Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f1c496-fb49-3745-a898-531a019ab968.roa
File: 24f1c496-fb49-3745-a898-531a019ab968.roa (raw, json)
Hash identifier: 3yNIwd8Q94ipb96f2dggbJOn3NkQIl/YHLLrG6xiZjk=
Subject key identifier: 2F:8D:B5:BA:73:FA:41:80:50:15:97:89:B7:06:80:E7:2E:AE:C3:52
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8D6BE6647014C5711C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f1c496-fb49-3745-a898-531a019ab968.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 67.167.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:d6:be:66:47:01:4c:57:11:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b5ec9827-29bf-4843-a8fe-37a7faf57c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:bd:c2:12:55:33:1d:45:16:7c:c7:d1:dc:
f4:ed:e1:0f:26:f9:22:cf:f6:e1:a0:3b:61:06:e1:
20:6d:b6:af:d0:7c:47:ac:ab:3b:79:28:27:ec:81:
d0:51:6f:c7:c6:10:8f:8c:a0:c7:7c:9f:21:56:2b:
5d:08:b1:85:20:87:db:a2:77:f2:4c:94:d8:c5:ee:
82:3e:9e:ff:31:0b:b9:ac:9a:fc:40:3a:77:70:c9:
d9:31:7d:17:8d:fd:54:8f:2f:48:c1:1e:fa:b6:ac:
08:46:2c:16:14:d1:3c:32:5d:6c:a2:b7:21:74:f9:
90:13:25:17:07:a3:a3:e3:53:83:81:00:48:30:d5:
ae:c4:df:ed:4e:dc:27:6d:be:c7:32:69:c0:2b:ad:
79:63:7b:42:b3:b7:ae:cf:39:55:3b:c3:2a:68:08:
be:be:ba:81:ff:4b:f1:b6:3b:61:7b:98:48:bc:25:
47:5d:a8:af:00:4a:52:58:d4:aa:b1:96:b2:e5:cb:
db:c6:95:82:70:f1:a4:6c:e0:1c:0d:d5:4b:3a:20:
54:2e:b0:72:7c:e4:20:17:b1:24:87:35:7d:5f:97:
71:cd:8a:be:5e:72:1a:e3:d7:00:e2:f1:69:75:12:
db:26:6b:16:c5:77:b0:53:ce:ac:eb:86:0e:9c:d1:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:B5:BA:73:FA:41:80:50:15:97:89:B7:06:80:E7:2E:AE:C3:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f1c496-fb49-3745-a898-531a019ab968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.167.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:fd:d1:38:ab:57:d5:9d:58:d1:1e:b8:05:7b:65:d3:10:42:
81:9d:91:92:14:03:28:42:50:cb:a3:18:b7:ca:01:0d:a7:06:
ee:39:05:8f:af:dd:62:5d:fb:4c:48:a9:88:6e:5a:e6:ad:ca:
38:7d:35:54:5f:6b:10:76:ba:20:aa:24:98:79:0f:66:3c:01:
b1:e1:85:87:68:91:d6:2c:62:11:93:42:5c:f6:71:a2:22:b6:
57:6f:6e:0b:3d:e0:e9:51:e6:9d:63:75:15:cf:dc:ec:8e:92:
71:0e:c7:fa:be:a2:e6:c2:bc:5d:e6:b1:cc:94:65:53:f0:3d:
25:b8:ce:69:fb:e2:2f:0d:5c:63:ed:4a:dd:e0:e7:90:ac:3a:
c4:fa:e7:86:d7:96:ad:5d:b0:0b:61:01:40:32:d9:84:2c:05:
28:60:e5:dd:b1:fe:77:d2:28:f0:d6:b2:4f:4d:47:a7:69:ba:
66:d9:20:b0:ec:38:78:63:0c:92:ea:7d:11:42:29:36:ef:03:
3b:5c:07:3c:4a:78:fb:c7:38:c6:a2:60:55:37:7d:b7:e9:36:
93:5a:38:5c:0f:d6:17:01:c6:06:3c:8c:31:3f:41:46:38:19:
a4:43:ad:48:84:cc:70:6a:75:68:af:f0:80:62:a7:02:ad:de:
22:32:dc:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Na+ZkcBTFcRwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YjVlYzk4MjctMjliZi00ODQzLWE4ZmUtMzdhN2ZhZjU3YzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdG9whJVMx1FFnzH0dz07eEPJvkiz/bhoDth
BuEgbbav0HxHrKs7eSgn7IHQUW/HxhCPjKDHfJ8hVitdCLGFIIfbonfyTJTYxe6C
Pp7/MQu5rJr8QDp3cMnZMX0Xjf1Ujy9IwR76tqwIRiwWFNE8Ml1sorchdPmQEyUX
B6Oj41ODgQBIMNWuxN/tTtwnbb7HMmnAK615Y3tCs7euzzlVO8MqaAi+vrqB/0vx
tjthe5hIvCVHXaivAEpSWNSqsZay5cvbxpWCcPGkbOAcDdVLOiBULrByfOQgF7Ek
hzV9X5dxzYq+XnIa49cA4vFpdRLbJmsWxXewU86s64YOnNEk6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+Ntbpz+kGAUBWXibcGgOcursNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRmMWM0OTYtZmI0OS0z
NzQ1LWE4OTgtNTMxYTAxOWFiOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6eOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF790TirV9WdWNEeuAV7ZdMQQoGdkZIUAyhCUMujGLfKAQ2nBu45BY+v
3WJd+0xIqYhuWuatyjh9NVRfaxB2uiCqJJh5D2Y8AbHhhYdokdYsYhGTQlz2caIi
tldvbgs94OlR5p1jdRXP3OyOknEOx/q+oubCvF3mscyUZVPwPSW4zmn74i8NXGPt
St3g55CsOsT654bXlq1dsAthAUAy2YQsBShg5d2x/nfSKPDWsk9NR6dpumbZILDs
OHhjDJLqfRFCKTbvAztcBzxKePvHOMaiYFU3fbfpNpNaOFwP1hcBxgY8jDE/QUY4
GaRDrUiEzHBqdWiv8IBipwKt3iIy3II=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:21:03 2025 by rpki-client