Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
File: a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa (raw, json)
Hash identifier: phgNaWlX6NRnL+K0rhhZpN/JuX4OxdnBmtsHCAJZ1q0=
Subject key identifier: CA:1D:F8:8E:53:50:0F:3A:EF:B3:33:1F:5D:F8:C5:38:CF:98:CF:D1
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB89A2FED4F466ABFE280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 97.68.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b8:9a:2f:ed:4f:46:6a:bf:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=743d7676-de1b-4c6d-aa2b-0ee02af13271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:ce:05:92:39:a3:d0:be:6f:12:e9:79:cb:
b8:09:15:a8:bb:ee:11:b3:48:e9:1b:fd:e9:67:ad:
6a:26:fa:3d:31:17:d6:e3:33:f0:5c:41:d3:c1:a2:
a2:36:6d:ea:7a:2f:16:4c:e7:78:9e:1f:f9:9e:2b:
fd:e6:d3:84:ca:19:93:a4:62:5f:18:1a:d3:f8:cf:
57:ec:c3:cb:2e:2f:19:65:cf:8b:db:7c:8e:a8:b7:
3f:5c:55:bc:12:bf:97:57:26:8f:d0:72:96:5a:0b:
1e:0e:ba:16:5b:49:97:5e:89:84:07:08:81:aa:77:
72:77:30:ea:b8:43:57:0f:93:82:0b:87:be:44:37:
7b:4e:4f:cb:d3:c3:cd:df:93:6b:69:31:9e:bc:18:
ac:dc:b5:0d:63:1d:91:7a:32:77:f2:9f:90:e5:8f:
6e:a8:5c:f8:c8:3d:a8:bd:28:6f:d3:20:72:c2:50:
15:f6:ea:ca:00:a2:97:81:7f:d1:5e:c6:8b:54:9d:
5e:41:86:c5:41:8c:58:c8:13:d0:b2:2b:29:97:6b:
14:4d:ec:f1:3c:44:35:8a:ee:d5:45:e0:b2:58:4d:
cc:0d:b0:a8:0d:f1:25:39:68:68:50:07:a7:88:9a:
bf:2e:5f:00:99:38:48:6e:05:25:d9:60:eb:57:7b:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:F8:8E:53:50:0F:3A:EF:B3:33:1F:5D:F8:C5:38:CF:98:CF:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
97.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b1:91:a7:56:e7:48:5e:01:6d:13:d1:ef:c6:83:52:30:99:
03:6f:97:23:0d:ef:3f:44:d9:e4:4b:14:25:d8:57:f6:54:4e:
81:26:ee:14:5f:af:71:3f:f1:77:52:f4:50:a7:5a:c2:22:5c:
72:37:23:40:0b:fa:25:d8:c2:03:7f:be:58:ef:92:45:b6:7e:
be:7b:5e:91:8f:3a:f0:f5:cc:e5:19:b2:fc:ac:ff:81:f2:f4:
17:85:d2:fd:97:00:ea:88:02:5f:b5:c5:3f:19:c0:a2:56:88:
8e:42:94:94:d4:92:3e:c1:93:9b:9a:e2:c5:0c:6e:35:dc:64:
21:c2:6f:88:c2:b2:c1:cd:4e:a4:9b:bb:54:40:c4:9a:15:05:
98:95:88:e8:cb:2b:87:23:1c:f9:dd:61:b0:93:73:90:d1:af:
1e:e4:6d:60:37:00:7d:80:b6:aa:be:a0:04:8f:76:bd:b6:f4:
d0:18:2e:fb:2d:8b:96:0e:06:cf:56:d6:b5:0a:5a:6f:ab:c7:
3f:7f:8e:0c:b5:3d:95:13:fb:9c:18:4c:76:62:e5:2f:6d:71:
03:1e:af:60:93:5a:00:f2:63:ea:f5:7b:6a:fe:25:5c:1c:01:
6e:51:7a:b9:90:73:34:a6:41:8d:b3:95:fa:35:aa:4d:e8:b6:
33:d9:87:f0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgAr7iaL+1PRmq/4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
NzQzZDc2NzYtZGUxYi00YzZkLWFhMmItMGVlMDJhZjEzMjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVXOBZI5o9C+bxLpecu4CRWou+4Rs0jpG/3p
Z61qJvo9MRfW4zPwXEHTwaKiNm3qei8WTOd4nh/5niv95tOEyhmTpGJfGBrT+M9X
7MPLLi8ZZc+L23yOqLc/XFW8Er+XVyaP0HKWWgseDroWW0mXXomEBwiBqndydzDq
uENXD5OCC4e+RDd7Tk/L08PN35NraTGevBis3LUNYx2RejJ38p+Q5Y9uqFz4yD2o
vShv0yBywlAV9urKAKKXgX/RXsaLVJ1eQYbFQYxYyBPQsispl2sUTezxPEQ1iu7V
ReCyWE3MDbCoDfElOWhoUAeniJq/Ll8AmThIbgUl2WDrV3vPcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMod+I5TUA8677MzH134xTjPmM/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTM1YTA1ZjgtMDVkOS0z
ZjQ2LTgzOTgtOWJmYTA4OGJkYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYUQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL7GRp1bnSF4BbRPR78aDUjCZA2+XIw3vP0TZ5EsUJdhX9lROgSbuFF+v
cT/xd1L0UKdawiJccjcjQAv6JdjCA3++WO+SRbZ+vntekY868PXM5Rmy/Kz/gfL0
F4XS/ZcA6ogCX7XFPxnAolaIjkKUlNSSPsGTm5rixQxuNdxkIcJviMKywc1OpJu7
VEDEmhUFmJWI6MsrhyMc+d1hsJNzkNGvHuRtYDcAfYC2qr6gBI92vbb00Bgu+y2L
lg4Gz1bWtQpab6vHP3+ODLU9lRP7nBhMdmLlL21xAx6vYJNaAPJj6vV7av4lXBwB
blF6uZBzNKZBjbOV+jWqTei2M9mH8A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:10:14 2025 by rpki-client