Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa
File: 8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa (raw, json)
Hash identifier: BEpZbnkE+DTvadav9ZxfRkcvLyErLBrrlD24hck3Mgw=
Subject key identifier: 71:23:89:5E:0F:70:52:D8:24:46:71:52:A7:76:89:A9:5A:DF:52:BA
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584902EC0F9B526C75FB9AA46180
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 63062
IP address blocks: 67.44.64.0/22 maxlen: 22
67.44.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:0f:9b:52:6c:75:fb:9a:a4:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=bcb3255b-1838-496b-8e63-299dbea13df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:b9:06:25:c0:13:bf:fb:d4:63:62:76:1d:
d0:b7:4a:35:83:37:e3:4c:b8:75:be:38:08:23:50:
39:06:c7:6f:b7:bb:18:ca:2d:a1:ec:84:f4:4c:af:
c0:87:86:d7:b9:f2:55:b7:d5:56:c4:ea:e8:0f:e1:
69:ee:68:e1:5f:e6:8d:81:43:53:e3:ba:11:02:cb:
94:3c:0a:24:9c:c6:1b:5d:11:34:21:3d:85:85:74:
9c:2e:29:54:54:30:96:06:61:5b:14:fe:98:5c:61:
4e:b8:1d:23:54:cc:62:23:15:22:2a:10:6b:75:f5:
90:af:fc:f4:14:2c:79:52:3c:16:af:e0:51:d9:78:
e2:e8:7e:c7:47:af:f7:bf:97:41:8d:7f:5e:c8:81:
e2:ce:64:5b:30:23:08:91:69:31:43:f0:4f:5e:d0:
5f:0a:0b:e6:95:61:ca:32:de:26:57:d3:3e:20:ea:
41:48:fe:7d:39:8c:11:df:1a:78:6a:08:32:27:55:
91:72:4f:88:f6:a1:ae:37:83:cd:63:24:34:11:bf:
4a:66:39:c6:0e:28:5e:7c:1e:42:05:0d:0f:84:92:
c1:3e:9e:8b:f6:dc:1b:07:ee:3a:0d:a9:2b:b5:84:
64:50:fd:02:51:81:42:af:db:85:91:04:6e:93:d4:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:89:5E:0F:70:52:D8:24:46:71:52:A7:76:89:A9:5A:DF:52:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.64.0/22
67.44.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:80:48:ba:a3:7d:ca:66:57:18:e6:44:73:31:ee:9d:4a:bc:
b1:40:20:15:2d:0e:33:37:69:60:f0:44:38:39:fb:e4:ed:ac:
7d:08:ad:da:00:36:63:51:c7:c1:f4:9f:f2:43:36:45:20:d6:
9f:2f:db:93:22:b4:80:df:ae:f9:31:e3:84:ce:20:74:21:0e:
76:09:cf:b5:99:1d:0d:9c:25:2e:3b:78:65:04:75:88:4d:85:
92:b1:2d:5c:38:ff:0e:87:d9:89:ce:c0:34:25:6f:3e:1c:41:
e2:fa:68:d6:f2:f3:cc:4f:d8:7b:82:cc:9a:bc:17:ee:b4:ef:
d5:72:fe:47:4f:04:59:6f:67:f9:46:80:49:51:bd:ba:67:e8:
5b:bf:3a:e8:ae:85:e2:52:96:fd:4e:b3:ce:08:40:24:b3:01:
ff:d6:75:03:3c:09:9c:f7:b0:11:ff:59:15:43:b0:e6:02:eb:
32:25:82:36:ab:82:27:9a:91:83:fe:57:20:42:6b:7b:f3:50:
85:84:00:49:cc:36:39:ce:56:13:24:b6:50:6d:3f:a7:b7:dd:
bd:5d:9a:ee:01:24:32:06:3f:cb:35:dd:e2:ce:e6:1d:c6:aa:
5a:d0:4c:ac:2f:da:8c:4f:5c:32:67:4c:4f:9d:90:62:55:1f:
89:d5:3c:71
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkC7A+bUmx1+5qkYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
YmNiMzI1NWItMTgzOC00OTZiLThlNjMtMjk5ZGJlYTEzZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywu5BiXAE7/71GNidh3Qt0o1gzfjTLh1vjgI
I1A5Bsdvt7sYyi2h7IT0TK/Ah4bXufJVt9VWxOroD+Fp7mjhX+aNgUNT47oRAsuU
PAoknMYbXRE0IT2FhXScLilUVDCWBmFbFP6YXGFOuB0jVMxiIxUiKhBrdfWQr/z0
FCx5UjwWr+BR2Xji6H7HR6/3v5dBjX9eyIHizmRbMCMIkWkxQ/BPXtBfCgvmlWHK
Mt4mV9M+IOpBSP59OYwR3xp4aggyJ1WRck+I9qGuN4PNYyQ0Eb9KZjnGDihefB5C
BQ0PhJLBPp6L9twbB+46DakrtYRkUP0CUYFCr9uFkQRuk9R3bwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHEjiV4PcFLYJEZxUqd2iala31K6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvODgyMGIzZGMtZmU5ZS0z
Mjc5LWFkZjMtYmE1MzUzOGUxYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQyxAAwQC
QyxIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGiASLqjfcpmVxjmRHMx7p1KvLFAIBUtDjM3aWDwRDg5++Tt
rH0IrdoANmNRx8H0n/JDNkUg1p8v25MitIDfrvkx44TOIHQhDnYJz7WZHQ2cJS47
eGUEdYhNhZKxLVw4/w6H2YnOwDQlbz4cQeL6aNby88xP2HuCzJq8F+6079Vy/kdP
BFlvZ/lGgElRvbpn6Fu/OuiuheJSlv1Os84IQCSzAf/WdQM8CZz3sBH/WRVDsOYC
6zIlgjargieakYP+VyBCa3vzUIWEAEnMNjnOVhMktlBtP6e33b1dmu4BJDIGP8s1
3eLO5h3GqlrQTKwv2oxPXDJnTE+dkGJVH4nVPHE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:31 2025 by rpki-client