Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8fcd2fb-0571-3b08-88bf-68d72c5b3b71.roa
File: f8fcd2fb-0571-3b08-88bf-68d72c5b3b71.roa (raw, json)
Hash identifier: VIjT9GbE1M/ZscwpZ0Po6NW9UWNPNqQfnFH7h+uACto=
Subject key identifier: 68:51:26:72:63:7E:C4:9A:16:42:36:B7:E4:0E:AE:99:EB:5E:DA:92
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB60BCAB70C1BA484AA1C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8fcd2fb-0571-3b08-88bf-68d72c5b3b71.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 204.104.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:60:bc:ab:70:c1:ba:48:4a:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=2f743e9c-de78-48d6-9018-2dc70b35d1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:04:8e:46:50:d1:cd:21:c3:e9:69:e7:b6:
cb:33:26:9a:1b:ed:90:25:e2:28:e6:75:f3:2e:bc:
a4:59:f9:fd:35:5e:15:61:29:e5:56:cf:ba:88:10:
4e:26:3d:3e:5c:33:5f:95:4d:16:56:da:4c:33:d9:
f4:ba:76:1a:08:b6:8c:28:a3:c1:cb:b1:76:d5:0b:
a8:0d:6b:77:14:f6:35:d6:6f:11:54:5b:41:d1:af:
b6:3f:3f:3a:20:d5:63:63:1b:14:e3:c1:fb:f4:d3:
9f:81:02:1a:fd:50:03:36:04:52:20:d3:ab:ee:d1:
0c:2c:a2:d2:59:26:11:e9:6a:9a:45:30:f5:c6:7f:
4b:9e:3f:5f:e1:9a:7a:b9:a2:26:19:63:af:8c:3d:
38:60:41:1f:9f:cd:96:e1:f2:23:c0:14:61:f6:bc:
77:d8:a3:31:97:14:cd:0e:69:e4:29:c6:3b:6f:a2:
1d:ea:e5:b7:ee:f7:ab:1f:21:8f:64:6e:a2:91:aa:
be:a4:15:f3:50:a0:a3:88:7a:0c:59:22:1d:88:c2:
1c:e4:b2:ac:88:e6:a9:b9:f2:23:17:3c:1f:21:e7:
6b:92:66:f2:71:14:3b:4f:1e:04:9c:8b:d0:11:ed:
df:fe:b8:e2:38:d3:e0:af:9e:98:44:84:0b:23:03:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:26:72:63:7E:C4:9A:16:42:36:B7:E4:0E:AE:99:EB:5E:DA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8fcd2fb-0571-3b08-88bf-68d72c5b3b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:30:11:d5:7e:b7:b7:82:45:c8:e1:22:9f:dd:e7:5e:e2:f9:
d5:58:82:22:0f:24:a3:bc:cc:63:05:0f:54:a6:19:55:c3:d5:
a4:4e:4a:93:2a:0a:0f:1d:77:f6:0c:82:aa:b4:e8:3f:39:ff:
8f:f0:1f:77:b8:33:c5:f0:d9:5f:85:16:22:c8:2e:ac:80:e9:
4c:1d:17:80:a7:19:11:46:59:e6:e2:8c:4c:00:5b:cc:97:bc:
25:7c:91:a6:5f:14:19:45:7b:f6:eb:ff:93:8e:4c:db:ca:59:
35:43:50:40:ea:9e:02:b0:71:60:c2:20:30:20:3c:67:c7:e9:
ba:2e:45:d7:23:eb:34:31:55:a5:71:8f:73:c0:73:f2:e6:0e:
8a:dc:11:d5:80:e3:dc:99:b8:bd:74:18:d8:ac:53:73:5e:2b:
3b:c3:ee:34:ef:e5:84:1c:dc:cd:20:7a:13:b7:c3:0c:e3:d0:
f6:0e:18:3b:cf:bf:79:83:9c:04:3a:b1:4f:da:8a:3c:32:2b:
4c:f5:ff:8b:68:0a:53:63:66:34:c0:2c:a5:d8:1a:2d:e8:8b:
e7:ee:2d:8c:9d:e0:ce:1d:5e:d5:17:df:84:9d:ef:6c:e0:ab:
ed:c0:72:56:a8:fe:19:6e:f0:90:b0:56:f1:39:11:60:61:61:
a2:24:91:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2C8q3DBukhKocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
MmY3NDNlOWMtZGU3OC00OGQ2LTkwMTgtMmRjNzBiMzVkMWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA700EjkZQ0c0hw+lp57bLMyaaG+2QJeIo5nXz
LrykWfn9NV4VYSnlVs+6iBBOJj0+XDNflU0WVtpMM9n0unYaCLaMKKPBy7F21Quo
DWt3FPY11m8RVFtB0a+2Pz86INVjYxsU48H79NOfgQIa/VADNgRSINOr7tEMLKLS
WSYR6WqaRTD1xn9Lnj9f4Zp6uaImGWOvjD04YEEfn82W4fIjwBRh9rx32KMxlxTN
DmnkKcY7b6Id6uW37verHyGPZG6ikaq+pBXzUKCjiHoMWSIdiMIc5LKsiOapufIj
FzwfIedrkmbycRQ7Tx4EnIvQEe3f/rjiONPgr56YRIQLIwMIGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhRJnJjfsSaFkI2t+QOrpnrXtqSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjhmY2QyZmItMDU3MS0z
YjA4LTg4YmYtNjhkNzJjNWIzYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQwEdV+t7eCRcjhIp/d517i+dVYgiIPJKO8zGMFD1SmGVXD1aROSpMq
Cg8dd/YMgqq06D85/4/wH3e4M8Xw2V+FFiLILqyA6UwdF4CnGRFGWebijEwAW8yX
vCV8kaZfFBlFe/br/5OOTNvKWTVDUEDqngKwcWDCIDAgPGfH6bouRdcj6zQxVaVx
j3PAc/LmDorcEdWA49yZuL10GNisU3NeKzvD7jTv5YQc3M0gehO3wwzj0PYOGDvP
v3mDnAQ6sU/aijwyK0z1/4toClNjZjTALKXYGi3oi+fuLYyd4M4dXtUX34Sd72zg
q+3Aclao/hlu8JCwVvE5EWBhYaIkkTs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:47 2025 by rpki-client