Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa
File: 0967f533-314b-31fa-9f37-b33da500d8a5.roa (raw, json)
Hash identifier: Eih2XtJpn8JeTl4jNpSCtsbOQUs3ZcHVJW+YeJ5LM+k=
Subject key identifier: DF:3E:9C:4B:93:7B:8C:13:7C:6A:E6:2B:02:6C:3E:0C:5C:5A:01:FE
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F43285848C467AB0F1B04EAA6FBF72600
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa
Signing time: Tue 04 Feb 2025 04:34:12 +0000
ROA not before: Tue 04 Feb 2025 04:34:12 +0000
ROA not after: Mon 05 May 2025 03:34:12 +0000
asID: 14813
IP address blocks: 72.22.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:67:ab:0f:1b:04:ea:a6:fb:f7:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Feb 4 04:34:12 2025 GMT
Not After : May 5 03:34:12 2025 GMT
Subject: CN=4bb4dc9f-714e-42f1-90a9-337f0bdd1e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:1f:01:dc:f7:d4:12:ce:42:6a:4f:8f:88:
c2:b6:7a:8a:0e:1a:c7:f1:3b:24:37:28:d9:b5:6b:
be:20:c2:14:2e:7d:94:9c:94:cd:91:05:03:f4:20:
4c:ff:57:2d:09:2f:c9:ad:ca:08:e9:d2:58:06:35:
be:dd:96:4a:b7:41:0b:9f:32:45:42:30:d7:4e:27:
3e:d1:c3:e3:2c:69:a9:01:03:56:ae:e6:7c:22:e4:
47:8f:4e:d5:74:53:09:88:43:6f:14:55:3b:93:de:
b4:a4:82:74:67:36:de:06:bf:2d:e3:d5:6a:a7:d8:
da:26:2d:fd:cb:49:fa:87:90:53:b4:f1:6c:e9:6b:
b8:b4:41:63:26:b6:44:ca:ad:5e:23:3d:84:6e:09:
59:34:65:83:f9:c0:cd:0b:f0:58:bd:de:b9:fd:80:
4a:3a:15:d9:7e:8c:b0:69:eb:3c:fe:7e:b7:40:be:
1f:20:ba:79:f8:17:99:b2:6a:21:f5:88:2f:f3:15:
97:62:87:c9:92:7d:81:0a:46:36:e0:6b:2b:35:88:
ba:54:9e:50:6e:7c:f9:c8:5a:68:f4:c6:f5:8e:37:
82:6a:8f:36:f9:40:f0:63:52:9d:79:f7:a8:9d:f3:
95:bb:4a:4d:8b:4f:f3:34:40:c6:99:49:73:97:67:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:9C:4B:93:7B:8C:13:7C:6A:E6:2B:02:6C:3E:0C:5C:5A:01:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e5:99:18:4e:6a:7a:79:c0:17:3a:2e:7f:ea:ef:3d:8c:18:
c0:ff:9f:c5:89:67:62:8e:e5:1e:10:d1:38:64:b8:03:54:40:
a6:13:70:79:e7:aa:72:e8:cd:7d:f2:1a:f2:45:fb:c3:0d:bc:
2f:58:ec:37:5c:2c:48:2a:6f:d9:6c:5c:a3:98:c4:bc:c9:f4:
b8:f6:87:4d:5c:e0:0d:c6:1d:2f:d8:45:8f:df:37:50:1f:39:
36:b6:b0:19:60:fa:6c:49:8c:8c:74:cc:5b:0d:41:84:ab:76:
c1:86:88:23:30:5b:82:d9:c1:a3:83:98:e7:a0:81:71:c6:45:
6a:f9:bb:51:27:72:82:4f:94:ec:c4:66:de:d4:70:40:81:18:
76:6b:97:22:b8:f7:66:36:6c:fb:19:e5:9b:86:6b:41:37:4a:
5c:10:7e:3a:c7:9d:dc:5d:d9:95:38:82:62:05:3b:f2:bc:45:
23:6a:25:96:68:d9:00:67:4d:2b:a3:c3:26:b1:34:5b:4f:be:
4b:82:54:79:90:65:27:28:30:49:14:3f:10:d2:5c:96:9b:25:
36:b9:8c:d4:f8:2f:1f:9e:70:09:bf:0a:dd:2a:94:21:e7:c6:
1f:a6:d1:37:59:e3:f0:d1:bf:b1:4c:e4:18:f1:d9:c0:7a:18:
fa:bf:04:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEZ6sPGwTqpvv3JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDIwNDA0MzQxMloXDTI1MDUwNTAzMzQxMlowLzEtMCsGA1UEAxMk
NGJiNGRjOWYtNzE0ZS00MmYxLTkwYTktMzM3ZjBiZGQxZTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3cfAdz31BLOQmpPj4jCtnqKDhrH8TskNyjZ
tWu+IMIULn2UnJTNkQUD9CBM/1ctCS/JrcoI6dJYBjW+3ZZKt0ELnzJFQjDXTic+
0cPjLGmpAQNWruZ8IuRHj07VdFMJiENvFFU7k960pIJ0ZzbeBr8t49Vqp9jaJi39
y0n6h5BTtPFs6Wu4tEFjJrZEyq1eIz2EbglZNGWD+cDNC/BYvd65/YBKOhXZfoyw
aes8/n63QL4fILp5+BeZsmoh9Ygv8xWXYofJkn2BCkY24GsrNYi6VJ5Qbnz5yFpo
9Mb1jjeCao82+UDwY1KdefeonfOVu0pNi0/zNEDGmUlzl2d5iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8+nEuTe4wTfGrmKwJsPgxcWgH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDk2N2Y1MzMtMzE0Yi0z
MWZhLTlmMzctYjMzZGE1MDBkOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBaWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTlmRhOanp5wBc6Ln/q7z2MGMD/n8WJZ2KO5R4Q0ThkuANUQKYTcHnn
qnLozX3yGvJF+8MNvC9Y7DdcLEgqb9lsXKOYxLzJ9Lj2h01c4A3GHS/YRY/fN1Af
OTa2sBlg+mxJjIx0zFsNQYSrdsGGiCMwW4LZwaODmOeggXHGRWr5u1EncoJPlOzE
Zt7UcECBGHZrlyK492Y2bPsZ5ZuGa0E3SlwQfjrHndxd2ZU4gmIFO/K8RSNqJZZo
2QBnTSujwyaxNFtPvkuCVHmQZScoMEkUPxDSXJabJTa5jNT4Lx+ecAm/Ct0qlCHn
xh+m0TdZ4/DRv7FM5Bjx2cB6GPq/BPw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:23 2025 by rpki-client