Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa
File: b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa (raw, json)
Hash identifier: yOa0mohrB/25TBJZkpGgn0V9cJmFjqitzawLvtGX0gs=
Subject key identifier: 6F:6C:2A:94:1C:AF:EA:41:74:AF:DF:12:88:73:08:88:35:35:2D:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CDBBDB0152BEC9A3C2870
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 67.187.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:db:bd:b0:15:2b:ec:9a:3c:28:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=cfc2330f-8e97-42aa-a400-cc1649d1cdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:15:ef:f5:d7:ed:9c:94:c6:fe:fb:b6:07:
82:7f:14:eb:69:87:d6:c2:ff:b6:59:83:75:0f:e2:
e9:59:44:ae:62:df:47:26:16:74:39:54:fd:83:aa:
6b:f9:6b:5f:ca:fc:c9:5b:17:68:d8:f8:50:86:d0:
8b:70:f0:7d:bf:fd:09:93:06:33:3f:69:4f:61:22:
c6:94:da:28:8f:f8:3e:5d:ac:b0:6e:b2:6a:42:35:
77:aa:23:0f:43:08:42:c7:1e:25:03:e1:82:33:73:
37:da:e6:94:51:0a:ac:51:3c:67:11:32:2a:74:fc:
87:d3:86:01:c1:c0:f4:8d:c4:49:a2:f5:46:e4:2e:
53:fd:30:c3:5f:8e:fe:f9:c9:38:fd:89:5c:0a:0d:
a5:a9:35:1d:4c:b1:6e:c0:52:8d:b3:79:5a:44:c8:
f1:3c:0d:ee:6c:a4:df:be:b9:f6:46:83:9b:cd:a1:
1d:35:37:0d:34:2a:95:c3:b4:0d:e2:41:1b:bb:53:
2d:29:e9:b5:dd:e6:d2:d8:27:a1:79:33:58:2b:3e:
18:a7:cd:5c:27:56:ab:3c:45:72:c1:18:df:d3:32:
f6:e9:e4:2b:46:9d:6e:59:2a:99:ed:47:1b:f5:06:
c4:b3:5c:15:35:81:be:4c:6e:ef:c9:57:39:32:17:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:2A:94:1C:AF:EA:41:74:AF:DF:12:88:73:08:88:35:35:2D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.187.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:4e:7f:01:07:de:f5:66:30:35:35:29:31:0d:f4:2d:ee:f0:
c2:f7:0a:ad:27:58:b7:46:b3:ee:81:3b:33:50:af:e3:f2:ad:
58:d0:cb:42:12:f9:6c:b8:ff:ff:12:96:73:4e:d4:fd:e9:8d:
62:67:1e:a8:0a:21:9f:7a:f6:38:46:26:28:ec:2e:24:6b:d0:
21:b5:70:16:e5:99:85:a2:28:8e:b2:c0:71:f1:9e:7a:99:76:
db:7d:b0:4a:ca:22:77:19:f7:c7:00:03:ed:00:af:0e:49:08:
bc:22:d1:b0:fd:f2:66:c7:cb:ac:ef:a9:91:67:33:0c:33:53:
ed:b4:81:b4:0f:07:a6:27:ef:a7:a6:f9:89:00:2f:cc:29:a7:
60:d0:69:dd:4a:16:a5:8d:74:69:c4:dc:c8:5b:1d:66:72:e9:
19:52:8b:45:38:3c:f2:15:92:5a:5a:ec:79:65:15:2d:88:39:
f6:e1:36:74:53:db:dd:1f:5f:6a:d1:e3:ef:59:da:fc:12:f3:
27:5f:bc:22:a6:a6:c3:74:3e:97:7b:2f:4c:05:ea:f0:b9:6a:
3f:dd:56:e1:81:35:84:c8:86:d8:e6:11:28:87:38:64:65:73:
77:2c:8f:5a:75:8c:ff:aa:d1:0a:a6:bd:e5:d5:29:0a:a9:4a:
0c:e0:ea:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNu9sBUr7Jo8KHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2ZjMjMzMGYtOGU5Ny00MmFhLWE0MDAtY2MxNjQ5ZDFjZGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB8V7/XX7ZyUxv77tgeCfxTraYfWwv+2WYN1
D+LpWUSuYt9HJhZ0OVT9g6pr+WtfyvzJWxdo2PhQhtCLcPB9v/0JkwYzP2lPYSLG
lNooj/g+XaywbrJqQjV3qiMPQwhCxx4lA+GCM3M32uaUUQqsUTxnETIqdPyH04YB
wcD0jcRJovVG5C5T/TDDX47++ck4/YlcCg2lqTUdTLFuwFKNs3laRMjxPA3ubKTf
vrn2RoObzaEdNTcNNCqVw7QN4kEbu1MtKem13ebS2CeheTNYKz4Yp81cJ1arPEVy
wRjf0zL26eQrRp1uWSqZ7Ucb9QbEs1wVNYG+TG7vyVc5MhevjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9sKpQcr+pBdK/fEohzCIg1NS2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIyMDEzN2UtYWFmYi0z
YWI4LTlhMDktNjNjNTQxNWFiMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7t0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANBOfwEH3vVmMDU1KTEN9C3u8ML3Cq0nWLdGs+6BOzNQr+PyrVjQy0IS
+Wy4//8SlnNO1P3pjWJnHqgKIZ969jhGJijsLiRr0CG1cBblmYWiKI6ywHHxnnqZ
dtt9sErKIncZ98cAA+0Arw5JCLwi0bD98mbHy6zvqZFnMwwzU+20gbQPB6Yn76em
+YkAL8wpp2DQad1KFqWNdGnE3MhbHWZy6RlSi0U4PPIVklpa7HllFS2IOfbhNnRT
290fX2rR4+9Z2vwS8ydfvCKmpsN0Ppd7L0wF6vC5aj/dVuGBNYTIhtjmESiHOGRl
c3csj1p1jP+q0QqmveXVKQqpSgzg6k4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:21 2025 by rpki-client