Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa
File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json)
Hash identifier: lkrvDW29RKvCk7W4QZGG2TQHrzG2gQcMFjRj47Jp5/8=
Subject key identifier: 61:76:89:B0:C6:31:D3:4B:C8:07:02:2B:0D:38:64:E1:78:7B:43:69
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F43285848573ACD9D48F780B5145ADA80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398210
IP address blocks: 168.220.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:cd:9d:48:f7:80:b5:14:5a:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=18a432ad-714d-4ce5-ba72-becf56356345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:d9:e0:11:61:4d:ba:93:b6:1f:8e:3a:75:
f8:c5:dc:06:11:ea:6b:f7:bc:a7:57:90:8c:67:2f:
9c:d2:04:6e:69:13:01:3b:22:8b:83:d7:87:7c:e2:
1c:10:99:ae:94:e8:4d:d1:bc:06:69:f7:6c:6a:59:
a0:0f:69:b4:e1:ee:b0:75:b4:1e:a3:33:43:6c:d6:
f4:d3:02:4e:0f:42:d2:3f:f4:04:92:57:43:6f:32:
4e:9a:8f:41:50:b9:f3:4d:f0:61:fe:80:fc:37:84:
d6:da:df:59:91:c3:47:12:a0:e6:b0:3a:9e:17:2c:
0d:8b:88:2b:46:46:85:0f:18:9f:ed:a9:ce:3c:94:
8d:82:ff:78:1a:62:ec:6c:60:11:a9:05:ff:0a:71:
ef:e4:00:4c:23:c3:7d:44:29:0b:94:43:83:06:18:
44:85:4b:1b:97:97:87:fe:b6:93:ae:c2:77:c3:bc:
e6:fa:2a:5f:34:d8:83:ba:30:73:81:cc:e3:1e:c5:
15:c7:77:ac:fd:e3:3d:f7:3b:78:e3:94:f0:67:f4:
b0:7a:99:cb:a0:3f:2e:51:cc:24:d2:d9:f1:9a:ad:
f5:27:8c:ed:ea:c0:c8:ee:11:cd:a8:23:b7:ef:47:
b7:11:a5:99:12:74:1b:b0:4a:b4:1e:ad:ec:b0:dd:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:89:B0:C6:31:D3:4B:C8:07:02:2B:0D:38:64:E1:78:7B:43:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:6a:50:6d:f0:28:11:2b:bf:29:78:b5:67:ec:e4:27:c3:98:
ed:98:4d:49:75:36:12:72:14:ce:37:17:f5:dd:e3:dd:5a:62:
11:48:23:92:b3:4a:e5:96:c2:96:5c:14:2d:0a:42:ac:f9:e1:
a9:1e:3b:34:e7:59:21:86:50:c5:87:c9:9e:15:88:c4:46:62:
91:70:db:8a:26:a3:7f:57:48:90:8d:45:d4:60:ac:ac:4d:93:
06:be:84:2c:8e:df:c3:54:41:62:cd:5f:e7:cb:eb:90:36:57:
0d:74:42:b6:2e:c8:f0:57:77:35:5c:52:a6:fb:74:7b:f1:e0:
45:6d:ae:5a:c3:cf:6f:3b:75:8d:db:60:32:d2:8f:aa:f2:c2:
15:e0:55:84:e7:86:05:11:94:cb:aa:b9:8a:0a:1f:fd:e0:0f:
a1:b3:8b:4e:8e:2f:6f:c6:15:0e:c9:88:e4:89:37:fd:5d:4b:
a5:e6:4a:3f:82:dd:24:61:63:81:c9:21:95:06:b2:35:8e:e1:
9a:5d:93:a2:5f:dc:59:21:52:80:e9:c4:04:61:65:05:38:a1:
65:70:f2:72:07:38:df:d4:06:b5:28:50:1f:63:7b:33:b6:f1:
87:9a:29:df:5a:02:48:49:c0:67:b5:7f:81:8a:9a:a2:77:75:
de:bf:b3:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOs2dSPeAtRRa2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
MThhNDMyYWQtNzE0ZC00Y2U1LWJhNzItYmVjZjU2MzU2MzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+zZ4BFhTbqTth+OOnX4xdwGEepr97ynV5CM
Zy+c0gRuaRMBOyKLg9eHfOIcEJmulOhN0bwGafdsalmgD2m04e6wdbQeozNDbNb0
0wJOD0LSP/QEkldDbzJOmo9BULnzTfBh/oD8N4TW2t9ZkcNHEqDmsDqeFywNi4gr
RkaFDxif7anOPJSNgv94GmLsbGARqQX/CnHv5ABMI8N9RCkLlEODBhhEhUsbl5eH
/raTrsJ3w7zm+ipfNNiDujBzgczjHsUVx3es/eM99zt445TwZ/SwepnLoD8uUcwk
0tnxmq31J4zt6sDI7hHNqCO370e3EaWZEnQbsEq0Hq3ssN2SFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGF2ibDGMdNLyAcCKw04ZOF4e0NpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z
NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFqUG3wKBErvyl4tWfs5CfDmO2YTUl1NhJyFM43F/Xd491aYhFII5Kz
SuWWwpZcFC0KQqz54akeOzTnWSGGUMWHyZ4ViMRGYpFw24omo39XSJCNRdRgrKxN
kwa+hCyO38NUQWLNX+fL65A2Vw10QrYuyPBXdzVcUqb7dHvx4EVtrlrDz287dY3b
YDLSj6rywhXgVYTnhgURlMuquYoKH/3gD6Gzi06OL2/GFQ7JiOSJN/1dS6XmSj+C
3SRhY4HJIZUGsjWO4Zpdk6Jf3FkhUoDpxARhZQU4oWVw8nIHON/UBrUoUB9jezO2
8YeaKd9aAkhJwGe1f4GKmqJ3dd6/s0g=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:55 2025 by rpki-client