Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa
File: e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa (raw, json)
Hash identifier: cg4EzgSp4haqcWMEXsSooALB80k3GIRVG40D58ujNdk=
Subject key identifier: 35:4B:54:54:9E:96:A6:44:BF:CC:88:9C:46:CA:CB:2A:01:45:2D:84
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848159FEABBB113BCB65EDD7F48
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12129
IP address blocks: 67.214.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ea:bb:b1:13:bc:b6:5e:dd:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=ea09b255-ad84-4244-b4b5-f459d1978390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:c4:ee:ff:b3:c7:5a:86:c7:85:06:d8:dd:
60:04:15:e9:2d:b0:b6:f7:6e:3b:15:f5:0f:37:70:
9c:70:b1:36:50:e7:64:4a:b3:fc:97:b9:42:3e:5e:
85:f1:1e:b8:ed:68:cb:c4:4b:f4:42:43:23:be:b7:
89:f1:7d:2d:56:e3:2f:35:ed:f2:4c:6e:dc:8e:14:
8b:9c:04:03:45:c5:c8:65:4e:20:df:d4:7a:bd:31:
56:1b:bc:32:62:d0:a0:a8:33:05:38:dd:c8:33:6e:
20:79:55:6e:53:d1:57:ed:e3:23:5c:d4:be:8c:8a:
be:8a:1d:09:08:27:09:e9:a9:99:21:a2:ae:46:94:
10:8a:96:57:b0:5e:33:cd:c5:90:60:23:7f:d7:7f:
d1:2d:66:7b:d8:61:a5:9a:e3:2e:7c:62:dd:eb:1c:
6d:cc:85:ab:c4:32:eb:d6:44:77:3b:ab:71:7d:cd:
b0:0e:0b:b4:23:00:38:88:47:b4:29:40:15:77:43:
a6:df:46:5f:b1:ab:f1:f7:aa:db:eb:70:92:33:2c:
aa:a5:b2:f4:75:95:c6:6f:8a:2c:c6:27:ce:ff:f2:
7e:b0:7b:f6:32:d4:98:e3:3c:b8:e2:31:ca:c0:b8:
87:6b:79:ed:1f:22:3b:a1:50:18:13:87:c0:8e:9d:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:54:54:9E:96:A6:44:BF:CC:88:9C:46:CA:CB:2A:01:45:2D:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:25:64:20:7f:ab:2c:be:d2:cc:b8:30:8b:35:35:f6:1f:23:
84:3b:19:71:46:c0:9a:fb:e5:df:4e:61:f1:38:75:c0:cc:cb:
81:27:70:ca:d2:b4:21:48:e7:a5:01:4d:54:9e:cf:cf:85:f6:
dc:42:05:bb:ba:8c:e0:e2:54:f9:e1:8f:e8:55:28:5f:05:af:
c9:bd:d5:71:52:95:18:30:ad:ae:86:31:6c:60:36:db:f2:81:
4d:3a:71:21:59:ce:ce:81:72:aa:29:4b:da:7a:9f:a7:18:0a:
c9:40:ae:d3:74:8a:a2:25:98:cb:08:e3:27:dc:b8:d4:bd:50:
0e:03:2b:30:45:d3:fe:e2:99:bb:ce:93:20:ac:25:ba:3f:f2:
ee:35:2c:bb:cb:a2:fc:51:23:a7:f0:62:4c:8c:d8:0b:1c:05:
e0:50:01:5b:0c:d1:d7:79:cf:d4:97:52:fa:35:3e:c4:18:d1:
71:f1:5a:e4:05:a1:f7:cc:4d:58:32:90:3f:32:26:52:b8:36:
b8:6c:4c:ab:7b:d3:3a:f7:d8:8c:8b:8b:10:0e:74:71:c3:ab:
01:36:45:d4:dc:89:92:0e:6d:4d:36:d2:48:6f:c4:01:a5:27:
ab:20:9b:89:cb:0c:6f:07:ae:17:65:ff:c9:2c:23:75:47:2e:
ba:a0:6f:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+q7sRO8tl7df0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
ZWEwOWIyNTUtYWQ4NC00MjQ0LWI0YjUtZjQ1OWQxOTc4MzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhazE7v+zx1qGx4UG2N1gBBXpLbC29247FfUP
N3CccLE2UOdkSrP8l7lCPl6F8R647WjLxEv0QkMjvreJ8X0tVuMvNe3yTG7cjhSL
nAQDRcXIZU4g39R6vTFWG7wyYtCgqDMFON3IM24geVVuU9FX7eMjXNS+jIq+ih0J
CCcJ6amZIaKuRpQQipZXsF4zzcWQYCN/13/RLWZ72GGlmuMufGLd6xxtzIWrxDLr
1kR3O6txfc2wDgu0IwA4iEe0KUAVd0Om30Zfsavx96rb63CSMyyqpbL0dZXGb4os
xifO//J+sHv2MtSY4zy44jHKwLiHa3ntHyI7oVAYE4fAjp2oAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVLVFSelqZEv8yInEbKyyoBRS2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZTlkMDM4ZDgtYWRiYy0z
YWU0LWIwNGYtMjA1ZGM3ODlhZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKglZCB/qyy+0sy4MIs1NfYfI4Q7GXFGwJr75d9OYfE4dcDMy4EncMrS
tCFI56UBTVSez8+F9txCBbu6jODiVPnhj+hVKF8Fr8m91XFSlRgwra6GMWxgNtvy
gU06cSFZzs6BcqopS9p6n6cYCslArtN0iqIlmMsI4yfcuNS9UA4DKzBF0/7imbvO
kyCsJbo/8u41LLvLovxRI6fwYkyM2AscBeBQAVsM0dd5z9SXUvo1PsQY0XHxWuQF
offMTVgykD8yJlK4NrhsTKt70zr32IyLixAOdHHDqwE2RdTciZIObU020khvxAGl
J6sgm4nLDG8Hrhdl/8ksI3VHLrqgb8M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:20 2025 by rpki-client