Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa
File: f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa (raw, json)
Hash identifier: CD1TgDFg55X9XyYVyKclnbUlp0irCgigK8Ja/oACw9I=
Subject key identifier: 29:2F:3C:BD:F2:5F:0C:BA:40:F1:28:86:63:84:63:44:A5:B0:3F:AC
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CB9B059614CE9BFF0800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3360
IP address blocks: 168.87.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cb:9b:05:96:14:ce:9b:ff:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=bc77ef47-3348-4003-91aa-3d4c19198124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:f8:f0:a1:45:ee:c0:e3:99:03:d8:94:75:
6d:bf:93:b2:66:ef:9b:9a:18:1f:be:2f:d6:1d:32:
43:57:c5:49:68:00:f3:20:9a:37:7b:e9:e9:ff:b3:
e5:fb:be:61:3b:fd:9f:82:9a:d9:f6:1a:81:18:38:
a8:17:39:b9:af:b3:12:61:24:88:8e:c1:a1:b7:0f:
3b:bf:0f:9d:d8:26:43:89:bc:a3:a3:00:18:d8:ba:
a6:46:8d:29:46:15:23:27:24:82:53:89:2b:85:0b:
8f:46:ef:25:f5:2c:4b:6d:2f:cd:72:7b:bc:c8:5d:
fe:27:dd:24:1d:3b:fd:1c:4a:c1:25:d6:92:55:bb:
54:7c:98:fb:c7:ac:35:b3:c3:8a:09:61:6c:17:95:
f3:d9:63:ae:3b:4d:be:5d:4d:4b:ae:41:30:0d:d8:
27:db:9d:bc:e3:3b:dd:41:7a:89:f7:08:ce:b2:7e:
ba:d7:6f:d7:da:9d:8e:47:f8:d4:22:ac:57:3e:ad:
49:b7:b3:33:e1:aa:32:ae:04:a3:4d:2f:88:06:64:
90:c8:68:56:98:0d:34:2a:cc:23:7c:85:98:f2:98:
c2:a7:00:89:b0:61:c0:69:02:23:be:c3:e3:e9:94:
22:31:b5:88:0b:d2:b5:ec:8d:c1:a9:3b:20:b7:82:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:3C:BD:F2:5F:0C:BA:40:F1:28:86:63:84:63:44:A5:B0:3F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f58cd65e-6c13-3b28-8de3-281e5f700c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:69:d2:6c:e6:f0:aa:1d:f9:00:ac:5d:7e:55:e8:8b:ee:c6:
23:81:cf:24:d9:6f:03:40:b2:5a:f5:b7:ba:94:3f:0e:17:61:
c4:2e:4a:21:a5:6c:9b:7e:c7:21:20:70:f1:b4:d9:0b:f3:9e:
e7:55:e2:a6:9e:cd:49:6c:ea:74:71:72:83:fa:71:37:80:95:
e1:cd:d6:5f:c2:4d:80:e8:b5:46:de:c1:56:0a:79:54:3d:01:
e3:91:45:c6:83:f9:6e:f3:e8:19:00:b6:00:4a:9a:2a:ee:81:
8b:aa:f0:c9:fe:be:21:37:01:b6:89:23:76:bf:d9:b3:32:25:
cd:74:d2:f1:c3:3a:b2:dd:c7:bc:17:b4:d1:95:db:41:f9:c3:
fb:f2:a5:7f:6c:2e:f9:e7:a3:f0:aa:19:8d:8b:e3:50:bd:eb:
07:fd:12:83:1d:69:4c:94:71:12:0a:4c:64:eb:86:97:93:cf:
be:1b:d7:03:b7:e0:eb:18:27:2c:36:9d:a0:01:fb:d2:f0:d3:
0c:00:70:d8:74:47:cc:56:15:8c:e6:39:86:ad:6b:f1:ff:03:
13:ad:c8:50:7f:bb:62:80:96:64:07:52:69:f0:f4:9f:8f:ef:
bc:e2:6d:d4:a8:e2:df:14:36:8c:1e:fb:da:ff:12:35:b6:a3:
d7:78:55:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsubBZYUzpv/CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YmM3N2VmNDctMzM0OC00MDAzLTkxYWEtM2Q0YzE5MTk4MTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2r48KFF7sDjmQPYlHVtv5OyZu+bmhgfvi/W
HTJDV8VJaADzIJo3e+np/7Pl+75hO/2fgprZ9hqBGDioFzm5r7MSYSSIjsGhtw87
vw+d2CZDibyjowAY2LqmRo0pRhUjJySCU4krhQuPRu8l9SxLbS/Ncnu8yF3+J90k
HTv9HErBJdaSVbtUfJj7x6w1s8OKCWFsF5Xz2WOuO02+XU1LrkEwDdgn25284zvd
QXqJ9wjOsn6612/X2p2OR/jUIqxXPq1Jt7Mz4aoyrgSjTS+IBmSQyGhWmA00Kswj
fIWY8pjCpwCJsGHAaQIjvsPj6ZQiMbWIC9K17I3BqTsgt4KfbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkvPL3yXwy6QPEohmOEY0SlsD+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjU4Y2Q2NWUtNmMxMy0z
YjI4LThkZTMtMjgxZTVmNzAwYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENp0mzm8Kod+QCsXX5V6IvuxiOBzyTZbwNAslr1t7qUPw4XYcQuSiGl
bJt+xyEgcPG02QvznudV4qaezUls6nRxcoP6cTeAleHN1l/CTYDotUbewVYKeVQ9
AeORRcaD+W7z6BkAtgBKmirugYuq8Mn+viE3AbaJI3a/2bMyJc100vHDOrLdx7wX
tNGV20H5w/vypX9sLvnno/CqGY2L41C96wf9EoMdaUyUcRIKTGTrhpeTz74b1wO3
4OsYJyw2naAB+9Lw0wwAcNh0R8xWFYzmOYata/H/AxOtyFB/u2KAlmQHUmnw9J+P
77zibdSo4t8UNowe+9r/EjW2o9d4VUE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:44 2025 by rpki-client