Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
File: 0545dbf9-118c-39b7-9f00-b538a6304e31.roa (raw, json)
Hash identifier: EYDBrxGrWkxbPkRu0EjMCvXQgs/+7+RHynyvwyHyBoc=
Subject key identifier: 1A:4F:CC:30:88:E8:78:D0:9F:23:6F:1E:D1:3E:A9:15:E4:00:57:08
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858480EA5199DCC50F6E27CD74F80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 67.221.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:19:9d:cc:50:f6:e2:7c:d7:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=4fb8c92c-d5e5-4950-ad3c-2ce2d8d32ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:36:02:b3:06:ff:d7:73:ce:2a:ac:7c:1d:
75:53:99:cc:ba:e7:57:80:c2:93:ec:05:29:8b:3d:
da:0d:45:25:bf:c6:27:8a:b8:eb:24:9c:65:52:80:
a0:9b:c3:6b:b5:e3:72:66:4d:ba:f2:b0:d8:fd:66:
e5:9f:1c:e7:e4:a0:e7:93:13:1e:a7:3f:3e:95:82:
d5:7d:4a:77:f2:d7:3a:c0:b8:8d:63:e2:96:ba:d9:
bb:e9:75:4c:03:7d:9d:09:da:34:b2:7c:7b:31:28:
02:c1:ca:48:bd:a7:74:90:6b:f7:b4:d6:3a:58:42:
c8:4f:a1:b9:87:1c:79:75:73:27:be:e7:6e:ba:01:
b0:05:29:fb:07:0a:90:3a:c0:14:c2:99:9d:72:f1:
0f:cf:b8:36:d5:e5:84:79:51:67:7b:06:af:d1:54:
b7:d7:e4:d5:ed:99:b7:13:b2:9a:8c:77:d3:40:1f:
b0:74:eb:30:00:de:d6:47:c0:76:18:66:3b:72:94:
55:c1:c4:73:95:64:b5:1e:e6:59:d0:d9:09:26:ca:
db:ab:a3:13:81:12:16:86:07:96:9b:0e:a0:ef:5a:
72:27:b2:66:66:ad:e0:98:f8:71:4d:52:cc:5b:2f:
2c:fe:52:10:54:33:73:c0:bb:a3:b5:3f:2b:d9:bf:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:CC:30:88:E8:78:D0:9F:23:6F:1E:D1:3E:A9:15:E4:00:57:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ef:29:dd:c2:86:ad:3a:60:aa:b4:0e:a5:98:4a:9c:28:34:
57:f1:a4:e4:ec:df:fd:8c:8c:67:c9:5a:e5:bf:13:61:30:34:
7a:c0:7b:c2:70:f4:b0:44:25:02:9d:0d:ff:f0:f8:ff:40:9c:
10:4e:d6:42:d7:a2:dd:59:4b:5d:c6:f4:94:69:f7:f8:a5:cc:
fb:a8:c6:4a:79:ad:32:d7:c6:d1:7f:6d:42:75:86:ad:41:48:
38:0a:9c:fc:45:fd:5d:a3:f9:a9:a7:8f:c1:03:0d:dc:c8:07:
32:6c:f5:8d:09:0b:93:12:b8:1c:d8:08:a6:91:96:bd:1a:87:
62:3e:c2:2f:5b:71:a2:4f:28:84:05:c1:32:c8:d1:b8:dc:e7:
b9:d9:18:a2:8a:d0:ce:bd:87:44:54:9a:53:10:b2:24:5f:a8:
3b:04:83:98:a6:81:67:ec:55:1b:00:0d:bc:1b:9a:3d:0d:27:
68:52:c5:09:7f:76:38:7d:0f:ca:69:2d:94:7f:0c:70:91:4a:
5a:62:64:c0:37:0b:d5:e8:8a:dc:e0:ef:ed:d5:c7:3d:80:f8:
0c:2e:dd:52:8f:7f:a8:4d:e5:bd:6d:9c:8d:14:74:d5:c8:bf:
77:0b:6e:7f:30:6c:fe:c8:b8:59:c0:e4:22:24:c7:fe:e1:df:
03:70:00:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRmdzFD24nzXT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
NGZiOGM5MmMtZDVlNS00OTUwLWFkM2MtMmNlMmQ4ZDMyYWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKU2ArMG/9dzziqsfB11U5nMuudXgMKT7AUp
iz3aDUUlv8YnirjrJJxlUoCgm8NrteNyZk268rDY/Wblnxzn5KDnkxMepz8+lYLV
fUp38tc6wLiNY+KWutm76XVMA32dCdo0snx7MSgCwcpIvad0kGv3tNY6WELIT6G5
hxx5dXMnvuduugGwBSn7BwqQOsAUwpmdcvEPz7g21eWEeVFnewav0VS31+TV7Zm3
E7KajHfTQB+wdOswAN7WR8B2GGY7cpRVwcRzlWS1HuZZ0NkJJsrbq6MTgRIWhgeW
mw6g71pyJ7JmZq3gmPhxTVLMWy8s/lIQVDNzwLujtT8r2b9fQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpPzDCI6HjQnyNvHtE+qRXkAFcIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDU0NWRiZjktMTE4Yy0z
OWI3LTlmMDAtYjUzOGE2MzA0ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3vKd3Chq06YKq0DqWYSpwoNFfxpOTs3/2MjGfJWuW/E2EwNHrAe8Jw
9LBEJQKdDf/w+P9AnBBO1kLXot1ZS13G9JRp9/ilzPuoxkp5rTLXxtF/bUJ1hq1B
SDgKnPxF/V2j+amnj8EDDdzIBzJs9Y0JC5MSuBzYCKaRlr0ah2I+wi9bcaJPKIQF
wTLI0bjc57nZGKKK0M69h0RUmlMQsiRfqDsEg5imgWfsVRsADbwbmj0NJ2hSxQl/
djh9D8ppLZR/DHCRSlpiZMA3C9Xoitzg7+3Vxz2A+Awu3VKPf6hN5b1tnI0UdNXI
v3cLbn8wbP7IuFnA5CIkx/7h3wNwAI4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:41 2025 by rpki-client