Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa
File: de68ba4b-0448-34a6-b157-10c801d3775e.roa (raw, json)
Hash identifier: QJ7/w5nATE6j8RePHn6Cm3HK2A4bVBox7XnCPb49V2c=
Subject key identifier: A5:5D:E7:90:FB:58:5E:EB:AD:0D:69:C7:6E:5D:72:05:53:53:48:68
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F43285848FD56CC58EAFF67071C381500
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 22504
IP address blocks: 67.218.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cc:58:ea:ff:67:07:1c:38:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=43741485-a729-4bd0-8131-c4dc4d1642fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:43:a8:f2:0a:76:d3:af:24:6e:b5:43:e6:
4b:b9:51:69:a3:5f:fa:e7:75:06:f4:af:cd:03:24:
cd:9b:fc:84:f2:7a:10:d6:fa:60:dd:ff:24:ed:f3:
a0:2e:36:09:3e:14:a8:0e:9f:1c:8a:73:d1:ff:f6:
fe:05:c1:eb:2e:d6:82:0a:1e:61:1b:c6:22:05:44:
52:01:5e:4c:be:a1:36:f2:2a:36:6f:c7:e1:af:ac:
47:ae:f6:28:7d:2b:4f:5a:79:96:fc:40:c5:d6:e8:
d4:12:f8:7d:43:9e:7a:f1:1c:35:44:ed:60:91:e1:
e3:d7:16:e1:92:91:50:7f:1a:69:42:bc:d5:c8:6c:
1b:bc:b7:6c:bf:26:ec:e2:e3:f4:59:bc:45:fa:36:
a3:5f:51:0f:7a:36:19:f1:36:e2:cb:ce:7c:b7:8e:
f4:c1:69:62:02:b4:60:71:66:83:a1:c0:85:fc:e6:
b8:8c:a9:20:5d:85:76:de:4e:9e:e6:82:ce:7a:cb:
1d:79:9e:e3:3e:c3:a3:15:51:8e:bd:e4:2f:8a:d9:
b6:c6:e4:e4:32:05:b0:b4:ee:c1:02:20:c6:94:43:
48:42:68:14:63:50:e6:07:a8:4d:d2:23:99:c2:c9:
7e:6b:fc:dc:db:2d:3a:98:65:e1:a1:b7:d2:6b:09:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:E7:90:FB:58:5E:EB:AD:0D:69:C7:6E:5D:72:05:53:53:48:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.218.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b3:e5:a5:d3:a4:bd:06:f2:93:73:ab:f8:70:f3:bd:8c:16:
14:97:22:22:e5:91:69:59:d3:ae:cd:1a:a2:8e:d5:cf:9c:f6:
ed:a0:78:d1:1d:39:06:4d:d5:b3:b6:1a:15:8a:ac:cd:d8:a9:
9f:9d:5f:7b:6d:5c:84:bb:36:19:68:df:3e:14:2b:4e:70:56:
26:fc:24:bd:20:1b:e9:51:30:6f:b3:23:0e:9d:64:3b:a7:f7:
5a:49:10:63:dc:42:ed:a3:c9:d3:78:44:d9:e9:57:bb:23:e7:
6d:94:91:b7:26:64:88:bd:62:c8:86:f2:9f:52:05:5c:d6:d9:
1f:62:78:86:f5:5b:21:be:71:8a:95:89:94:8e:ae:39:f1:49:
53:bd:0d:ea:31:b4:77:9a:0b:3a:5c:b4:5a:bc:cb:1e:32:79:
58:66:30:18:47:36:cd:21:e7:ae:85:22:a0:c7:73:3f:c0:4c:
cf:65:24:0c:30:4f:3a:be:1d:c4:5d:ec:b8:a1:b0:19:18:01:
eb:9e:97:30:5d:e5:f7:70:3b:7c:35:f4:1f:53:0f:e2:7e:df:
1f:a7:e8:ef:9d:d8:f5:e5:8e:f6:27:e3:b8:0f:47:87:00:4f:
3e:9b:2d:5a:ab:33:ee:31:12:73:3c:9f:44:34:19:fe:00:b3:
f1:da:60:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsxY6v9nBxw4FQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDM3NDE0ODUtYTcyOS00YmQwLTgxMzEtYzRkYzRkMTY0MmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBDqPIKdtOvJG61Q+ZLuVFpo1/653UG9K/N
AyTNm/yE8noQ1vpg3f8k7fOgLjYJPhSoDp8cinPR//b+BcHrLtaCCh5hG8YiBURS
AV5MvqE28io2b8fhr6xHrvYofStPWnmW/EDF1ujUEvh9Q5568Rw1RO1gkeHj1xbh
kpFQfxppQrzVyGwbvLdsvybs4uP0WbxF+jajX1EPejYZ8Tbiy858t470wWliArRg
cWaDocCF/Oa4jKkgXYV23k6e5oLOessdeZ7jPsOjFVGOveQvitm2xuTkMgWwtO7B
AiDGlENIQmgUY1DmB6hN0iOZwsl+a/zc2y06mGXhobfSawmdQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVd55D7WF7rrQ1px25dcgVTU0hoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZGU2OGJhNGItMDQ0OC0z
NGE2LWIxNTctMTBjODAxZDM3NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9q+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuz5aXTpL0G8pNzq/hw872MFhSXIiLlkWlZ067NGqKO1c+c9u2geNEd
OQZN1bO2GhWKrM3YqZ+dX3ttXIS7Nhlo3z4UK05wVib8JL0gG+lRMG+zIw6dZDun
91pJEGPcQu2jydN4RNnpV7sj522UkbcmZIi9YsiG8p9SBVzW2R9ieIb1WyG+cYqV
iZSOrjnxSVO9DeoxtHeaCzpctFq8yx4yeVhmMBhHNs0h566FIqDHcz/ATM9lJAww
Tzq+HcRd7LihsBkYAeuelzBd5fdwO3w19B9TD+J+3x+n6O+d2PXljvYn47gPR4cA
Tz6bLVqrM+4xEnM8n0Q0Gf4As/HaYP4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:17 2025 by rpki-client