Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
File: 14842e5d-ad09-3b78-bf54-277a31112e14.roa (raw, json)
Hash identifier: HUFpHJilenV7vA+yQuHOAnXUX3aLnfnMie/8Sxldu2Y=
Subject key identifier: BC:59:C6:E5:65:67:EC:B4:BB:59:C0:8B:32:A9:AE:62:17:1D:63:A7
Certificate issuer: /CN=857f4763-aacf-4784-828d-557ab7b55809
Certificate serial: 010D0C9F4328584953C41BDE7B2CFFEE7A97A5C0
Authority key identifier: 60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 393811
IP address blocks: 192.67.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1b:de:7b:2c:ff:ee:7a:97:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4763-aacf-4784-828d-557ab7b55809
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=cbea934f-d3ba-46e4-9ce3-b52c5ce1fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:77:7a:e2:62:df:d3:9f:08:34:c8:f3:a2:
92:1c:6c:73:2b:55:c6:f4:c1:1f:87:5e:cc:1e:d8:
87:59:4b:f8:a7:09:1e:59:1b:c5:d8:7c:0c:13:63:
68:27:9d:a2:40:fa:8a:2c:f5:cb:80:69:ab:86:bb:
58:2d:b7:85:08:d3:d4:63:31:0e:7f:d7:60:3a:30:
e6:4b:f7:83:25:c2:06:27:b9:69:06:b3:55:6a:17:
d2:97:1c:4f:27:c8:47:3e:45:6e:b2:fb:b1:2a:22:
23:e2:72:17:dc:79:17:cf:95:5d:f8:05:d1:65:46:
2a:37:59:cb:4f:e8:d8:b6:fb:70:a5:53:0c:67:98:
e0:25:f6:fc:02:78:4d:96:06:ac:77:c7:64:e8:64:
5b:1d:62:f7:8a:58:1d:8e:6a:0d:d1:8b:aa:ca:96:
40:03:93:17:b4:8f:fc:82:d8:af:e6:71:24:03:12:
2f:97:36:1a:02:99:e3:8f:de:e5:dd:ad:33:09:d4:
34:b6:d7:19:1a:ff:75:79:11:f9:a4:fa:c7:a2:d2:
f3:cf:c3:ce:b4:07:cb:1e:b0:37:e8:89:12:8e:78:
27:d9:ff:d9:01:19:19:dd:cc:da:5a:79:2b:25:64:
f6:85:25:f2:2b:2b:cb:05:f4:ee:16:a4:49:98:16:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:C6:E5:65:67:EC:B4:BB:59:C0:8B:32:A9:AE:62:17:1D:63:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl
X509v3 Authority Key Identifier:
keyid:60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:87:a1:04:94:16:02:54:9f:8e:28:5b:67:b0:58:3c:57:1a:
a2:cb:82:93:8b:e3:c7:d0:7d:7d:a5:e2:fd:a1:a7:b8:b3:c9:
e2:ab:9a:4b:00:d1:2a:4d:ce:fb:f6:6a:6d:82:66:29:27:8b:
a2:49:ff:89:76:34:b6:d2:45:dd:7e:2a:4d:66:2a:6a:ce:4f:
9b:8f:39:dc:7f:b3:99:f5:01:c4:b5:0b:a8:3d:1d:1c:dd:33:
20:bd:36:a2:87:dd:4e:82:7a:09:d2:f5:42:7f:c7:2e:92:64:
1b:2f:d8:28:5c:a4:0a:28:3d:b3:99:39:85:cb:b1:9d:e4:ad:
6c:32:cd:78:c9:81:e8:c2:58:3b:b9:a0:46:25:02:71:a9:94:
8a:ec:d8:dc:bc:c0:5b:aa:44:c6:ae:29:b2:3c:1c:f4:c8:af:
73:13:1f:d3:52:09:10:f7:13:74:a5:a3:f4:ba:c2:47:56:9d:
84:17:e2:bf:1b:bf:bd:fe:ad:04:dc:f1:26:4d:42:22:6e:af:
82:1b:09:8e:76:f4:45:1f:37:41:54:52:50:4b:21:c2:8d:f4:
72:fa:cc:8b:1a:87:aa:87:e0:d3:c3:4d:1c:29:83:1f:c3:79:
f3:a3:fb:64:de:d6:3b:7d:73:92:41:bc:2b:d5:d5:37:31:62:
e9:74:ff:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBveeyz/7nqXpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODU3ZjQ3NjMtYWFjZi00Nzg0LTgyOGQtNTU3YWI3YjU1
ODA5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2JlYTkzNGYtZDNiYS00NmU0LTljZTMtYjUyYzVjZTFmYjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKZ3euJi39OfCDTI86KSHGxzK1XG9MEfh17M
HtiHWUv4pwkeWRvF2HwME2NoJ52iQPqKLPXLgGmrhrtYLbeFCNPUYzEOf9dgOjDm
S/eDJcIGJ7lpBrNVahfSlxxPJ8hHPkVusvuxKiIj4nIX3HkXz5Vd+AXRZUYqN1nL
T+jYtvtwpVMMZ5jgJfb8AnhNlgasd8dk6GRbHWL3ilgdjmoN0YuqypZAA5MXtI/8
gtiv5nEkAxIvlzYaApnjj97l3a0zCdQ0ttcZGv91eRH5pPrHotLzz8POtAfLHrA3
6IkSjngn2f/ZARkZ3czaWnkrJWT2hSXyKyvLBfTuFqRJmBatuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxZxuVlZ+y0u1nAizKprmIXHWOnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTdm
NDc2My1hYWNmLTQ3ODQtODI4ZC01NTdhYjdiNTU4MDkvMTQ4NDJlNWQtYWQwOS0z
Yjc4LWJmNTQtMjc3YTMxMTEyZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODU3ZjQ3NjMtYWFjZi00Nzg0LTgy
OGQtNTU3YWI3YjU1ODA5Lzg1N2Y0NzYzLWFhY2YtNDc4NC04MjhkLTU1N2FiN2I1
NTgwOS5jcmwwHwYDVR0jBBgwFoAUYG6pa4BHOETb3RCmcnBtC5fccukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTdmNDc2My1hYWNmLTQ3ODQtODI4ZC01NTdh
YjdiNTU4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6HoQSUFgJUn44oW2ewWDxXGqLLgpOL48fQfX2l4v2hp7izyeKrmksA
0SpNzvv2am2CZikni6JJ/4l2NLbSRd1+Kk1mKmrOT5uPOdx/s5n1AcS1C6g9HRzd
MyC9NqKH3U6CegnS9UJ/xy6SZBsv2ChcpAooPbOZOYXLsZ3krWwyzXjJgejCWDu5
oEYlAnGplIrs2Ny8wFuqRMauKbI8HPTIr3MTH9NSCRD3E3Slo/S6wkdWnYQX4r8b
v73+rQTc8SZNQiJur4IbCY529EUfN0FUUlBLIcKN9HL6zIsah6qH4NPDTRwpgx/D
efOj+2Te1jt9c5JBvCvV1TcxYul0/0M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:40 2025 by rpki-client