Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa
File: 52f7a9be-4a13-3aa2-b2d2-e00808902899.roa (raw, json)
Hash identifier: aKJce/cDBb/vJ2k6n25uX8iajHs0WPTRlQ1rLouIxao=
Subject key identifier: E7:69:86:DC:EE:56:7A:0F:61:85:37:89:0B:EB:3A:F0:B7:77:9A:F5
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584953C446A93FAB2BD41AEB31A0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 27385
IP address blocks: 69.67.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:46:a9:3f:ab:2b:d4:1a:eb:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=62780747-fb65-4cda-b8e4-62bf468952fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:72:1b:ea:18:07:7e:c2:1d:d6:96:85:de:
f8:f7:ab:59:89:8a:7f:ef:c5:0a:89:fc:20:3e:ef:
0c:4b:84:6d:b3:50:1e:f0:f2:bf:a2:e5:7f:54:d6:
ae:80:c1:3a:97:2a:64:e7:fa:b2:4c:bf:ac:1c:3e:
ef:eb:fe:34:a6:17:68:04:ef:9e:42:a1:0d:94:9d:
a3:fb:b1:4d:bc:76:00:71:00:fe:83:87:b7:44:72:
75:80:84:be:95:76:88:56:ed:89:68:e5:b6:1a:6a:
04:4e:4e:07:c8:86:ff:87:2c:a6:77:0e:88:25:be:
25:44:ae:78:eb:be:e1:80:ed:cf:13:de:ae:a1:d6:
97:60:96:3c:41:ea:b0:de:a0:13:fd:fa:8a:d7:df:
0a:10:93:49:54:ea:a1:f6:f4:73:74:63:3b:aa:63:
41:0b:c9:a3:4b:fd:76:1b:0c:e9:e4:3f:30:5c:6d:
2a:3d:9c:d2:23:35:b7:88:9c:18:cf:b5:c9:74:f8:
ae:06:54:99:6a:80:ad:84:69:7a:20:e9:e4:18:88:
c7:70:ba:46:c0:5c:43:d9:f1:aa:b9:0a:6a:ad:cc:
f4:36:8d:74:69:8b:54:39:c9:04:ad:0f:c1:5c:6f:
96:24:96:b4:30:28:3e:09:d8:85:cc:77:8c:7e:cb:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:69:86:DC:EE:56:7A:0F:61:85:37:89:0B:EB:3A:F0:B7:77:9A:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv4:
69.67.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:44:3a:d3:31:8c:9a:a5:d0:af:38:dc:dd:48:81:2c:56:1c:
59:c7:12:19:ec:54:96:20:a5:27:35:81:f9:73:65:67:35:27:
75:9e:e8:ca:e4:35:62:8a:f9:5f:e2:9c:9c:45:dc:1a:2f:89:
08:8e:91:c8:52:6e:25:11:21:d8:4b:93:f1:29:2e:c0:81:03:
df:e4:41:20:86:4c:f7:2e:17:8f:78:73:a1:14:0d:e0:55:6e:
40:27:76:19:de:47:8a:16:26:0b:cd:94:39:8e:48:a5:96:37:
02:44:28:7d:07:f6:d9:7a:17:86:4d:e0:f8:eb:43:67:9f:8c:
3d:35:c0:d6:d2:6f:dc:47:ba:9c:0c:5d:e9:d6:64:9e:3d:13:
70:07:c4:5a:d3:5b:4b:86:1c:e0:ec:a2:3b:c8:e7:a1:64:be:
b2:30:38:ba:3d:cb:92:a1:d0:22:98:1c:39:b2:ed:c0:f6:58:
4a:c8:8d:78:43:a0:26:be:fc:65:52:3d:64:b0:71:ac:be:fa:
b2:70:91:f3:0b:0d:7f:db:40:6d:5b:d0:f1:53:f0:80:46:d5:
54:16:ff:ec:f0:fa:e0:2c:ad:1a:ba:f1:a9:7b:5c:f1:62:da:
f7:22:3d:d9:b8:7f:9d:a8:f1:a1:03:76:2e:df:7a:5f:14:cc:
b5:83:8b:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEapP6sr1BrrMaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjI3ODA3NDctZmI2NS00Y2RhLWI4ZTQtNjJiZjQ2ODk1MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ZyG+oYB37CHdaWhd7496tZiYp/78UKifwg
Pu8MS4Rts1Ae8PK/ouV/VNaugME6lypk5/qyTL+sHD7v6/40phdoBO+eQqENlJ2j
+7FNvHYAcQD+g4e3RHJ1gIS+lXaIVu2JaOW2GmoETk4HyIb/hyymdw6IJb4lRK54
677hgO3PE96uodaXYJY8Qeqw3qAT/fqK198KEJNJVOqh9vRzdGM7qmNBC8mjS/12
Gwzp5D8wXG0qPZzSIzW3iJwYz7XJdPiuBlSZaoCthGl6IOnkGIjHcLpGwFxD2fGq
uQpqrcz0No10aYtUOckErQ/BXG+WJJa0MCg+CdiFzHeMfsucawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdphtzuVnoPYYU3iQvrOvC3d5r1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvNTJmN2E5YmUtNGExMy0z
YWEyLWIyZDItZTAwODA4OTAyODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9EOtMxjJql0K843N1IgSxWHFnHEhnsVJYgpSc1gflzZWc1J3We6Mrk
NWKK+V/inJxF3BoviQiOkchSbiURIdhLk/EpLsCBA9/kQSCGTPcuF494c6EUDeBV
bkAndhneR4oWJgvNlDmOSKWWNwJEKH0H9tl6F4ZN4PjrQ2efjD01wNbSb9xHupwM
XenWZJ49E3AHxFrTW0uGHODsojvI56FkvrIwOLo9y5Kh0CKYHDmy7cD2WErIjXhD
oCa+/GVSPWSwcay++rJwkfMLDX/bQG1b0PFT8IBG1VQW/+zw+uAsrRq68al7XPFi
2vciPdm4f52o8aEDdi7fel8UzLWDi2E=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:08 2025 by rpki-client