Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa
File: e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa (raw, json)
Hash identifier: vxttuaI2/SNyt0z8mqkss9cVOi+ueIgBNBKhqvwbThM=
Subject key identifier: 22:5C:B0:04:7A:90:85:16:50:DA:66:58:2E:D3:93:E0:0A:B5:D8:22
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F01E6D7114ED6AAFE7AAC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 203
IP address blocks: 192.85.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1e:6d:71:14:ed:6a:af:e7:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8fdeb244-7956-4517-b3e5-724129603d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:59:83:ee:5a:b6:fd:49:25:cc:c3:56:e4:
6c:ca:b3:9d:70:da:10:04:ca:63:84:b4:e5:72:ca:
1c:d1:08:6d:11:bf:90:c8:0d:24:87:79:93:4e:2e:
ed:96:b4:f3:3c:5c:e8:63:1a:4c:08:85:b3:b6:4d:
9c:e2:cf:45:15:91:6d:64:b7:e6:97:59:80:b3:90:
2b:1d:6f:fe:c0:4f:8e:f8:b1:a4:b9:75:ca:fc:3d:
f5:5a:8c:b6:62:b6:e3:95:c1:ff:93:fc:db:c6:8a:
56:29:6a:65:cc:ad:25:27:75:42:47:48:91:bb:2d:
73:97:ab:96:04:60:fe:44:88:30:1f:7d:7d:63:ac:
a2:ab:2a:a6:ac:1a:2a:dc:b5:6a:19:20:cf:03:a4:
8c:fe:6c:fd:6f:5c:c3:b3:62:f9:83:9d:ab:bd:e3:
79:ee:cb:fc:a6:9f:31:13:9c:ed:44:d9:b4:df:44:
45:89:4b:fc:07:d2:5c:48:53:84:e6:92:87:7b:cf:
b2:f6:c4:34:60:15:0c:41:d0:de:96:a3:73:a2:51:
b5:f3:6e:44:74:2c:e4:d7:80:80:82:56:4a:f6:88:
8c:22:ee:d4:aa:53:ab:35:49:d5:a1:25:ef:fd:a6:
4c:a0:83:98:b2:4c:d6:a1:e9:c4:e1:fe:05:b0:ee:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:B0:04:7A:90:85:16:50:DA:66:58:2E:D3:93:E0:0A:B5:D8:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e689d9c6-168a-3b34-b58f-fd8a86526dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:52:10:7b:5b:ea:06:a7:54:1a:b6:b7:55:c1:ee:ed:1f:e2:
0d:46:ab:f8:68:ff:ff:8c:eb:38:f6:c9:ee:cc:db:4b:1a:55:
dd:48:ab:f5:f1:6c:e0:34:ce:9a:74:7b:2d:62:a6:c4:37:3d:
25:f4:df:ef:72:1d:59:6e:0c:c2:db:74:26:cd:6d:75:36:3a:
22:61:7e:26:ce:4b:73:0c:9f:df:78:07:4a:3c:b7:55:92:fa:
97:16:34:bc:2b:31:4c:b5:f8:70:ac:7c:37:15:03:3b:47:cf:
73:1b:d7:1f:73:56:ef:43:8b:15:b9:4d:6f:91:89:1b:e0:e6:
9f:8d:17:38:d0:fc:7e:68:2e:e1:e6:99:59:2b:26:0a:ac:f9:
e0:9f:0c:13:27:47:95:a6:f0:fd:5d:db:ff:73:d7:18:ff:3f:
6b:94:40:fc:53:92:03:db:26:e3:01:13:3a:31:7b:ab:f2:ff:
8d:cf:c0:9c:28:16:ab:79:0a:98:60:b3:b6:2d:0e:1f:4f:0b:
75:7b:f2:1e:43:0e:fe:57:53:1d:02:09:7a:e8:56:3d:06:33:
dd:96:ec:58:cf:9e:ae:6b:ff:29:db:09:2b:bb:7d:be:e5:63:
b5:1d:2c:fa:9a:2e:3a:20:dc:07:1c:70:26:4c:4d:19:f5:6d:
47:93:6c:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8B5tcRTtaq/nqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OGZkZWIyNDQtNzk1Ni00NTE3LWIzZTUtNzI0MTI5NjAzZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6hZg+5atv1JJczDVuRsyrOdcNoQBMpjhLTl
csoc0QhtEb+QyA0kh3mTTi7tlrTzPFzoYxpMCIWztk2c4s9FFZFtZLfml1mAs5Ar
HW/+wE+O+LGkuXXK/D31Woy2YrbjlcH/k/zbxopWKWplzK0lJ3VCR0iRuy1zl6uW
BGD+RIgwH319Y6yiqyqmrBoq3LVqGSDPA6SM/mz9b1zDs2L5g52rveN57sv8pp8x
E5ztRNm030RFiUv8B9JcSFOE5pKHe8+y9sQ0YBUMQdDelqNzolG1825EdCzk14CA
glZK9oiMIu7UqlOrNUnVoSXv/aZMoIOYskzWoenE4f4FsO4kPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJcsAR6kIUWUNpmWC7Tk+AKtdgiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTY4OWQ5YzYtMTY4YS0z
YjM0LWI1OGYtZmQ4YTg2NTI2ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdSEHtb6ganVBq2t1XB7u0f4g1Gq/ho//+M6zj2ye7M20saVd1Iq/Xx
bOA0zpp0ey1ipsQ3PSX03+9yHVluDMLbdCbNbXU2OiJhfibOS3MMn994B0o8t1WS
+pcWNLwrMUy1+HCsfDcVAztHz3Mb1x9zVu9DixW5TW+RiRvg5p+NFzjQ/H5oLuHm
mVkrJgqs+eCfDBMnR5Wm8P1d2/9z1xj/P2uUQPxTkgPbJuMBEzoxe6vy/43PwJwo
Fqt5Cphgs7YtDh9PC3V78h5DDv5XUx0CCXroVj0GM92W7FjPnq5r/ynbCSu7fb7l
Y7UdLPqaLjog3AcccCZMTRn1bUeTbDY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:58 2025 by rpki-client