8B:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1c3d83-50ca-3612-96e9-02cb22ecfc6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.191.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:22:cf:fa:8a:47:77:7d:a6:80:2b:8f:a8:83:70:6f:c8:a5:
ac:b5:63:0d:07:20:11:4f:2b:b8:ab:21:a6:12:5d:2d:36:13:
c9:db:e1:6b:4b:cf:41:e5:35:d1:7b:19:47:f2:f0:b6:94:30:
50:d7:f3:03:c0:e6:0d:31:09:36:f8:b1:b8:32:7b:c4:92:69:
31:47:ce:b6:c3:61:df:90:83:61:23:f9:48:a0:65:c7:9f:c8:
e6:74:78:6a:e1:15:91:f0:78:09:64:66:97:15:38:b2:b2:6f:
7d:46:d5:cc:71:a5:69:f8:a6:04:1c:7b:71:2a:d9:e4:45:09:
9d:f4:e6:7d:cc:6b:5e:7a:af:58:0b:c8:5e:4f:e3:59:03:e2:
88:14:9a:fe:6e:ea:00:3f:34:df:9f:b5:6a:28:57:f9:05:2b:
7e:0e:c0:d9:6a:80:11:f1:6c:21:48:32:bd:95:31:24:fb:af:
e7:cb:11:af:06:17:5e:f9:23:a7:0f:c3:e9:e9:9d:cf:7f:ba:
73:f4:3c:f6:3c:52:50:5c:09:a5:98:a8:70:24:71:7a:25:93:
29:23:84:55:d4:23:37:e3:56:02:2e:a7:14:ff:d9:98:b8:80:
24:8f:70:b5:c0:e7:f9:ab:83:a2:23:0c:31:44:49:c9:9d:63:
43:dd:31:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5XYkMgFRhnbGPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
M2JmZTE2NTUtODVhZS00MWMxLWJhYzQtMGFmMTMxMDIzZjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6U0bzGhX6RbCjXMwAbo5W7BH527dX0ybpCq
g5bGed4b1j6NVJvm1HMuqTSfvbtBmzVIQzCcWSePFzJJK4PkvGxUw4DvC8Rnn4tK
Nj/AhwMbeSJj8Qq74bCD/FcWdieWVSCjfBPsaaV4RNGjlhI6Fv977rcDo22I5fm2
tNLtGlLQrqs5x9f+cAmxhRRXZ+qUJabAfQo0bCyuCtn0yj7Bj1GWh3MVQCQkocHE
O/9MNFntAlq983+pMr/uObCiBcfxtC3P4DYgA2vs3Q6dao4VqZQlKWqrVSY43g0C
M1Chyaa/eP78CSU43wKLT4AKHh0WJn4zTw8xTjt8+wbeMT8N2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3xR4oq2kCgghlfPhi2zkDry4veMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QxYzNkODMtNTBjYS0z
NjEyLTk2ZTktMDJjYjIyZWNmYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwiz/qKR3d9poArj6iDcG/Ipay1Yw0HIBFPK7irIaYSXS02E8nb4WtL
z0HlNdF7GUfy8LaUMFDX8wPA5g0xCTb4sbgye8SSaTFHzrbDYd+Qg2Ej+UigZcef
yOZ0eGrhFZHweAlkZpcVOLKyb31G1cxxpWn4pgQce3Eq2eRFCZ305n3Ma156r1gL
yF5P41kD4ogUmv5u6gA/NN+ftWooV/kFK34OwNlqgBHxbCFIMr2VMST7r+fLEa8G
F175I6cPw+npnc9/unP0PPY8UlBcCaWYqHAkcXolkykjhFXUIzfjVgIupxT/2Zi4
gCSPcLXA5/mrg6IjDDFEScmdY0PdMRU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:31 2025 by rpki-client