Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa
File: a754082f-4513-3ee8-a390-23ea11051903.roa (raw, json)
Hash identifier: upZ7O+skxz+A2UiRTNnxwjdKgt4jIQjC9bLjw2YbUGQ=
Subject key identifier: 30:51:44:65:FC:82:1E:19:F8:9D:3F:DE:D7:C5:D7:68:81:19:2B:2E
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285847E1F7B7294B93BFA8BBF907C0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa
Signing time: Fri 15 Nov 2024 01:55:57 +0000
ROA not before: Fri 15 Nov 2024 01:55:57 +0000
ROA not after: Thu 13 Feb 2025 01:55:57 +0000
asID: 213122
IP address blocks: 167.94.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:f7:b7:29:4b:93:bf:a8:bb:f9:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Nov 15 01:55:57 2024 GMT
Not After : Feb 13 01:55:57 2025 GMT
Subject: CN=95d92bec-877b-42a2-b1fc-f547d7567418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:e2:46:97:83:5f:17:87:82:95:60:52:39:
a0:c1:79:6c:cd:1d:55:86:c1:4c:ec:51:5b:8d:a7:
3d:67:91:6e:1e:61:f0:ae:28:04:23:26:ea:19:c2:
c6:37:36:05:6b:6a:fe:ac:ef:d1:b0:71:fc:97:55:
ea:d0:1a:76:93:d7:8a:5e:9e:7f:94:7c:fb:d1:fe:
84:78:1c:07:f2:00:75:d1:2f:16:eb:f8:42:5f:8e:
a5:29:47:84:6d:06:c4:bc:e2:03:5a:d1:49:fd:04:
e8:c2:35:4c:29:89:83:54:0f:72:96:5d:76:b1:55:
7e:dd:d2:38:8b:fe:93:ff:c5:63:d2:d5:7e:85:66:
f3:5c:a6:c3:75:b5:82:92:a3:99:78:1f:08:f5:c6:
5a:23:3a:7b:8d:8e:02:65:62:33:12:b3:55:90:31:
1a:ef:9f:07:42:e3:0b:16:6d:b0:c5:f6:27:1e:9e:
63:27:53:93:a4:fe:85:43:1c:d7:5e:ee:c2:e7:18:
84:35:bc:1b:c0:33:b5:95:25:69:04:cc:36:2d:59:
ea:ba:73:b4:75:a4:fa:85:c9:da:07:a9:01:f3:66:
66:aa:e8:b0:d6:75:5a:84:ec:25:4f:1e:67:cf:12:
11:04:bd:5d:22:1a:46:42:47:7d:e5:dc:b7:95:22:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:44:65:FC:82:1E:19:F8:9D:3F:DE:D7:C5:D7:68:81:19:2B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7c:2f:01:67:99:a9:0b:8c:de:4d:84:97:c8:bb:e4:3b:ec:
4b:cb:a4:82:d3:b1:eb:29:5c:ca:00:a0:86:ed:85:be:0e:99:
02:c7:0b:77:6b:ab:e2:8b:1b:ed:39:52:e6:44:fc:0f:5e:0d:
4b:c3:3e:ef:e5:f1:20:13:a3:35:7b:6f:dc:9a:15:4c:6b:29:
27:96:b6:22:0e:02:14:73:63:03:17:3f:e5:5a:83:8d:2f:1e:
12:1e:63:66:69:47:61:c0:95:2a:46:3d:4c:73:75:9c:90:e0:
0b:24:d0:c1:eb:e0:c9:5e:7c:28:18:48:e5:46:40:3b:25:1a:
fe:a6:5c:79:d0:80:a8:04:a3:c4:4b:d6:da:4a:7d:2a:1c:59:
32:39:4d:6f:d0:7f:e6:7a:ca:7e:48:57:71:b1:50:36:8a:f2:
be:14:91:9f:6e:9a:8d:c7:25:25:2a:f7:aa:25:83:21:7b:cb:
07:f7:2f:59:42:56:1e:91:33:91:9f:14:62:7e:9b:68:b3:ee:
8f:7c:10:e7:ae:4b:d2:67:fd:1e:aa:a9:30:61:fb:97:1f:0d:
eb:52:60:1f:ff:e1:73:d9:fc:03:62:3d:b5:16:97:f0:88:b5:
9c:76:12:4c:bd:a7:96:d7:f5:d1:d8:62:93:8e:87:ee:0c:57:
e7:1f:b9:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh97cpS5O/qLv5B8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI0MTExNTAxNTU1N1oXDTI1MDIxMzAxNTU1N1owLzEtMCsGA1UEAxMk
OTVkOTJiZWMtODc3Yi00MmEyLWIxZmMtZjU0N2Q3NTY3NDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws7iRpeDXxeHgpVgUjmgwXlszR1VhsFM7FFb
jac9Z5FuHmHwrigEIybqGcLGNzYFa2r+rO/RsHH8l1Xq0Bp2k9eKXp5/lHz70f6E
eBwH8gB10S8W6/hCX46lKUeEbQbEvOIDWtFJ/QTowjVMKYmDVA9yll12sVV+3dI4
i/6T/8Vj0tV+hWbzXKbDdbWCkqOZeB8I9cZaIzp7jY4CZWIzErNVkDEa758HQuML
Fm2wxfYnHp5jJ1OTpP6FQxzXXu7C5xiENbwbwDO1lSVpBMw2LVnqunO0daT6hcna
B6kB82Zmquiw1nVahOwlTx5nzxIRBL1dIhpGQkd95dy3lSIt/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBRRGX8gh4Z+J0/3tfF12iBGSsuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc1NDA4MmYtNDUxMy0z
ZWU4LWEzOTAtMjNlYTExMDUxOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHF8LwFnmakLjN5NhJfIu+Q77EvLpILTsespXMoAoIbthb4OmQLHC3dr
q+KLG+05UuZE/A9eDUvDPu/l8SATozV7b9yaFUxrKSeWtiIOAhRzYwMXP+Vag40v
HhIeY2ZpR2HAlSpGPUxzdZyQ4Ask0MHr4MlefCgYSOVGQDslGv6mXHnQgKgEo8RL
1tpKfSocWTI5TW/Qf+Z6yn5IV3GxUDaK8r4UkZ9umo3HJSUq96olgyF7ywf3L1lC
Vh6RM5GfFGJ+m2iz7o98EOeuS9Jn/R6qqTBh+5cfDetSYB//4XPZ/ANiPbUWl/CI
tZx2Eky9p5bX9dHYYpOOh+4MV+cfuVQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:44 2025 by rpki-client