Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa
File: 7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa (raw, json)
Hash identifier: YuxOQFuVy+HCXqYOz8rLO2Mf2r7oR9VqIhF/hyvhqyI=
Subject key identifier: 3E:60:2C:6C:22:7E:8F:2D:F7:9A:71:3C:39:A1:54:DC:3B:E9:74:78
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F432858488DAB462DAC8E820D43032200
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 225
IP address blocks: 66.180.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:46:2d:ac:8e:82:0d:43:03:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=0a81855f-3c01-4f4a-a7a5-97166873b586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:82:dd:76:bf:b2:17:84:ce:83:e6:eb:b1:
31:df:9e:eb:c4:11:c0:e3:53:f2:25:b6:3c:1c:a5:
83:f7:7f:55:37:f4:21:7e:97:0e:77:d8:a0:d4:93:
dc:3b:06:f2:15:19:90:a7:f1:53:13:69:15:94:bd:
d0:ca:7a:ee:4d:e4:a1:0c:6e:94:56:00:9c:1b:fa:
89:c0:96:be:15:ae:5d:9a:de:df:e7:98:41:1f:69:
db:3d:48:f6:17:95:a8:ed:66:8a:3c:5f:6e:fd:f6:
ca:78:55:3f:78:7c:35:ec:20:f6:9f:75:c6:e4:18:
9b:ff:bb:16:ef:cf:d6:bd:f7:f1:67:a9:6b:da:5a:
bc:1b:40:a3:6b:b7:79:ce:8a:f3:f2:e6:69:b2:97:
2e:0c:1f:47:24:78:bd:c4:b3:a9:77:51:5b:4e:ee:
f5:eb:82:8e:d2:e3:df:45:c5:4b:1a:bf:f0:39:46:
d1:ff:eb:01:d7:eb:88:45:87:ee:a6:84:c9:60:40:
1e:07:52:43:56:e6:f2:70:59:0f:12:3f:60:17:5b:
8e:33:20:7d:88:65:38:0f:c6:2a:f1:f6:f2:f0:4b:
e7:56:98:66:31:d0:7e:c6:69:04:be:98:f0:d8:58:
3e:26:94:5a:b9:ee:ff:88:08:49:75:5e:ea:c4:68:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:2C:6C:22:7E:8F:2D:F7:9A:71:3C:39:A1:54:DC:3B:E9:74:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f2:66:a9:f9:5f:3a:3c:1e:b2:f9:5a:c1:36:3c:74:32:63:
a6:fe:19:17:1b:f8:47:35:ab:81:91:d6:3a:82:6f:ec:12:f7:
5b:1b:f8:63:26:a9:d2:9d:e6:a1:23:96:87:8b:eb:6e:13:0b:
ca:1f:44:51:eb:25:9b:65:c9:93:4f:eb:5e:df:d7:18:f6:14:
a5:ec:3d:3f:86:78:35:61:47:26:f5:75:88:1c:0a:25:d6:c0:
9a:72:1f:28:ae:b8:41:88:8f:a2:25:8b:5d:8d:cb:62:07:e1:
6a:a5:ee:51:34:02:d1:7e:46:1c:0e:20:bc:47:3a:7f:5d:cc:
75:12:96:a4:d2:ee:8a:ef:cc:0f:ff:bf:04:3c:29:41:72:dd:
ef:81:dc:a0:45:31:ba:60:f4:95:c6:e9:8c:de:8b:f7:6a:3c:
2d:ec:1a:ac:41:b4:7d:36:47:be:96:4c:db:1b:4e:71:c1:4c:
8e:de:b2:10:24:dc:69:2e:47:86:0c:cd:eb:96:43:95:3d:e5:
58:eb:53:0a:38:78:80:99:a5:87:17:67:8e:b7:79:bf:79:36:
98:11:bf:29:15:e4:1d:36:be:54:2c:c2:36:c9:f9:5a:44:05:
e4:9d:38:8b:7e:97:a7:0b:5a:1d:ed:45:e9:b1:fb:eb:e5:e6:
c8:ff:71:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0YtrI6CDUMDIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
MGE4MTg1NWYtM2MwMS00ZjRhLWE3YTUtOTcxNjY4NzNiNTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUSC3Xa/sheEzoPm67Ex357rxBHA41PyJbY8
HKWD939VN/QhfpcOd9ig1JPcOwbyFRmQp/FTE2kVlL3QynruTeShDG6UVgCcG/qJ
wJa+Fa5dmt7f55hBH2nbPUj2F5Wo7WaKPF9u/fbKeFU/eHw17CD2n3XG5Bib/7sW
78/WvffxZ6lr2lq8G0Cja7d5zorz8uZpspcuDB9HJHi9xLOpd1FbTu7164KO0uPf
RcVLGr/wOUbR/+sB1+uIRYfupoTJYEAeB1JDVubycFkPEj9gF1uOMyB9iGU4D8Yq
8fby8EvnVphmMdB+xmkEvpjw2Fg+JpRaue7/iAhJdV7qxGjlPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5gLGwifo8t95pxPDmhVNw76XR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvN2U5YmEyMGEtMzdmYy0z
ZWUyLTg3YWEtMmUyN2EyYjE4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDyZqn5Xzo8HrL5WsE2PHQyY6b+GRcb+Ec1q4GR1jqCb+wS91sb+GMm
qdKd5qEjloeL624TC8ofRFHrJZtlyZNP617f1xj2FKXsPT+GeDVhRyb1dYgcCiXW
wJpyHyiuuEGIj6Ili12Ny2IH4Wql7lE0AtF+RhwOILxHOn9dzHUSlqTS7orvzA//
vwQ8KUFy3e+B3KBFMbpg9JXG6Yzei/dqPC3sGqxBtH02R76WTNsbTnHBTI7eshAk
3GkuR4YMzeuWQ5U95VjrUwo4eICZpYcXZ463eb95NpgRvykV5B02vlQswjbJ+VpE
BeSdOIt+l6cLWh3tRemx++vl5sj/cbQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:03:06 2025 by rpki-client