Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa
File: 167eae46-bc88-39ca-be9a-4e8c66e65784.roa (raw, json)
Hash identifier: 0FvSdvmdk/b8cqORkIFs+OuLIrLZuKjvzUuZI47OqOs=
Subject key identifier: EF:ED:D1:D5:38:80:16:AA:BB:ED:EF:79:1F:E3:98:68:52:51:8F:96
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D1C82883F9FADF25DD80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 167.94.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d1:c8:28:83:f9:fa:df:25:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=d7c6472d-df84-4c66-887c-4daa4a27b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:3e:7f:7b:37:45:f4:a7:4b:2f:d0:a4:6a:
c2:0a:ea:d9:df:ea:c6:f3:0a:55:60:54:e6:05:06:
ad:f9:00:3c:9f:0a:62:41:e0:cc:e8:eb:c3:e0:53:
b9:91:e3:d0:bf:87:2c:29:e7:f6:23:d6:9e:94:09:
db:6a:2b:fc:41:9d:09:c2:9a:9b:1f:27:34:e8:92:
e5:2a:04:74:0e:6d:e7:52:46:39:70:c5:66:3f:5a:
90:0e:32:09:74:4c:3d:b2:a8:4b:a1:16:a1:8e:d6:
38:61:4d:12:23:e1:c9:f3:d7:d1:40:a5:d5:b6:dc:
00:20:b5:59:f9:07:9a:28:0e:6e:ee:16:8e:e7:74:
7a:f7:b0:d6:5c:8b:4d:28:8c:d6:7c:44:53:5f:ea:
72:35:2b:47:bc:4c:50:57:48:af:92:d1:b3:3b:a6:
e9:7f:ef:80:c6:eb:a3:d4:24:63:e3:88:63:c3:16:
a0:4d:3a:ab:20:48:08:e9:96:d2:45:57:97:3a:54:
e1:59:bd:f9:24:25:11:01:d8:bc:7f:22:b7:7f:ba:
d3:c7:22:8b:d6:db:db:4e:f2:bf:fd:6a:f0:34:1c:
e2:2a:48:76:80:6d:97:c4:0b:cd:3f:1b:d5:ba:fd:
1a:11:d8:7d:7a:b0:56:a8:14:d7:05:d7:c6:d9:f5:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:ED:D1:D5:38:80:16:AA:BB:ED:EF:79:1F:E3:98:68:52:51:8F:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:3c:8e:31:80:cb:f4:e0:42:d4:90:dd:ec:18:ee:ac:d0:98:
ba:76:64:47:04:04:49:7a:3a:3f:f6:dd:fb:3b:12:ee:d1:0f:
be:24:ed:03:c0:80:0d:c2:76:00:c8:95:c5:81:95:eb:a0:79:
d1:f5:d3:22:cf:fb:b6:db:0e:5a:88:a9:b1:55:c3:b4:cc:9f:
30:7e:09:d8:13:a4:c1:ff:fd:de:5b:29:35:e0:5c:21:01:18:
7a:1b:04:bf:af:66:e2:6c:de:f1:98:41:f5:b2:63:79:16:5a:
5f:3e:3d:61:48:b6:0b:43:f0:cb:5b:d2:2a:c6:4b:ee:dc:24:
d3:54:b0:0d:86:a3:c6:71:35:92:f2:e5:9c:da:4f:98:e6:14:
66:9f:e7:eb:4c:0c:54:e5:aa:62:12:7e:33:cf:8e:13:af:55:
b6:41:4d:b0:2b:65:25:0f:db:df:58:6a:db:4a:73:00:a6:86:
fc:7c:e5:63:32:f2:2e:fd:10:be:21:ac:6d:29:14:a0:a7:bf:
60:d4:01:e3:3f:b1:56:db:bf:80:ff:16:e7:3d:c1:d6:c6:fc:
73:77:f9:7f:f5:4c:77:cb:5e:50:c7:d8:81:68:84:74:25:3b:
18:05:91:70:58:64:af:70:68:33:1d:ea:8d:7e:ae:04:39:0d:
5e:2e:70:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNHIKIP5+t8l3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDdjNjQ3MmQtZGY4NC00YzY2LTg4N2MtNGRhYTRhMjdiMjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEU+f3s3RfSnSy/QpGrCCurZ3+rG8wpVYFTm
BQat+QA8nwpiQeDM6OvD4FO5kePQv4csKef2I9aelAnbaiv8QZ0JwpqbHyc06JLl
KgR0Dm3nUkY5cMVmP1qQDjIJdEw9sqhLoRahjtY4YU0SI+HJ89fRQKXVttwAILVZ
+QeaKA5u7haO53R697DWXItNKIzWfERTX+pyNStHvExQV0ivktGzO6bpf++Axuuj
1CRj44hjwxagTTqrIEgI6ZbSRVeXOlThWb35JCURAdi8fyK3f7rTxyKL1tvbTvK/
/WrwNBziKkh2gG2XxAvNPxvVuv0aEdh9erBWqBTXBdfG2fUxCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/t0dU4gBaqu+3veR/jmGhSUY+WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMTY3ZWFlNDYtYmM4OC0z
OWNhLWJlOWEtNGU4YzY2ZTY1Nzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIE8jjGAy/TgQtSQ3ewY7qzQmLp2ZEcEBEl6Oj/23fs7Eu7RD74k7QPA
gA3CdgDIlcWBleugedH10yLP+7bbDlqIqbFVw7TMnzB+CdgTpMH//d5bKTXgXCEB
GHobBL+vZuJs3vGYQfWyY3kWWl8+PWFItgtD8Mtb0irGS+7cJNNUsA2Go8ZxNZLy
5ZzaT5jmFGaf5+tMDFTlqmISfjPPjhOvVbZBTbArZSUP299YattKcwCmhvx85WMy
8i79EL4hrG0pFKCnv2DUAeM/sVbbv4D/Fuc9wdbG/HN3+X/1THfLXlDH2IFohHQl
OxgFkXBYZK9waDMd6o1+rgQ5DV4ucP8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:54:13 2025 by rpki-client