Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7efd6490-d771-31a0-a7c1-d82ad8feb4fc.roa
File: 7efd6490-d771-31a0-a7c1-d82ad8feb4fc.roa (raw, json)
Hash identifier: sjlEtLrVmCdYn+uc8c+CZmR32T1IKuZA3sReqQveNPQ=
Subject key identifier: 38:F9:0E:A1:73:92:16:AC:F7:99:67:00:6E:66:5E:BA:05:27:5E:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6B44FE5EB8B788A78D3A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7efd6490-d771-31a0-a7c1-d82ad8feb4fc.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 67.166.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:b4:4f:e5:eb:8b:78:8a:78:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=93eba7cd-1909-4c37-ac00-269d70a057d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:df:eb:8d:d3:df:b5:7f:cb:20:88:5f:ba:
e0:57:f7:4c:47:a2:7b:ce:84:c6:0d:51:92:fd:1d:
c2:ee:bf:fc:0a:2a:f3:85:8a:e3:2b:16:ac:ef:b1:
c3:28:b4:0f:69:e5:24:e9:ed:4a:51:18:b1:a4:25:
dc:76:bc:a9:5f:04:b7:c0:38:63:1f:ad:83:8d:8e:
d3:5c:14:81:cf:0a:86:0c:0b:99:87:df:13:87:0c:
40:49:bf:e5:27:b3:09:1e:55:59:5b:ad:5e:0a:db:
05:a2:ff:23:14:f5:b8:63:83:72:d9:d7:e4:1c:e1:
10:06:d2:68:1b:5d:5d:75:52:2f:1f:55:4d:a1:3d:
65:01:46:be:93:48:26:18:d3:6c:10:e3:f1:94:4c:
18:ef:e8:a1:bb:0d:3d:85:41:f7:1b:c3:ea:6f:96:
61:fb:1a:da:8d:32:96:58:41:c2:72:9d:53:1e:40:
cf:ff:d5:25:bc:c9:b4:a2:e8:6b:1a:22:e8:fc:02:
0e:a1:3e:4b:81:ec:08:6e:3f:b5:ed:2f:de:00:f4:
a1:8c:61:2c:6d:f3:dc:74:95:bd:98:23:9b:97:34:
63:b0:27:2e:b8:8e:bf:60:20:83:39:9a:5b:07:5c:
1b:54:cf:7e:06:cd:2a:24:5a:f0:a8:39:55:b0:60:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:0E:A1:73:92:16:AC:F7:99:67:00:6E:66:5E:BA:05:27:5E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7efd6490-d771-31a0-a7c1-d82ad8feb4fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.166.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:97:7e:7c:a4:7e:b8:6d:05:6d:e4:67:a1:6c:1b:9c:0d:cc:
34:ad:12:b4:4d:c9:1f:f9:af:7a:6f:93:b1:c3:03:81:ee:72:
be:35:8e:65:50:30:6d:d4:4a:c2:31:98:9b:f9:f8:58:c8:4e:
ee:eb:d8:e9:c8:c6:16:ca:90:aa:07:f3:47:7f:70:c4:4c:19:
7f:0a:a7:6d:d8:e0:24:2a:84:f1:ce:b3:77:f3:c4:40:c4:a7:
34:d4:c8:10:7f:70:6c:66:83:18:66:88:66:04:77:e6:78:f0:
7d:e7:b0:81:d2:e6:d0:4d:50:b4:42:f3:0b:cc:5d:9d:ca:fa:
7c:13:40:91:61:ec:6c:b4:64:ca:65:28:46:3e:2d:b3:49:7e:
05:bb:24:6d:10:98:61:b1:d3:e4:68:fa:de:e5:86:43:db:73:
b4:10:21:07:3b:b5:06:09:c6:0e:9c:58:36:33:d0:20:34:bc:
7e:69:f3:b4:68:2c:61:48:28:b3:e1:71:02:ce:cb:bb:f4:64:
aa:6e:66:7d:f3:66:9b:1c:a9:92:ef:c1:12:9b:f7:63:81:f2:
85:7b:ce:8f:d6:8f:8f:a4:85:65:20:1f:27:6d:be:09:a3:fe:
6a:c4:7c:02:50:92:5c:52:b2:0b:fb:8b:2a:c8:f9:b5:42:80:
c5:01:3a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rRP5euLeIp406AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OTNlYmE3Y2QtMTkwOS00YzM3LWFjMDAtMjY5ZDcwYTA1N2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloLf643T37V/yyCIX7rgV/dMR6J7zoTGDVGS
/R3C7r/8CirzhYrjKxas77HDKLQPaeUk6e1KURixpCXcdrypXwS3wDhjH62DjY7T
XBSBzwqGDAuZh98ThwxASb/lJ7MJHlVZW61eCtsFov8jFPW4Y4Ny2dfkHOEQBtJo
G11ddVIvH1VNoT1lAUa+k0gmGNNsEOPxlEwY7+ihuw09hUH3G8Pqb5Zh+xrajTKW
WEHCcp1THkDP/9UlvMm0ouhrGiLo/AIOoT5LgewIbj+17S/eAPShjGEsbfPcdJW9
mCOblzRjsCcuuI6/YCCDOZpbB1wbVM9+Bs0qJFrwqDlVsGDgPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDj5DqFzkhas95lnAG5mXroFJ17IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2VmZDY0OTAtZDc3MS0z
MWEwLWE3YzEtZDgyYWQ4ZmViNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6ZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCXfnykfrhtBW3kZ6FsG5wNzDStErRNyR/5r3pvk7HDA4Hucr41jmVQ
MG3USsIxmJv5+FjITu7r2OnIxhbKkKoH80d/cMRMGX8Kp23Y4CQqhPHOs3fzxEDE
pzTUyBB/cGxmgxhmiGYEd+Z48H3nsIHS5tBNULRC8wvMXZ3K+nwTQJFh7Gy0ZMpl
KEY+LbNJfgW7JG0QmGGx0+Ro+t7lhkPbc7QQIQc7tQYJxg6cWDYz0CA0vH5p87Ro
LGFIKLPhcQLOy7v0ZKpuZn3zZpscqZLvwRKb92OB8oV7zo/Wj4+khWUgHydtvgmj
/mrEfAJQklxSsgv7iyrI+bVCgMUBOk4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:09 2025 by rpki-client