Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
File: a553c4ca-c48f-3643-91b5-e2e0760a951b.roa (raw, json)
Hash identifier: RQing/QErarcowmSgh7G3lkWwi2QN2vuZDG8bhBgV/8=
Subject key identifier: FE:EC:D3:86:D2:EB:EC:30:C6:10:02:41:0B:B2:62:55:97:3A:61:BD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213428435587CB5E4FB77C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
Signing time: Sun 09 Mar 2025 10:20:35 +0000
ROA not before: Sun 09 Mar 2025 10:20:35 +0000
ROA not after: Sat 07 Jun 2025 10:20:35 +0000
asID: 577
IP address blocks: 67.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:28:43:55:87:cb:5e:4f:b7:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:35 2025 GMT
Not After : Jun 7 10:20:35 2025 GMT
Subject: CN=9fb2273e-20b9-4d9d-9aff-3fbdcee0b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:07:cc:3b:6e:0d:33:2b:57:73:f2:62:aa:
ea:1e:16:db:b3:39:17:b9:1d:9d:1e:f6:53:a2:8e:
61:5a:d8:fd:27:8e:d9:92:a6:ac:58:00:ba:01:51:
a7:96:0e:ef:cb:33:9f:39:2f:3f:c2:02:b7:de:33:
76:38:dd:bd:65:c9:15:9b:77:f1:21:97:0e:63:81:
e1:b5:19:df:91:c6:8a:fb:7f:a0:a0:f7:e4:2e:65:
95:da:82:89:e8:ec:5e:f6:00:8b:25:90:89:0e:a9:
9b:ab:5d:9c:38:7d:b4:5d:1b:a1:fe:bc:b5:ea:27:
0b:80:0b:cf:41:1d:42:6d:c5:f9:88:d4:5f:f2:2c:
c7:16:a9:f1:34:93:44:32:19:b9:ca:5d:0c:16:ec:
e0:c6:ba:e1:40:5d:a9:ea:d6:bd:03:53:c4:5d:9d:
81:13:ee:9d:ea:b8:af:b7:25:0f:54:ae:59:46:c9:
19:f5:fc:a9:00:17:0e:4a:db:38:7d:74:39:61:53:
8d:63:2c:20:23:b7:af:83:ed:fd:d6:02:99:62:50:
de:a3:ea:35:af:63:36:fd:53:56:f8:10:e5:0c:50:
51:d0:be:67:6b:c6:2b:a2:22:d8:13:b9:59:64:b6:
22:80:0c:00:26:97:2d:a2:c7:45:16:31:c0:87:24:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:D3:86:D2:EB:EC:30:C6:10:02:41:0B:B2:62:55:97:3A:61:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:99:d2:44:0c:97:07:6c:3d:a3:4d:cf:51:32:8c:dc:89:7b:
f3:1f:3e:f5:02:c5:0a:09:6a:3b:c4:5e:d4:ad:38:e8:c3:ec:
49:35:5a:c1:29:21:10:02:9b:8c:da:2b:58:35:dc:a5:68:cb:
37:00:61:b5:c1:c4:5b:96:11:80:df:9a:ac:ef:a3:ea:11:f4:
94:cf:0a:7a:3b:c1:f7:f0:b5:da:f3:e0:c4:9b:ce:41:e6:63:
d3:5c:b8:15:4f:97:99:14:c7:0f:71:08:cf:98:c5:cd:16:2f:
8d:80:87:de:12:c4:40:ed:d6:47:cd:db:84:48:94:a4:10:84:
69:94:08:6b:45:e2:a5:8b:5f:79:13:de:ff:e9:51:4f:a2:20:
36:be:85:cb:7e:c9:d2:1e:d3:2f:ec:87:1b:1d:f9:15:0d:05:
41:8b:21:6a:fb:3d:aa:c5:48:4e:4e:bc:ab:c6:1b:b5:19:0f:
97:95:f7:3a:b9:8c:d6:82:51:ee:8e:23:7e:93:9b:15:70:01:
2b:31:79:1a:74:17:8e:47:94:73:94:98:96:a7:b3:5c:25:3e:
f9:e1:93:6c:4b:73:5a:2d:f4:53:e1:36:f6:15:ac:2d:6a:7a:
9a:64:8c:14:03:ca:11:55:f7:d3:a7:a3:ce:14:52:7a:6b:5b:
93:4b:3c:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhNChDVYfLXk+3fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzNVoXDTI1MDYwNzEwMjAzNVowLzEtMCsGA1UEAxMk
OWZiMjI3M2UtMjBiOS00ZDlkLTlhZmYtM2ZiZGNlZTBiMjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxkHzDtuDTMrV3PyYqrqHhbbszkXuR2dHvZT
oo5hWtj9J47ZkqasWAC6AVGnlg7vyzOfOS8/wgK33jN2ON29ZckVm3fxIZcOY4Hh
tRnfkcaK+3+goPfkLmWV2oKJ6Oxe9gCLJZCJDqmbq12cOH20XRuh/ry16icLgAvP
QR1CbcX5iNRf8izHFqnxNJNEMhm5yl0MFuzgxrrhQF2p6ta9A1PEXZ2BE+6d6riv
tyUPVK5ZRskZ9fypABcOSts4fXQ5YVONYywgI7evg+391gKZYlDeo+o1r2M2/VNW
+BDlDFBR0L5na8YroiLYE7lZZLYigAwAJpctosdFFjHAhySWEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP7s04bS6+wwxhACQQuyYlWXOmG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTU1M2M0Y2EtYzQ4Zi0z
NjQzLTkxYjUtZTJlMDc2MGE5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ0QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfJnSRAyXB2w9o03PUTKM3Il78x8+9QLFCglqO8Re1K046MPsSTVawSkh
EAKbjNorWDXcpWjLNwBhtcHEW5YRgN+arO+j6hH0lM8KejvB9/C12vPgxJvOQeZj
01y4FU+XmRTHD3EIz5jFzRYvjYCH3hLEQO3WR83bhEiUpBCEaZQIa0XipYtfeRPe
/+lRT6IgNr6Fy37J0h7TL+yHGx35FQ0FQYshavs9qsVITk68q8YbtRkPl5X3OrmM
1oJR7o4jfpObFXABKzF5GnQXjkeUc5SYlqezXCU++eGTbEtzWi30U+E29hWsLWp6
mmSMFAPKEVX306ejzhRSemtbk0s84Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:33 2025 by rpki-client