Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
File: f789410d-2589-3534-9ba9-d9a9d661914e.roa (raw, json)
Hash identifier: 4S5O9RhD4njvUHkcGdjt7iuJMbhRxah3wxRGJ7aZcfw=
Subject key identifier: EA:3C:AA:99:49:BB:51:8B:83:E4:61:39:E8:C1:77:4A:25:28:C8:76
Certificate issuer: /CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Certificate serial: 010D0C9F4328584883E5C59E6E03F4BC2917DC40
Authority key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 397861
IP address blocks: 67.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c5:9e:6e:03:f4:bc:29:17:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=4520e422-0728-45bb-a5c1-3264c881ce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:70:ec:25:81:f6:95:5c:52:98:94:0a:9b:
c1:b5:64:02:15:19:4f:88:1b:87:75:23:f3:66:10:
c8:28:af:ac:b6:17:99:4c:be:26:d5:91:52:79:26:
73:67:16:33:2d:10:72:0f:40:99:d1:7e:4c:54:c9:
5c:11:b9:62:e7:cf:83:ed:ae:e9:86:38:0c:55:13:
81:7d:ac:22:1d:01:10:23:35:40:a8:20:1e:61:5a:
88:dd:99:52:dd:3b:d2:5d:66:90:6b:2b:16:64:ae:
4a:03:8b:f8:fb:12:c2:24:75:11:ce:ea:e3:d5:06:
d0:59:67:47:2f:22:32:11:16:43:33:7a:2f:90:e0:
65:a8:68:c7:34:a2:e3:72:b5:00:74:ac:57:77:b4:
00:64:c1:64:07:aa:39:58:d8:0b:58:2f:da:5a:58:
d4:5d:b8:c8:bf:80:6d:e1:02:d2:be:79:79:59:ba:
56:ab:5d:5c:d3:68:fe:64:a8:5f:9c:97:f7:7d:1a:
48:00:d7:b5:78:e3:58:89:06:88:e5:80:7c:dd:9c:
e1:f6:7b:88:2f:84:3b:d3:02:4d:61:39:4d:9a:e0:
d2:71:0f:4d:8f:58:ec:c0:20:59:0a:37:57:0d:09:
bc:df:d3:c6:28:9e:17:16:5f:39:6d:3e:73:cc:a6:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:AA:99:49:BB:51:8B:83:E4:61:39:E8:C1:77:4A:25:28:C8:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl
X509v3 Authority Key Identifier:
keyid:D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
sbgp-ipAddrBlock: critical
IPv4:
67.158.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:aa:ca:59:1c:aa:53:b8:96:ae:a2:55:83:0e:91:f5:34:f8:
db:c6:f1:91:c0:17:9c:ed:52:59:09:1f:75:6c:ee:c7:37:fb:
fa:2a:98:05:f3:88:0d:26:e9:1f:2f:78:f2:e6:71:8e:d1:23:
40:e3:36:7b:06:63:5f:b1:29:84:04:be:9c:a4:23:06:ba:0f:
25:27:b4:b5:8a:12:04:2e:8a:e6:6e:28:08:60:5a:65:14:bb:
1e:18:85:fa:02:42:2e:12:22:87:f4:a2:93:f2:c8:7a:8f:01:
b2:95:df:d2:78:3b:89:75:9f:32:6c:9f:a6:74:be:b7:a3:8b:
27:ef:8e:17:15:1f:44:69:a7:d2:fe:dc:5a:5f:b7:5a:64:37:
56:48:93:2f:ce:fc:e4:99:a9:1f:0e:b6:7e:78:82:a5:22:7e:
45:1d:a1:30:f6:3e:f7:3f:2e:e7:74:6d:06:48:41:78:1e:9b:
44:87:dc:cb:55:45:0a:66:a3:93:06:45:1a:6e:27:0f:c6:2e:
28:96:b9:02:df:c3:ce:6f:d5:b6:b2:e0:18:03:98:a9:46:4d:
63:9d:72:39:d4:12:49:b5:a9:35:c4:00:c5:16:f9:72:b9:51:
0c:1a:77:b0:39:f5:32:15:20:a8:c8:78:16:23:ff:02:41:0c:
7d:1f:74:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cWebgP0vCkX3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRhNTY5NGUtZWVkNi00NjEyLWFmZjItYWU5ZjM2OWYx
NzM4MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NDUyMGU0MjItMDcyOC00NWJiLWE1YzEtMzI2NGM4ODFjZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCtw7CWB9pVcUpiUCpvBtWQCFRlPiBuHdSPz
ZhDIKK+stheZTL4m1ZFSeSZzZxYzLRByD0CZ0X5MVMlcEbli58+D7a7phjgMVROB
fawiHQEQIzVAqCAeYVqI3ZlS3TvSXWaQaysWZK5KA4v4+xLCJHURzurj1QbQWWdH
LyIyERZDM3ovkOBlqGjHNKLjcrUAdKxXd7QAZMFkB6o5WNgLWC/aWljUXbjIv4Bt
4QLSvnl5WbpWq11c02j+ZKhfnJf3fRpIANe1eONYiQaI5YB83Zzh9nuIL4Q70wJN
YTlNmuDScQ9Nj1jswCBZCjdXDQm839PGKJ4XFl85bT5zzKYVgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOo8qplJu1GLg+RhOejBd0olKMh2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNGE1
Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlmMzY5ZjE3MzgvZjc4OTQxMGQtMjU4OS0z
NTM0LTliYTktZDlhOWQ2NjE5MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzRhNTY5NGUtZWVkNi00NjEyLWFm
ZjItYWU5ZjM2OWYxNzM4LzM0YTU2OTRlLWVlZDYtNDYxMi1hZmYyLWFlOWYzNjlm
MTczOC5jcmwwHwYDVR0jBBgwFoAU1BysZM6unrvyBtczDj4LSE26HXIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zNGE1Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlm
MzY5ZjE3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ547MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISqylkcqlO4lq6iVYMOkfU0+NvG8ZHAF5ztUlkJH3Vs7sc3+/oqmAXz
iA0m6R8vePLmcY7RI0DjNnsGY1+xKYQEvpykIwa6DyUntLWKEgQuiuZuKAhgWmUU
ux4YhfoCQi4SIof0opPyyHqPAbKV39J4O4l1nzJsn6Z0vrejiyfvjhcVH0Rpp9L+
3Fpft1pkN1ZIky/O/OSZqR8Otn54gqUifkUdoTD2Pvc/Lud0bQZIQXgem0SH3MtV
RQpmo5MGRRpuJw/GLiiWuQLfw85v1bay4BgDmKlGTWOdcjnUEkm1qTXEAMUW+XK5
UQwad7A59TIVIKjIeBYj/wJBDH0fdLo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:07:11 2025 by rpki-client