Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c625180-5245-3300-b9e1-22d0201628b3.roa
File: 2c625180-5245-3300-b9e1-22d0201628b3.roa (raw, json)
Hash identifier: KNn8R3GJoXdXg7GpsrvNppbptWPEsLTFwTN3bEmg290=
Subject key identifier: 6C:67:FF:C1:7F:8B:5F:0B:5B:1D:F8:C1:FA:BF:B7:00:88:32:CB:C4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5D8F014AE787690EB500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c625180-5245-3300-b9e1-22d0201628b3.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 3360
IP address blocks: 204.103.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5d:8f:01:4a:e7:87:69:0e:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=ca4f1253-ef9a-45d1-8531-ec3b34d141b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:bc:cc:46:aa:89:0b:5c:de:03:11:9d:50:
f1:16:35:15:08:40:6c:0d:2a:e6:88:39:22:dc:58:
da:3e:3a:46:80:3b:5f:6b:da:64:1c:b5:06:32:0c:
1f:64:be:de:d5:20:29:9c:b8:21:f9:1e:f0:b0:92:
98:f7:12:08:bd:34:0b:15:be:8c:df:29:f4:23:bb:
89:f0:0b:48:6b:a3:70:71:14:ed:cd:b5:69:5e:1d:
24:c0:f7:2a:3e:e8:1b:c9:78:13:0e:b0:9e:c6:15:
87:53:af:24:fe:3a:20:76:ad:3e:32:cd:79:bf:d9:
11:8b:d5:1d:40:df:e0:52:c1:81:2a:87:e2:80:e1:
76:d9:24:c8:ee:81:e0:1c:18:0e:cc:9b:1d:cb:ed:
c3:74:fd:1a:8b:5b:35:e2:73:49:3a:0f:9f:d0:16:
6f:5b:bd:33:f9:2d:a4:32:45:d5:fc:18:50:a4:81:
90:0c:8e:28:23:ee:ca:d3:19:7b:b9:90:13:4c:d0:
62:c6:40:9a:f5:41:a4:fd:96:8f:a3:cd:1f:a6:96:
6c:32:d3:cc:4c:77:e1:b9:37:58:ab:27:cc:41:26:
17:64:21:7c:6b:52:46:64:48:41:7a:2a:33:0f:88:
6e:59:d6:f1:7e:26:7e:ec:23:38:87:17:b0:4b:e0:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:67:FF:C1:7F:8B:5F:0B:5B:1D:F8:C1:FA:BF:B7:00:88:32:CB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2c625180-5245-3300-b9e1-22d0201628b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.103.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:11:f7:95:a9:6d:75:cb:65:67:8f:3a:6e:8d:dd:ed:54:ae:
b4:84:a9:f2:82:24:49:6a:9d:30:ca:3a:40:c3:46:b0:61:b8:
b1:8f:84:0b:e4:ac:77:88:3f:7a:06:0d:a6:ad:d9:2b:76:20:
4e:15:b4:12:6e:91:9c:4d:a9:fd:39:66:ec:3a:c2:71:ea:2e:
ac:71:ff:23:48:f5:d4:dd:12:91:80:6c:5b:b3:5f:86:a3:04:
aa:16:a8:a8:67:10:62:b4:c2:5b:ec:54:9e:e2:19:ed:e6:be:
f9:40:c4:bd:6c:b6:0c:01:56:f4:58:9f:b5:98:3e:76:18:55:
96:4d:39:a5:68:fd:8d:17:2f:77:c2:5f:96:5d:2d:ff:72:ca:
2e:3b:ee:ff:9a:d8:b0:ca:36:60:f5:8a:ce:29:42:28:92:75:
a5:91:bf:3e:93:ba:c2:c8:30:a1:22:1a:44:2a:eb:87:ea:5f:
61:24:82:10:08:0f:4e:24:1e:16:f8:94:ea:27:1c:c5:f0:65:
72:18:65:ba:8a:30:9e:7f:c6:e0:a4:dd:68:9e:17:e6:d1:0d:
1c:b3:f8:a5:a8:eb:88:37:b8:e2:ca:ea:d2:1f:c8:91:70:78:
c7:0b:8f:10:d0:44:af:43:9a:62:ab:33:e7:f7:c4:2a:db:43:
4c:b8:d7:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+12PAUrnh2kOtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
Y2E0ZjEyNTMtZWY5YS00NWQxLTg1MzEtZWMzYjM0ZDE0MWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyG8zEaqiQtc3gMRnVDxFjUVCEBsDSrmiDki
3FjaPjpGgDtfa9pkHLUGMgwfZL7e1SApnLgh+R7wsJKY9xIIvTQLFb6M3yn0I7uJ
8AtIa6NwcRTtzbVpXh0kwPcqPugbyXgTDrCexhWHU68k/jogdq0+Ms15v9kRi9Ud
QN/gUsGBKofigOF22STI7oHgHBgOzJsdy+3DdP0ai1s14nNJOg+f0BZvW70z+S2k
MkXV/BhQpIGQDI4oI+7K0xl7uZATTNBixkCa9UGk/ZaPo80fppZsMtPMTHfhuTdY
qyfMQSYXZCF8a1JGZEhBeiozD4huWdbxfiZ+7CM4hxewS+DTIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxn/8F/i18LWx34wfq/twCIMsvEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmM2MjUxODAtNTI0NS0z
MzAwLWI5ZTEtMjJkMDIwMTYyOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGfHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwR95WpbXXLZWePOm6N3e1UrrSEqfKCJElqnTDKOkDDRrBhuLGPhAvk
rHeIP3oGDaat2St2IE4VtBJukZxNqf05Zuw6wnHqLqxx/yNI9dTdEpGAbFuzX4aj
BKoWqKhnEGK0wlvsVJ7iGe3mvvlAxL1stgwBVvRYn7WYPnYYVZZNOaVo/Y0XL3fC
X5ZdLf9yyi477v+a2LDKNmD1is4pQiiSdaWRvz6TusLIMKEiGkQq64fqX2EkghAI
D04kHhb4lOonHMXwZXIYZbqKMJ5/xuCk3WieF+bRDRyz+KWo64g3uOLK6tIfyJFw
eMcLjxDQRK9DmmKrM+f3xCrbQ0y41/g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:05 2025 by rpki-client