Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa
File: 5db721f0-41f0-3884-abef-c8d193e99ca5.roa (raw, json)
Hash identifier: W31pPX3vK3RtONdIe9UGJius9zeDtMH9SAfnVSrX8DU=
Subject key identifier: 22:C3:1C:F6:6B:00:FF:A8:81:05:2C:A0:DD:9C:BF:A2:C0:83:58:E8
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858486695C7FEAFBA3D1CE8731BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 202
IP address blocks: 168.87.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c7:fe:af:ba:3d:1c:e8:73:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=eac4aa94-2179-4734-8925-fe9f6f9b1bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:97:7d:97:80:a9:57:a6:c8:14:3e:75:8d:b7:
fd:6b:e3:1b:61:c8:18:18:19:98:66:77:bc:33:21:
97:43:2c:0b:23:c5:12:99:09:7c:c3:1e:36:ea:5a:
45:05:1c:b0:35:ca:17:19:b2:46:41:98:4e:93:72:
d6:77:2d:e7:79:06:b9:bb:fa:ca:dc:21:c1:da:c7:
91:f5:dc:f8:16:3c:05:e1:37:d9:dc:4a:7d:85:4a:
29:b3:3c:42:69:2a:56:46:5a:ed:42:09:8b:38:65:
61:b2:76:f3:31:ef:0e:76:b9:e3:b5:8e:bc:51:b2:
2b:64:9f:58:0d:00:af:91:e3:2c:a4:77:dd:11:0b:
90:17:69:77:9f:1d:63:02:e1:5e:83:8f:c0:df:08:
4a:64:af:76:21:bb:97:98:9b:2a:42:e7:00:39:2e:
48:34:98:55:d6:68:3b:e5:5f:d2:b4:0d:27:9b:c7:
0d:26:a1:c8:d4:2a:fb:f4:c5:82:9d:e0:61:42:ac:
d2:95:9c:de:4b:5a:d0:60:5a:3a:a3:4c:b1:2c:fa:
6f:41:8a:bb:fb:f0:7f:0c:05:2c:e7:26:36:63:d5:
d6:89:9a:9e:06:13:c9:9c:a5:c9:ef:6b:ce:92:e7:
62:5d:8f:d5:76:e7:c7:ca:e3:63:f8:e4:45:41:d2:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:1C:F6:6B:00:FF:A8:81:05:2C:A0:DD:9C:BF:A2:C0:83:58:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5db721f0-41f0-3884-abef-c8d193e99ca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:31:a0:a8:e2:37:97:fb:68:4a:08:34:99:74:0f:c7:3c:fa:
60:da:75:85:b0:94:c1:a5:7d:fe:7b:b2:69:38:22:ec:7f:be:
9c:49:08:8b:25:40:ba:99:fe:97:f4:13:13:9b:08:f4:b7:9a:
a3:e1:ec:fb:63:c9:ae:c0:c9:d0:ee:99:1a:97:77:bc:1a:9e:
e6:e1:04:c8:23:5e:18:29:47:3c:e6:c5:e0:45:9c:5e:73:14:
64:2b:1b:68:26:c2:6d:e9:fc:69:b9:29:57:fc:94:2a:d0:81:
78:4c:3c:94:4b:50:b1:2d:d7:ce:66:51:41:56:00:5c:ad:d7:
63:41:06:2e:f7:59:df:b9:33:12:c1:90:14:44:13:8a:a6:b8:
2e:07:b8:6f:d4:1f:5e:96:66:a2:b8:aa:6c:1a:f0:2d:6c:eb:
d7:81:49:e3:9d:56:dd:4c:5f:37:a1:8c:58:0f:9d:54:c2:a0:
64:1e:d7:ab:e8:6e:e3:fa:95:65:f4:d2:d8:65:a4:28:6b:da:
42:b5:ac:54:0f:06:06:21:14:f0:92:4d:39:77:d7:e7:f0:56:
a6:39:70:75:78:ca:c1:27:1f:db:aa:c4:88:90:9f:6a:df:cb:
e5:fb:42:dd:5e:60:7a:b8:96:22:f6:1c:01:0d:59:41:da:3c:
6d:77:ab:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcf+r7o9HOhzG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWFjNGFhOTQtMjE3OS00NzM0LTg5MjUtZmU5ZjZmOWIxYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipd9l4CpV6bIFD51jbf9a+MbYcgYGBmYZne8
MyGXQywLI8USmQl8wx426lpFBRywNcoXGbJGQZhOk3LWdy3neQa5u/rK3CHB2seR
9dz4FjwF4TfZ3Ep9hUopszxCaSpWRlrtQgmLOGVhsnbzMe8OdrnjtY68UbIrZJ9Y
DQCvkeMspHfdEQuQF2l3nx1jAuFeg4/A3whKZK92IbuXmJsqQucAOS5INJhV1mg7
5V/StA0nm8cNJqHI1Cr79MWCneBhQqzSlZzeS1rQYFo6o0yxLPpvQYq7+/B/DAUs
5yY2Y9XWiZqeBhPJnKXJ72vOkudiXY/VdufHyuNj+ORFQdJ/yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLDHPZrAP+ogQUsoN2cv6LAg1joMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWRiNzIxZjAtNDFmMC0z
ODg0LWFiZWYtYzhkMTkzZTk5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMxoKjiN5f7aEoINJl0D8c8+mDadYWwlMGlff57smk4Iux/vpxJCIsl
QLqZ/pf0ExObCPS3mqPh7Ptjya7AydDumRqXd7wanubhBMgjXhgpRzzmxeBFnF5z
FGQrG2gmwm3p/Gm5KVf8lCrQgXhMPJRLULEt185mUUFWAFyt12NBBi73Wd+5MxLB
kBREE4qmuC4HuG/UH16WZqK4qmwa8C1s69eBSeOdVt1MXzehjFgPnVTCoGQe16vo
buP6lWX00thlpChr2kK1rFQPBgYhFPCSTTl31+fwVqY5cHV4ysEnH9uqxIiQn2rf
y+X7Qt1eYHq4liL2HAENWUHaPG13q0E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:07 2025 by rpki-client