Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa
File: 668cfb6c-3232-30b8-96de-de01a02876e4.roa (raw, json)
Hash identifier: iKIla0g+jnyO95EVKN9+VoP2/fqhYoDzH11BqEXK8T0=
Subject key identifier: 5A:3C:97:B6:A2:1B:47:B2:D7:CC:6E:D8:33:CA:2E:48:5D:01:0A:D9
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858484C101313B77FB56C2209EF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 202
IP address blocks: 15.176.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:13:13:b7:7f:b5:6c:22:09:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6988fcc7-c4e4-45b0-acb5-77ad4f7d5603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:c5:56:e3:1f:72:bf:10:b8:2c:3f:45:43:
20:7b:14:54:23:af:88:89:30:ff:a1:f1:76:8a:12:
b5:62:74:46:1b:93:6f:69:6d:b9:aa:ed:89:95:6c:
ee:25:78:3d:25:11:09:0d:15:2d:63:ca:b4:85:a4:
25:6a:96:eb:75:61:f6:9b:30:0b:f9:5f:2d:e0:92:
55:34:9f:d4:c4:38:8d:35:f2:4a:bc:9f:5f:ad:43:
98:b7:e8:d0:1c:e1:97:91:4b:a6:f0:48:be:0e:fa:
6e:58:b2:8f:e0:77:8b:ce:aa:08:bf:1a:7b:f9:9c:
3e:4c:e9:85:41:34:d2:72:54:50:92:c9:fc:5d:be:
53:61:f9:bc:e3:3c:25:98:30:d9:2e:a9:c5:ea:8a:
5f:f6:b9:21:da:e8:bd:92:07:ab:84:29:fc:0f:1a:
a9:33:f6:b0:5b:31:6b:bd:b0:84:a9:63:09:45:5a:
74:f3:64:0c:76:b1:75:1d:fc:f8:36:7f:14:e9:f5:
b1:b8:d3:66:59:91:b8:f0:bc:03:33:11:0d:32:48:
57:5e:ae:94:e0:0b:4f:8d:6d:01:61:3d:d3:70:8c:
d3:47:19:c8:1e:93:65:23:70:85:05:41:ea:29:df:
12:8b:f3:30:7b:03:0c:af:e4:a0:79:01:22:f8:59:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:97:B6:A2:1B:47:B2:D7:CC:6E:D8:33:CA:2E:48:5D:01:0A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
15.176.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:14:89:7b:a9:06:fb:42:db:7e:1d:75:a6:0e:b0:80:68:10:
2b:07:45:f2:04:0c:92:7a:b9:82:32:fc:7a:7f:e3:94:95:f4:
15:df:ca:29:dd:ad:9a:dc:43:7f:d8:2e:5f:43:d4:54:4f:fd:
ed:38:96:41:5b:72:9e:52:02:3c:e6:b1:dc:d5:10:ff:56:99:
68:8d:75:6a:d5:24:c0:43:e1:f5:41:53:a3:48:50:6e:55:71:
50:14:db:e0:a1:5b:b9:ab:46:a8:ed:48:e5:8a:7d:da:81:25:
fb:8e:7f:90:d3:25:76:92:ac:58:bc:0a:df:ad:a0:db:fa:75:
72:11:3d:a9:07:a8:6c:07:17:4d:22:f4:b0:29:de:d2:9f:6d:
21:8f:6c:93:ba:be:71:91:98:70:43:d3:0a:41:62:c4:ba:e4:
98:0e:25:a8:34:45:c5:10:a5:3f:71:1a:5a:21:e7:d7:3f:a2:
05:d7:f6:ac:02:cd:06:12:05:8a:21:ff:0f:04:f8:05:e8:92:
17:0d:24:d8:93:9f:c8:53:fc:1c:22:62:12:1e:7f:31:f4:93:
bc:09:68:9e:03:bb:62:6d:08:a0:37:f4:c6:43:dc:25:51:d3:
5c:f3:84:93:6e:d2:03:66:c0:11:56:f0:bd:20:66:36:0b:71:
20:f8:f2:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBMTt3+1bCIJ74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Njk4OGZjYzctYzRlNC00NWIwLWFjYjUtNzdhZDRmN2Q1NjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF7FVuMfcr8QuCw/RUMgexRUI6+IiTD/ofF2
ihK1YnRGG5NvaW25qu2JlWzuJXg9JREJDRUtY8q0haQlapbrdWH2mzAL+V8t4JJV
NJ/UxDiNNfJKvJ9frUOYt+jQHOGXkUum8Ei+DvpuWLKP4HeLzqoIvxp7+Zw+TOmF
QTTSclRQksn8Xb5TYfm84zwlmDDZLqnF6opf9rkh2ui9kgerhCn8DxqpM/awWzFr
vbCEqWMJRVp082QMdrF1Hfz4Nn8U6fWxuNNmWZG48LwDMxENMkhXXq6U4AtPjW0B
YT3TcIzTRxnIHpNlI3CFBUHqKd8Si/MwewMMr+SgeQEi+FlyOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFo8l7aiG0ey18xu2DPKLkhdAQrZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjY4Y2ZiNmMtMzIzMi0z
MGI4LTk2ZGUtZGUwMWEwMjg3NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQED7AgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEUiXupBvtC234ddaYOsIBoECsHRfIEDJJ6uYIy/Hp/45SV9BXfyind
rZrcQ3/YLl9D1FRP/e04lkFbcp5SAjzmsdzVEP9WmWiNdWrVJMBD4fVBU6NIUG5V
cVAU2+ChW7mrRqjtSOWKfdqBJfuOf5DTJXaSrFi8Ct+toNv6dXIRPakHqGwHF00i
9LAp3tKfbSGPbJO6vnGRmHBD0wpBYsS65JgOJag0RcUQpT9xGloh59c/ogXX9qwC
zQYSBYoh/w8E+AXokhcNJNiTn8hT/BwiYhIefzH0k7wJaJ4Du2JtCKA39MZD3CVR
01zzhJNu0gNmwBFW8L0gZjYLcSD48uM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:18 2025 by rpki-client