Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/127daede-efb1-3279-9942-e6330f0f4927.roa
File: 127daede-efb1-3279-9942-e6330f0f4927.roa (raw, json)
Hash identifier: Pq8/ZLUavE2yDujNR8nmJOCXICgabgouGR4n9o9Bk90=
Subject key identifier: CF:BD:50:8F:88:AC:85:A8:10:A2:28:64:C8:18:A9:AB:2D:EA:BF:A3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848854B5CF093C4B1377F4DC880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/127daede-efb1-3279-9942-e6330f0f4927.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 22773
IP address blocks: 68.227.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5c:f0:93:c4:b1:37:7f:4d:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=8a94a4a3-3ee8-42f1-bbeb-f9842237f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:c5:a7:f5:98:30:94:82:eb:26:cb:17:b1:
ae:32:78:92:2c:17:50:94:d7:f4:0f:6e:7f:d2:4f:
9c:5c:4d:55:7f:ec:5b:37:59:29:f9:e0:c5:f7:0a:
2f:97:00:8f:19:2c:e2:1f:a7:aa:49:51:b1:0a:1f:
a4:11:01:e1:32:21:e6:2a:e3:70:f3:9e:b3:da:3e:
c9:41:4c:8f:df:4c:de:a0:50:ad:b8:dd:48:cc:03:
d1:7f:68:30:42:38:fd:97:28:3b:bd:fa:c2:b5:94:
ff:a3:4f:cd:2a:43:c8:7a:ea:64:92:6f:96:0c:f7:
bf:a1:cc:84:45:36:ba:c3:99:b9:d2:40:68:05:22:
ac:61:6c:54:6e:d4:0e:ed:38:2e:fa:bb:f2:40:d6:
7c:33:e6:d7:ec:28:f9:81:57:78:5a:55:a9:65:9e:
14:d9:86:9f:c9:07:49:12:19:25:37:0c:67:43:9d:
32:48:09:95:ce:bc:61:ce:16:2d:e1:94:8d:f7:c8:
2b:6f:ed:9d:bb:06:46:06:45:cb:58:67:88:a9:52:
00:21:8d:d6:40:d3:1b:33:48:33:81:ab:7c:90:98:
99:e3:74:fd:37:dc:2e:80:85:b2:2c:f6:0a:22:be:
e7:cb:d7:e8:7c:a8:87:4e:b1:f0:b6:d9:47:f1:20:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:50:8F:88:AC:85:A8:10:A2:28:64:C8:18:A9:AB:2D:EA:BF:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/127daede-efb1-3279-9942-e6330f0f4927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.227.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:23:4e:a4:2e:d3:fc:42:2f:f3:ad:7d:90:1f:c3:02:56:c4:
f9:bb:42:54:6f:a7:3a:a5:57:22:1e:45:9c:09:b5:18:8a:20:
f8:ce:0a:d5:43:31:5e:fb:12:d0:b5:5d:e5:42:6a:a2:aa:f5:
1c:db:67:ed:48:10:50:c5:0f:fb:24:a2:7e:72:dc:28:3c:b8:
e0:97:2d:23:8e:30:00:db:24:f0:1a:fa:af:3c:7d:e7:0c:09:
f3:62:29:65:25:ba:c6:a6:45:cb:a7:a7:48:3b:65:e9:45:97:
9b:cc:23:ff:4a:a7:d0:c0:ff:43:ad:43:e0:9c:41:49:57:42:
7b:1b:c6:6e:1f:d2:04:a3:b5:5b:a2:bc:7e:44:d3:69:50:ee:
98:8d:db:03:20:34:94:df:f6:8e:a6:8d:c0:81:98:2c:00:78:
0e:30:c7:e2:21:63:39:76:60:f5:b5:e5:29:4c:82:59:61:ef:
47:c2:5f:b2:b7:12:91:3b:e4:a3:f9:24:e3:6f:92:7b:2e:61:
df:5c:ce:da:1c:89:53:3c:83:d7:82:86:ec:8f:d5:82:d2:c3:
a9:9e:58:79:82:09:81:46:0d:31:2d:03:b7:69:79:e5:16:ab:
0a:a9:2b:fc:b7:07:24:ba:df:00:2b:40:e3:e4:35:a1:91:c6:
da:41:82:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS1zwk8SxN39NyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
OGE5NGE0YTMtM2VlOC00MmYxLWJiZWItZjk4NDIyMzdmNmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmrFp/WYMJSC6ybLF7GuMniSLBdQlNf0D25/
0k+cXE1Vf+xbN1kp+eDF9wovlwCPGSziH6eqSVGxCh+kEQHhMiHmKuNw856z2j7J
QUyP30zeoFCtuN1IzAPRf2gwQjj9lyg7vfrCtZT/o0/NKkPIeupkkm+WDPe/ocyE
RTa6w5m50kBoBSKsYWxUbtQO7Tgu+rvyQNZ8M+bX7Cj5gVd4WlWpZZ4U2YafyQdJ
EhklNwxnQ50ySAmVzrxhzhYt4ZSN98grb+2duwZGBkXLWGeIqVIAIY3WQNMbM0gz
gat8kJiZ43T9N9wugIWyLPYKIr7ny9fofKiHTrHwttlH8SDQEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+9UI+IrIWoEKIoZMgYqast6r+jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTI3ZGFlZGUtZWZiMS0z
Mjc5LTk5NDItZTYzMzBmMGY0OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwjTqQu0/xCL/OtfZAfwwJWxPm7QlRvpzqlVyIeRZwJtRiKIPjOCtVD
MV77EtC1XeVCaqKq9RzbZ+1IEFDFD/skon5y3Cg8uOCXLSOOMADbJPAa+q88fecM
CfNiKWUlusamRcunp0g7ZelFl5vMI/9Kp9DA/0OtQ+CcQUlXQnsbxm4f0gSjtVui
vH5E02lQ7piN2wMgNJTf9o6mjcCBmCwAeA4wx+IhYzl2YPW15SlMgllh70fCX7K3
EpE75KP5JONvknsuYd9cztociVM8g9eChuyP1YLSw6meWHmCCYFGDTEtA7dpeeUW
qwqpK/y3ByS63wArQOPkNaGRxtpBglo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:49 2025 by rpki-client