Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa
File: f99d9ce6-54fc-366b-ae9f-f3107630d619.roa (raw, json)
Hash identifier: GXDfLJTkRdEZsgXignwFf7b12L8iJASPyYz9Teuj2x4=
Subject key identifier: CB:66:0F:02:9E:A8:AF:D7:24:B0:55:B7:C3:61:C3:D9:09:91:EC:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFE7AD4864746290B19BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 67.170.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:e7:ad:48:64:74:62:90:b1:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ca97c6c6-3f1a-4535-8c08-2855b52418d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:e4:1d:9e:49:7b:9b:34:d9:5c:05:2c:da:
4f:cd:f2:06:fe:65:28:62:9e:5d:dd:ac:d2:8a:22:
60:e4:10:ea:b1:8c:23:e5:24:7c:3a:c7:69:62:4e:
f7:3d:b0:b8:af:0f:34:f6:06:86:c8:0f:ea:f4:5a:
71:26:93:de:67:18:cb:09:54:f5:cf:06:ee:c2:f7:
f6:85:68:ae:1a:a4:e1:5e:2f:ef:1e:1d:36:f8:8a:
e5:05:dc:87:6c:07:fc:63:de:d5:0a:d3:d5:fb:e9:
4c:19:64:b5:f9:ab:fb:c2:c0:92:00:2b:85:08:fb:
c5:63:f6:42:0e:aa:a9:d3:00:a3:fb:c8:59:e4:bf:
94:9e:bd:d3:0b:c7:97:28:eb:dd:c6:e4:fa:0c:80:
e2:72:04:c9:70:6e:2f:ac:14:85:3d:f2:34:5a:a8:
ed:d4:73:06:f2:86:e1:2d:96:df:61:3b:55:ed:b8:
93:41:b4:bf:2c:a1:f0:e7:fb:e5:7f:e3:51:6d:00:
af:b6:60:14:a5:d5:af:4c:74:8e:ec:17:87:a9:35:
2b:83:23:e6:e8:c7:20:e3:14:44:90:a7:2f:02:23:
b0:49:ef:77:9a:02:aa:6d:fb:1f:26:a3:bd:01:29:
15:4c:07:fd:47:cc:e4:68:ad:60:76:f6:2b:95:5e:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:0F:02:9E:A8:AF:D7:24:B0:55:B7:C3:61:C3:D9:09:91:EC:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.170.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:58:34:6a:5d:85:87:d1:20:dd:a1:5c:07:5b:e9:d6:3f:46:
36:f0:1d:35:2d:c2:02:f2:de:de:f1:22:11:d3:27:ff:50:cb:
63:24:2d:dc:ba:a8:c3:70:4c:41:36:ed:c1:9e:11:37:01:01:
d9:8a:90:c1:42:6b:73:0f:da:f9:78:bc:fc:32:f0:5f:22:c9:
dd:79:ad:cc:ce:d1:a3:c7:4b:e2:44:80:65:7b:09:d9:e6:ce:
fd:94:0e:d9:52:6b:6e:31:cb:76:16:10:6a:49:59:fb:29:5a:
37:31:52:a7:d8:40:c1:e5:74:e4:10:9c:f7:5e:b6:fe:cd:b1:
6c:a7:14:71:b4:e5:d8:5e:1b:d1:76:04:5b:72:92:fa:bd:86:
30:9e:61:08:44:80:10:4d:38:b1:0e:b6:06:e4:df:14:ac:b3:
04:4f:1d:dc:a1:e7:1d:ef:61:fc:12:42:8a:9f:db:f5:d6:b9:
24:64:8b:fc:ec:b9:54:cc:cc:fd:72:e0:db:6a:25:2f:65:18:
46:27:37:4f:9a:af:ff:dc:d6:a0:a6:0e:ac:a1:09:fb:2c:f6:
87:bc:2a:c4:9c:8f:85:40:bc:63:da:a7:ea:68:fd:f2:e9:8e:
1a:60:46:05:71:a6:ce:a5:80:37:97:c4:7c:34:9d:6f:1f:de:
dc:a8:ef:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+etSGR0YpCxm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2E5N2M2YzYtM2YxYS00NTM1LThjMDgtMjg1NWI1MjQxOGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnkHZ5Je5s02VwFLNpPzfIG/mUoYp5d3azS
iiJg5BDqsYwj5SR8OsdpYk73PbC4rw809gaGyA/q9FpxJpPeZxjLCVT1zwbuwvf2
hWiuGqThXi/vHh02+IrlBdyHbAf8Y97VCtPV++lMGWS1+av7wsCSACuFCPvFY/ZC
Dqqp0wCj+8hZ5L+Unr3TC8eXKOvdxuT6DIDicgTJcG4vrBSFPfI0Wqjt1HMG8obh
LZbfYTtV7biTQbS/LKHw5/vlf+NRbQCvtmAUpdWvTHSO7BeHqTUrgyPm6Mcg4xRE
kKcvAiOwSe93mgKqbfsfJqO9ASkVTAf9R8zkaK1gdvYrlV5fNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtmDwKeqK/XJLBVt8Nhw9kJkeziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk5ZDljZTYtNTRmYy0z
NjZiLWFlOWYtZjMxMDc2MzBkNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6rwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhYNGpdhYfRIN2hXAdb6dY/RjbwHTUtwgLy3t7xIhHTJ/9Qy2MkLdy6
qMNwTEE27cGeETcBAdmKkMFCa3MP2vl4vPwy8F8iyd15rczO0aPHS+JEgGV7Cdnm
zv2UDtlSa24xy3YWEGpJWfspWjcxUqfYQMHldOQQnPdetv7NsWynFHG05dheG9F2
BFtykvq9hjCeYQhEgBBNOLEOtgbk3xSsswRPHdyh5x3vYfwSQoqf2/XWuSRki/zs
uVTMzP1y4NtqJS9lGEYnN0+ar//c1qCmDqyhCfss9oe8KsScj4VAvGPap+po/fLp
jhpgRgVxps6lgDeXxHw0nW8f3tyo79w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:06 2025 by rpki-client