Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa
File: 5578aa83-a930-338e-85fd-bda2ae8cf69a.roa (raw, json)
Hash identifier: ozJaNH4dQHUoFX0Mw2B6k+eg+l8i6sh+GD1qIEISkYU=
Subject key identifier: 0A:4D:39:44:FE:2F:5E:E6:C8:A6:31:C1:58:74:A0:19:54:5F:BE:FA
Certificate issuer: /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial: 010D0C9F4328583DAB324BCDD477BAB3F5D18100
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 72.21.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:32:4b:cd:d4:77:ba:b3:f5:d1:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=8acd383a-02f5-4369-a75a-bde78e23c0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:32:30:35:cc:f8:55:a1:49:31:f0:03:c8:
5e:ac:bb:04:1c:0f:1e:17:a3:42:15:f2:b9:e4:80:
b5:86:88:59:44:67:d0:7d:90:93:34:50:bd:17:58:
86:bd:99:e5:c9:00:b0:44:47:f9:b2:5b:47:b5:e3:
fb:2a:14:de:53:d6:d3:ef:d5:c0:ba:f5:34:48:b7:
4b:60:26:4b:69:67:41:e7:f7:b8:af:ed:64:51:18:
e3:be:91:21:4c:7c:3f:6a:c7:b7:bc:aa:10:32:c9:
a4:d1:1a:5d:95:bf:0a:75:0d:0b:49:2b:d1:8a:49:
f6:ac:46:7f:ff:b4:68:a6:1f:a2:f2:c1:2c:e4:24:
34:5d:91:6f:2a:fa:d6:f8:cc:c8:bb:40:6d:c3:29:
c2:4a:07:a2:e0:db:9a:37:17:59:36:c8:4a:45:ba:
36:30:d3:7f:42:3b:6c:00:96:36:4b:a1:8a:e6:3b:
73:f8:9f:5d:2a:fc:36:f7:5b:92:a4:f6:26:fc:87:
56:80:19:9b:e2:5a:5b:6f:40:44:2a:40:49:7f:9c:
ce:26:c7:ff:31:47:48:84:7a:61:e8:dd:5c:ac:bd:
a0:f4:87:62:c4:02:41:46:d4:ed:b1:8f:4b:3d:39:
81:ca:48:9b:ae:08:d9:da:c4:07:8f:4a:bf:b1:5e:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:39:44:FE:2F:5E:E6:C8:A6:31:C1:58:74:A0:19:54:5F:BE:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5578aa83-a930-338e-85fd-bda2ae8cf69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl
X509v3 Authority Key Identifier:
keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:85:65:86:23:fe:88:f8:0e:a5:63:48:fd:8a:22:97:67:a8:
e6:08:6c:84:15:1a:5a:9d:a3:3b:00:68:35:83:9d:b5:90:37:
a4:9c:7b:e8:8f:f2:e2:fd:ca:5d:8f:43:59:35:c9:2a:8d:d8:
a8:2f:d4:7f:c0:d0:4f:d5:93:07:a2:2e:8a:27:cf:61:80:a3:
13:78:73:95:92:37:01:b7:ac:65:f0:ca:e7:f7:34:10:2e:a9:
3f:25:10:af:88:d4:89:0b:39:70:c4:ef:81:a3:cf:ff:48:bd:
5b:d9:39:98:43:47:11:5a:6e:23:8e:05:d7:3a:71:9d:89:71:
e9:70:14:3d:35:45:c5:cf:a0:d7:d9:65:c3:5e:d4:8a:cf:fc:
23:b6:8f:60:82:86:35:2d:b7:41:a7:d2:6d:ea:8e:42:37:34:
87:d5:6b:09:f9:48:6d:80:de:e4:43:c4:58:35:07:8b:f7:23:
12:11:b1:be:fa:b3:a1:1d:e4:10:c6:f9:86:2a:25:96:24:2f:
47:58:3e:2e:c8:57:6c:2d:29:54:32:8f:93:ef:f2:c6:4c:46:
df:5a:9e:6c:e1:07:27:63:db:d4:af:1c:73:68:b8:18:27:13:
77:4f:06:61:2b:f9:12:40:b6:ba:f8:64:26:9c:28:f6:17:15:
47:59:7e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2rMkvN1He6s/XRgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
OGFjZDM4M2EtMDJmNS00MzY5LWE3NWEtYmRlNzhlMjNjMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsgyMDXM+FWhSTHwA8herLsEHA8eF6NCFfK5
5IC1hohZRGfQfZCTNFC9F1iGvZnlyQCwREf5sltHteP7KhTeU9bT79XAuvU0SLdL
YCZLaWdB5/e4r+1kURjjvpEhTHw/ase3vKoQMsmk0Rpdlb8KdQ0LSSvRikn2rEZ/
/7Roph+i8sEs5CQ0XZFvKvrW+MzIu0BtwynCSgei4NuaNxdZNshKRbo2MNN/Qjts
AJY2S6GK5jtz+J9dKvw291uSpPYm/IdWgBmb4lpbb0BEKkBJf5zOJsf/MUdIhHph
6N1crL2g9IdixAJBRtTtsY9LPTmBykibrgjZ2sQHj0q/sV6WHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApNOUT+L17myKYxwVh0oBlUX776MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvNTU3OGFhODMtYTkzMC0z
MzhlLTg1ZmQtYmRhMmFlOGNmNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKFZYYj/oj4DqVjSP2KIpdnqOYIbIQVGlqdozsAaDWDnbWQN6Sce+iP
8uL9yl2PQ1k1ySqN2Kgv1H/A0E/VkweiLoonz2GAoxN4c5WSNwG3rGXwyuf3NBAu
qT8lEK+I1IkLOXDE74Gjz/9IvVvZOZhDRxFabiOOBdc6cZ2JcelwFD01RcXPoNfZ
ZcNe1IrP/CO2j2CChjUtt0Gn0m3qjkI3NIfVawn5SG2A3uRDxFg1B4v3IxIRsb76
s6Ed5BDG+YYqJZYkL0dYPi7IV2wtKVQyj5Pv8sZMRt9anmzhBydj29SvHHNouBgn
E3dPBmEr+RJAtrr4ZCacKPYXFUdZfhY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:09 2024 by rpki-client on console-fra.rpki-client.org