Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa
File: 4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa (raw, json)
Hash identifier: D1r6WCsTKOJq8BwadHpFjbAwA+9Tnf8BzBm6ysTxVZs=
Subject key identifier: F4:AF:45:97:B3:92:F1:8D:0F:8A:56:A3:13:C5:85:5C:58:78:42:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEA26527FA2EB6B7398000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 67.163.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:a2:65:27:fa:2e:b6:b7:39:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=63309dc6-904e-4087-a479-abf4315b90b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:93:8c:09:03:25:ea:43:e0:a9:3c:86:75:
95:ca:ca:79:fb:08:0d:dd:4c:99:7f:64:5e:62:02:
5e:a1:f6:c1:1f:4a:9e:f2:63:d8:50:c3:d8:90:0c:
69:38:b2:6f:8b:04:e8:98:95:b7:96:11:f9:ce:7b:
f5:0c:40:ec:55:1e:cf:fe:be:1f:1f:de:a0:ce:b8:
31:a8:5a:35:4b:6a:6b:75:74:13:40:96:d9:86:80:
21:bc:bf:0d:ec:cf:e7:e5:b9:5f:af:42:73:1b:2b:
03:59:5d:5c:58:54:4c:3f:ce:b4:18:b6:4a:7c:73:
12:5a:29:03:ab:8c:1a:61:5f:6f:85:79:fb:c4:ec:
b7:0f:8c:52:45:d7:7e:9e:32:99:10:39:c5:c3:f6:
4e:01:f3:27:0b:ee:c0:cc:a4:4d:4d:a8:16:81:33:
13:35:da:4b:a0:22:7f:a0:93:76:b3:d8:5c:48:59:
6d:b7:87:33:38:92:f5:9b:fa:85:be:c6:80:25:35:
de:d3:e6:f5:3e:bf:bf:48:94:50:e8:1d:ef:e5:9c:
df:07:73:42:80:40:f0:01:04:39:c9:76:95:6e:4c:
37:93:19:e1:20:1b:20:01:25:39:c4:43:d3:a3:88:
a4:62:6c:77:5b:bc:b4:fd:60:bc:33:82:48:01:45:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:45:97:B3:92:F1:8D:0F:8A:56:A3:13:C5:85:5C:58:78:42:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d0ac-76d1-39e3-b8b0-4130280b02a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.163.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:e5:d3:c7:f1:bc:5f:93:3f:9d:8b:5a:d4:1a:ff:91:72:ea:
93:78:eb:69:6e:9e:e3:32:37:3c:af:7a:a2:e4:81:fa:62:b1:
92:1a:09:8f:ab:ec:60:e2:69:e5:f5:ba:10:56:78:de:90:78:
ce:b3:dc:8c:d2:49:fc:9b:27:3f:6b:79:0c:59:13:5e:90:91:
64:e7:c8:21:6f:60:8d:1f:94:a5:d7:db:1b:9f:b8:5c:a5:20:
e9:17:d5:d7:6c:75:07:e3:a1:ff:28:2a:79:22:c5:c3:7b:fd:
55:a2:1c:29:bd:2d:90:e6:09:6e:19:98:cc:2c:06:63:79:db:
b0:12:c2:cc:48:19:de:70:98:33:eb:41:b1:93:c5:c3:4b:10:
0a:0b:1f:46:bc:93:ba:61:0f:83:80:5e:75:b9:e6:e3:3e:56:
66:fe:6a:72:a3:c6:f0:5b:04:9e:5c:06:c7:d2:4a:44:4c:c1:
a2:e9:ad:a6:3c:b3:fc:4a:a2:99:c1:fe:82:49:4e:d4:26:f2:
f4:1a:df:63:2c:09:87:f8:9a:e2:b0:df:0e:ed:4a:dd:cd:8a:
a3:52:d5:34:45:08:65:a1:47:86:9c:a4:6a:d6:d3:1d:58:1d:
34:78:01:3e:5e:eb:db:6e:ba:d0:aa:6d:18:4a:86:a7:fb:85:
09:11:59:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqJlJ/outrc5gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjMzMDlkYzYtOTA0ZS00MDg3LWE0NzktYWJmNDMxNWI5MGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJqTjAkDJepD4Kk8hnWVysp5+wgN3UyZf2Re
YgJeofbBH0qe8mPYUMPYkAxpOLJviwTomJW3lhH5znv1DEDsVR7P/r4fH96gzrgx
qFo1S2prdXQTQJbZhoAhvL8N7M/n5blfr0JzGysDWV1cWFRMP860GLZKfHMSWikD
q4waYV9vhXn7xOy3D4xSRdd+njKZEDnFw/ZOAfMnC+7AzKRNTagWgTMTNdpLoCJ/
oJN2s9hcSFltt4czOJL1m/qFvsaAJTXe0+b1Pr+/SJRQ6B3v5ZzfB3NCgEDwAQQ5
yXaVbkw3kxnhIBsgASU5xEPTo4ikYmx3W7y0/WC8M4JIAUXebwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSvRZezkvGND4pWoxPFhVxYeEINMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDMyM2QwYWMtNzZkMS0z
OWUzLWI4YjAtNDEzMDI4MGIwMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6NYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfl08fxvF+TP52LWtQa/5Fy6pN462lunuMyNzyveqLkgfpisZIaCY+r
7GDiaeX1uhBWeN6QeM6z3IzSSfybJz9reQxZE16QkWTnyCFvYI0flKXX2xufuFyl
IOkX1ddsdQfjof8oKnkixcN7/VWiHCm9LZDmCW4ZmMwsBmN527ASwsxIGd5wmDPr
QbGTxcNLEAoLH0a8k7phD4OAXnW55uM+Vmb+anKjxvBbBJ5cBsfSSkRMwaLpraY8
s/xKopnB/oJJTtQm8vQa32MsCYf4muKw3w7tSt3NiqNS1TRFCGWhR4acpGrW0x1Y
HTR4AT5e69tuutCqbRhKhqf7hQkRWfs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:53 2025 by rpki-client