Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
File: 77e799cb-a436-3318-85a0-aa9c82570b24.roa (raw, json)
Hash identifier: Jr9ApCcxmzB6PEbAlJMwGYFXvlzs6nCisOLn5vHF7Bg=
Subject key identifier: 04:FB:D6:90:C5:8C:A2:5A:B1:AC:72:CC:72:5A:C3:F7:B5:D6:1F:32
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858486D9055D719665C957562CC20
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 174
IP address blocks: 67.159.24.0/23 maxlen: 23
67.159.28.0/24 maxlen: 24
67.159.29.0/24 maxlen: 24
2001:49f0:d11a::/48 maxlen: 48
2001:49f0:d124::/48 maxlen: 48
2001:49f0:d125::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:55:d7:19:66:5c:95:75:62:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=495b014f-e69e-4f4d-8859-bb9b53190ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:28:26:56:3a:c3:4a:da:84:bd:05:65:3c:
33:2b:89:89:fa:69:e0:41:86:80:a2:22:65:5d:4a:
61:a4:30:fb:33:dc:d9:b1:ed:a1:a1:6a:f2:01:92:
c6:99:1c:6d:60:02:f8:90:5f:16:a5:36:2e:a3:7f:
a1:0e:c2:8c:ec:a4:28:6f:95:d3:3f:78:a4:f7:59:
fe:f7:f9:ca:1b:cf:39:d8:9c:d6:fb:2a:f8:16:97:
15:8e:a7:c4:2d:a8:bb:de:3f:f6:9e:79:ce:a3:3e:
71:0f:7a:cd:9e:fb:b9:60:94:61:6f:1c:f2:88:3e:
34:90:e5:27:f7:ed:9f:4f:fa:32:75:f3:2c:87:87:
cf:29:71:fa:95:71:d3:2a:e3:66:44:da:92:40:29:
9a:46:11:04:f8:52:4c:50:91:e9:e6:93:20:99:eb:
7c:be:f3:1f:8d:e6:1b:28:8e:2e:96:1b:80:3c:a6:
3c:b7:3f:28:07:9e:bb:28:c5:e2:6a:9c:b3:18:f2:
45:9c:aa:e2:82:a4:28:a7:fc:6d:00:ad:eb:95:84:
c3:79:d1:4e:2e:00:08:db:5e:9f:43:37:cd:73:15:
39:a5:b3:7a:79:1e:9b:66:a7:b5:35:b5:95:f5:16:
a4:e3:37:db:53:30:68:3e:0c:61:f2:49:ef:11:03:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:D6:90:C5:8C:A2:5A:B1:AC:72:CC:72:5A:C3:F7:B5:D6:1F:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.24.0/23
67.159.28.0/23
IPv6:
2001:49f0:d11a::/48
2001:49f0:d124::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:42:37:38:40:3f:ad:d2:05:1f:09:e4:5c:5b:4d:e6:99:07:
49:91:b6:92:42:9a:17:5c:b2:6c:1c:b3:7d:3f:9a:d6:8d:16:
ee:d7:6b:fd:f2:9c:ea:c0:c8:6c:bb:ca:3f:41:fd:91:07:0c:
33:4a:da:0f:d6:c2:7b:07:0f:a6:da:84:79:8a:e1:5a:c5:84:
fc:e5:e1:43:91:00:d4:de:c2:c6:01:db:97:fe:52:a2:90:21:
8e:55:00:c5:e9:db:ad:7a:f9:23:79:c9:84:db:0e:c1:69:89:
3b:8f:8c:24:03:7b:40:4a:09:89:df:9b:a8:38:0b:65:72:64:
91:25:ec:7a:4f:b5:b8:4a:aa:a2:65:6e:6e:a2:40:12:1c:8d:
3d:9f:71:97:4c:2c:c1:1c:82:28:b1:61:4f:7f:7f:33:e3:22:
43:8f:c5:61:3a:c6:24:f6:d1:a2:9a:b6:fb:30:a7:b7:55:9b:
0b:c4:52:23:7a:08:68:ef:65:7e:d0:a0:53:ef:03:d9:f2:a6:
0f:98:f1:21:5b:e3:b4:94:e2:15:ec:de:65:92:43:93:b4:f4:
b5:ef:e1:25:e2:05:f3:a7:d6:60:6a:31:41:2c:37:51:f7:55:
d4:47:73:e7:4d:46:a0:52:55:5e:ae:76:b4:62:80:b7:e2:ea:
87:7a:cb:a1
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEhtkFXXGWZclXVizCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDk1YjAxNGYtZTY5ZS00ZjRkLTg4NTktYmI5YjUzMTkwYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9ooJlY6w0rahL0FZTwzK4mJ+mngQYaAoiJl
XUphpDD7M9zZse2hoWryAZLGmRxtYAL4kF8WpTYuo3+hDsKM7KQob5XTP3ik91n+
9/nKG8852JzW+yr4FpcVjqfELai73j/2nnnOoz5xD3rNnvu5YJRhbxzyiD40kOUn
9+2fT/oydfMsh4fPKXH6lXHTKuNmRNqSQCmaRhEE+FJMUJHp5pMgmet8vvMfjeYb
KI4ulhuAPKY8tz8oB567KMXiapyzGPJFnKrigqQop/xtAK3rlYTDedFOLgAI216f
QzfNcxU5pbN6eR6bZqe1NbWV9Rak4zfbUzBoPgxh8knvEQO0OwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFAT71pDFjKJasaxyzHJaw/e11h8yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzdlNzk5Y2ItYTQzNi0z
MzE4LTg1YTAtYWE5YzgyNTcwYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB
Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAykI3OEA/rdIF
HwnkXFtN5pkHSZG2kkKaF1yybByzfT+a1o0W7tdr/fKc6sDIbLvKP0H9kQcMM0ra
D9bCewcPptqEeYrhWsWE/OXhQ5EA1N7CxgHbl/5SopAhjlUAxenbrXr5I3nJhNsO
wWmJO4+MJAN7QEoJid+bqDgLZXJkkSXsek+1uEqqomVubqJAEhyNPZ9xl0wswRyC
KLFhT39/M+MiQ4/FYTrGJPbRopq2+zCnt1WbC8RSI3oIaO9lftCgU+8D2fKmD5jx
IVvjtJTiFezeZZJDk7T0te/hJeIF86fWYGoxQSw3UfdV1Edz501GoFJVXq52tGKA
t+Lqh3rLoQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:06:50 2025 by rpki-client