Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa
File: e376c5d0-fcf2-335b-9ebd-52755e943374.roa (raw, json)
Hash identifier: LbYRq/bDcpDE/2NK3iei79L67XfmBFaTtjEtcmFDG4A=
Subject key identifier: DE:79:20:F5:C2:3D:6D:DE:43:0E:A6:CA:FA:9B:03:B0:6B:13:06:6A
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F432858486695B5DB9D50C00E3C3BE000
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 12189
IP address blocks: 67.43.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b5:db:9d:50:c0:0e:3c:3b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=d6906810-8a2b-4b31-849a-5afd3b1e727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:af:10:35:6e:85:dd:52:70:d8:09:dc:4b:
7e:54:4a:db:91:e0:66:af:d7:3a:0e:01:60:dc:21:
f2:c2:ef:04:05:55:4e:88:11:33:76:1d:39:a7:2e:
3d:63:74:99:fc:7b:66:89:8d:6a:82:b8:af:3b:e7:
67:8f:96:c4:64:4c:77:3e:2e:23:e4:19:1a:ad:5a:
c8:25:dd:dc:27:9e:41:d6:53:ea:72:81:c0:5b:f8:
25:ab:e9:52:e6:5a:06:65:f8:54:32:db:31:68:47:
91:ba:d3:28:58:bf:82:e7:76:94:49:90:b7:8a:17:
eb:1a:eb:da:5b:2e:3a:36:22:07:74:a0:b4:32:f6:
84:d2:87:1e:2a:56:db:4d:4e:2b:13:31:cc:fb:32:
21:19:a6:88:d0:8a:66:e9:71:90:ef:4e:5d:ce:55:
9d:3f:e2:29:ef:30:5e:33:b5:17:2b:08:36:79:72:
9d:b0:19:8c:9f:ae:55:ee:20:3a:c1:86:b7:a4:2b:
90:f2:19:1b:75:17:50:8d:fb:0a:48:ac:79:08:45:
31:2c:61:eb:81:ec:66:0f:4f:fc:e0:40:75:48:e7:
e0:f4:6d:70:18:97:77:b9:8a:69:b6:35:14:84:2d:
5b:e5:e0:73:69:13:cf:ad:48:34:f5:12:6a:e8:95:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:20:F5:C2:3D:6D:DE:43:0E:A6:CA:FA:9B:03:B0:6B:13:06:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:54:73:ea:75:e4:69:6e:e2:af:c0:82:41:cc:3a:63:1e:fb:
4d:36:3c:f7:12:13:04:4b:bf:a3:df:00:48:4c:89:78:c8:a8:
5c:3e:6b:e0:2f:2e:35:75:a5:54:c5:41:78:42:72:d0:b9:ac:
ab:81:38:d7:c8:db:be:1f:91:f9:d2:5a:74:ce:69:e6:92:f7:
74:49:b6:2f:d2:73:99:d2:db:f9:1b:2d:7d:0c:0c:e5:c2:07:
91:d0:80:af:76:27:2e:c5:d3:fa:e8:6f:bb:63:6c:eb:68:ac:
06:b4:c9:cf:8a:1e:6b:5d:57:da:93:24:b3:ba:60:47:84:eb:
33:00:19:6d:2d:66:45:cb:81:5e:fa:4a:eb:90:5b:da:93:42:
ab:14:31:c1:fe:dd:f6:ea:5a:20:79:79:36:db:cb:ea:c3:f5:
97:88:69:c9:9c:bb:2d:2a:60:8a:34:5b:81:d3:1d:17:ae:50:
4d:14:75:3b:17:fd:f7:00:ba:9b:f3:f5:0b:ab:40:d2:d7:a5:
26:3c:32:97:79:a9:de:a4:f6:77:84:52:d2:4f:8e:c8:c8:50:
68:67:ab:06:4b:b9:8a:a4:bd:96:b4:c4:26:c2:51:39:e6:d1:
51:33:fc:fc:8a:d0:25:fd:82:c2:e9:8a:99:d9:c4:3d:d7:80:
fc:10:33:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbXbnVDADjw74AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDY5MDY4MTAtOGEyYi00YjMxLTg0OWEtNWFmZDNiMWU3MjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP2vEDVuhd1ScNgJ3Et+VErbkeBmr9c6DgFg
3CHywu8EBVVOiBEzdh05py49Y3SZ/HtmiY1qgrivO+dnj5bEZEx3Pi4j5BkarVrI
Jd3cJ55B1lPqcoHAW/glq+lS5loGZfhUMtsxaEeRutMoWL+C53aUSZC3ihfrGuva
Wy46NiIHdKC0MvaE0oceKlbbTU4rEzHM+zIhGaaI0Ipm6XGQ705dzlWdP+Ip7zBe
M7UXKwg2eXKdsBmMn65V7iA6wYa3pCuQ8hkbdRdQjfsKSKx5CEUxLGHrgexmD0/8
4EB1SOfg9G1wGJd3uYpptjUUhC1b5eBzaRPPrUg09RJq6JU6eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN55IPXCPW3eQw6myvqbA7BrEwZqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZTM3NmM1ZDAtZmNmMi0z
MzViLTllYmQtNTI3NTVlOTQzMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZUc+p15Glu4q/AgkHMOmMe+002PPcSEwRLv6PfAEhMiXjIqFw+a+Av
LjV1pVTFQXhCctC5rKuBONfI274fkfnSWnTOaeaS93RJti/Sc5nS2/kbLX0MDOXC
B5HQgK92Jy7F0/rob7tjbOtorAa0yc+KHmtdV9qTJLO6YEeE6zMAGW0tZkXLgV76
SuuQW9qTQqsUMcH+3fbqWiB5eTbby+rD9ZeIacmcuy0qYIo0W4HTHReuUE0UdTsX
/fcAupvz9QurQNLXpSY8Mpd5qd6k9neEUtJPjsjIUGhnqwZLuYqkvZa0xCbCUTnm
0VEz/PyK0CX9gsLpipnZxD3XgPwQMwk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:03 2025 by rpki-client