Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7209e7-28d7-3b70-ab8f-2308de192eb3.roa
File: be7209e7-28d7-3b70-ab8f-2308de192eb3.roa (raw, json)
Hash identifier: qdbk9mruR4W2cUC3DGeP9ghGJrC6/KtZOCRkY8Ke/X4=
Subject key identifier: EE:94:45:12:29:0E:18:09:72:D8:E2:0E:F1:AF:18:DA:74:1B:2D:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C136848EF3C15E2693F5F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7209e7-28d7-3b70-ab8f-2308de192eb3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 67.161.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:68:48:ef:3c:15:e2:69:3f:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4add3949-48d9-4ed4-8902-e5403c2b9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:b3:0b:51:bc:39:41:a7:0d:d0:b2:8b:60:
93:be:a2:c7:05:e0:84:61:d1:8c:30:33:6f:43:58:
7f:6a:2e:55:ac:9f:82:e7:a4:5a:4d:78:cc:a3:e9:
19:69:5f:5b:69:77:11:0c:2c:9d:bc:7f:d7:c7:62:
14:4d:c7:7e:d9:78:7b:ce:4e:96:2e:d2:7c:48:78:
ff:24:35:bc:7c:23:b1:91:ea:9c:36:d0:c0:24:2e:
79:ad:93:1a:66:28:17:8c:ec:07:d7:f4:6e:79:9a:
ca:cb:1d:86:53:9a:fa:b9:53:1a:37:d2:26:d9:c8:
b6:ea:c4:8e:24:57:83:99:84:05:a7:96:21:a9:fc:
7e:c6:89:6b:2a:9c:d5:0c:e5:1f:90:5a:94:ae:89:
45:d8:c6:0b:45:00:b4:59:6d:a6:73:c1:bc:be:93:
83:28:fe:eb:fb:02:a3:c7:12:3a:17:73:8a:1f:d8:
cd:19:0e:fe:d9:6f:e2:4e:22:97:29:a9:75:f2:1d:
40:eb:09:e7:3e:98:e9:5a:f8:90:5f:02:b3:d0:ce:
b6:c5:5b:2c:e8:59:54:ff:90:37:c5:15:36:8f:e8:
c7:4a:48:4f:c2:da:ba:d1:a0:87:f3:48:e7:37:9c:
c8:20:ce:a9:1a:3f:22:69:05:3b:37:0c:cf:98:49:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:45:12:29:0E:18:09:72:D8:E2:0E:F1:AF:18:DA:74:1B:2D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7209e7-28d7-3b70-ab8f-2308de192eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.161.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ec:4f:d1:17:07:a4:f9:e8:9b:f5:d1:e0:01:3f:29:8b:27:
28:1d:b1:e5:5c:e2:4e:2d:a3:3a:3d:de:62:da:ea:03:40:85:
14:9d:76:bf:fe:e4:39:49:a6:86:2f:e9:12:09:5c:a9:02:5a:
78:d8:d5:5b:b7:fd:88:29:d8:3c:9c:61:00:36:74:55:d1:32:
1d:bd:74:f1:dc:0d:a6:24:03:fc:5e:d0:35:b2:7d:ec:64:97:
d9:a9:20:30:28:c6:25:c4:65:9a:32:a4:70:fb:66:3a:e4:7b:
e5:5b:71:de:e7:e1:4f:0a:ce:a2:dd:7e:4c:7b:89:9b:3a:f8:
7c:f3:06:62:0f:09:d2:fe:f2:c8:aa:a4:ce:fe:d5:cc:0a:4d:
26:6a:df:0b:00:61:26:44:b4:de:5f:ee:45:d3:b2:76:38:da:
a8:0b:43:10:34:b2:c1:92:8c:6d:5f:2b:3f:34:da:a2:5d:b9:
ba:a4:e6:9f:58:47:68:ae:10:83:f3:54:0a:bb:e6:88:4d:f1:
72:20:fa:c3:6c:da:b1:d7:1f:b7:c9:28:ca:42:bc:ad:0f:52:
18:c7:f3:ed:9c:42:ce:5d:d6:a7:f2:6d:49:43:e1:84:cb:2e:
d6:f3:08:17:b9:1a:6f:ff:b7:40:26:32:03:31:87:bb:2a:de:
8b:ba:bc:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhME2hI7zwV4mk/XwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGFkZDM5NDktNDhkOS00ZWQ0LTg5MDItZTU0MDNjMmI5YmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHmzC1G8OUGnDdCyi2CTvqLHBeCEYdGMMDNv
Q1h/ai5VrJ+C56RaTXjMo+kZaV9baXcRDCydvH/Xx2IUTcd+2Xh7zk6WLtJ8SHj/
JDW8fCOxkeqcNtDAJC55rZMaZigXjOwH1/RueZrKyx2GU5r6uVMaN9Im2ci26sSO
JFeDmYQFp5Yhqfx+xolrKpzVDOUfkFqUrolF2MYLRQC0WW2mc8G8vpODKP7r+wKj
xxI6F3OKH9jNGQ7+2W/iTiKXKal18h1A6wnnPpjpWviQXwKz0M62xVss6FlU/5A3
xRU2j+jHSkhPwtq60aCH80jnN5zIIM6pGj8iaQU7NwzPmEnDfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6URRIpDhgJctjiDvGvGNp0Gy1CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU3MjA5ZTctMjhkNy0z
YjcwLWFiOGYtMjMwOGRlMTkyZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6E8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzsT9EXB6T56Jv10eABPymLJygdseVc4k4tozo93mLa6gNAhRSddr/+
5DlJpoYv6RIJXKkCWnjY1Vu3/Ygp2DycYQA2dFXRMh29dPHcDaYkA/xe0DWyfexk
l9mpIDAoxiXEZZoypHD7Zjrke+Vbcd7n4U8KzqLdfkx7iZs6+HzzBmIPCdL+8siq
pM7+1cwKTSZq3wsAYSZEtN5f7kXTsnY42qgLQxA0ssGSjG1fKz802qJdubqk5p9Y
R2iuEIPzVAq75ohN8XIg+sNs2rHXH7fJKMpCvK0PUhjH8+2cQs5d1qfybUlD4YTL
LtbzCBe5Gm//t0AmMgMxh7sq3ou6vH4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:06 2025 by rpki-client