Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d4a3947b-33da-31d0-b61d-61e65d3c1418.roa
File: d4a3947b-33da-31d0-b61d-61e65d3c1418.roa (raw, json)
Hash identifier: oJ+2r5/J5+p4DYMinpY6fMwwUd23LRoGV7bZEAro3C8=
Subject key identifier: 2A:EE:97:E1:83:64:7C:85:B2:20:9C:E1:AE:56:9F:D0:18:AD:C2:B5
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F43285848D3765E8E64CBA346D2CD8500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d4a3947b-33da-31d0-b61d-61e65d3c1418.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 54113
IP address blocks: 167.82.237.224/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:5e:8e:64:cb:a3:46:d2:cd:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=ec6b9ce2-e910-4c02-a2aa-e6444c6c147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:d1:08:b5:3e:a2:40:37:f4:dd:22:2f:93:
c2:21:73:ec:f0:72:49:dc:b3:a9:bb:d6:32:24:07:
b3:61:f5:d4:41:8f:5b:06:e0:9e:98:e7:23:36:31:
79:6b:f3:aa:bd:9e:99:2b:b2:8e:2c:b3:75:a6:35:
c2:bf:c2:1b:fd:0d:44:e6:9d:91:c1:7b:c5:34:f6:
3e:5d:11:22:ba:ba:92:84:5d:98:1c:e6:f5:40:95:
1d:52:56:9a:35:b6:50:60:a0:b9:e7:f7:7d:c4:db:
29:5c:aa:41:d4:ae:35:87:0c:93:4b:f9:f8:b2:9c:
76:ce:a8:5e:b3:55:47:2f:d0:19:72:f2:16:c6:20:
8f:3e:e9:dc:18:09:23:94:c2:c6:30:b2:42:82:49:
ef:3a:42:4d:17:fc:6c:bd:fa:15:7b:e1:a7:3d:76:
bf:43:81:97:cd:6a:d3:f8:d7:43:a7:e4:46:03:65:
b3:ec:13:2e:6f:09:5d:90:78:13:40:8f:a2:a5:93:
b2:cd:20:81:90:f2:30:18:99:ee:05:e3:8a:3d:a4:
5b:df:5d:02:43:4f:7d:f9:32:0e:20:9b:91:d8:a4:
17:23:95:d2:09:7f:b9:ec:3c:9b:79:b0:7d:27:f7:
cc:07:d7:3b:33:5e:1e:a9:e7:68:2e:73:d0:38:d0:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:97:E1:83:64:7C:85:B2:20:9C:E1:AE:56:9F:D0:18:AD:C2:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d4a3947b-33da-31d0-b61d-61e65d3c1418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
167.82.237.224/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:45:64:a3:e1:64:de:41:42:b1:f3:ba:60:ea:04:39:5b:03:
93:29:dc:7f:02:aa:0a:5e:37:2f:a6:f2:5b:d6:6c:7a:a3:06:
75:9b:44:32:86:e2:41:f9:9e:15:b6:eb:18:91:df:6a:ba:5f:
56:1d:c9:31:41:21:27:44:b2:11:f6:a7:4e:a1:c4:27:ca:d1:
3d:d4:a7:b5:1e:13:cd:f2:15:96:f3:8e:77:d8:58:cb:f6:af:
bd:ab:d0:90:ef:54:fd:94:37:f4:a1:bc:39:90:5f:48:9c:c3:
0b:98:f9:ba:3d:62:32:1e:95:43:23:db:8c:0e:13:96:a3:06:
e9:73:b0:b0:6c:57:72:12:38:fa:13:18:60:fc:35:90:33:21:
96:6f:33:81:85:49:1b:ab:b1:15:b1:ce:21:27:d5:78:50:79:
a4:5a:ac:5d:3e:6b:32:7a:08:6f:1f:7a:8a:55:32:3f:48:d7:
0d:2f:bb:37:0d:17:0a:2d:77:bc:c9:0f:f5:ed:61:bc:a1:3f:
c3:05:55:3e:83:7e:b1:b8:d5:85:05:9d:eb:6f:4b:82:60:c4:
fd:cd:a6:d6:38:51:70:18:55:8a:42:ee:00:fa:34:59:1c:b3:
29:65:b6:b2:d4:6a:af:bb:9c:88:6c:b1:6c:a6:2f:55:0b:74:
d2:84:92:7b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjTdl6OZMujRtLNhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZWM2YjljZTItZTkxMC00YzAyLWEyYWEtZTY0NDRjNmMxNDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM7RCLU+okA39N0iL5PCIXPs8HJJ3LOpu9Yy
JAezYfXUQY9bBuCemOcjNjF5a/OqvZ6ZK7KOLLN1pjXCv8Ib/Q1E5p2RwXvFNPY+
XREiurqShF2YHOb1QJUdUlaaNbZQYKC55/d9xNspXKpB1K41hwyTS/n4spx2zqhe
s1VHL9AZcvIWxiCPPuncGAkjlMLGMLJCgknvOkJNF/xsvfoVe+GnPXa/Q4GXzWrT
+NdDp+RGA2Wz7BMubwldkHgTQI+ipZOyzSCBkPIwGJnuBeOKPaRb310CQ099+TIO
IJuR2KQXI5XSCX+57DybebB9J/fMB9c7M14eqedoLnPQONBbeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCrul+GDZHyFsiCc4a5Wn9AYrcK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDRhMzk0N2ItMzNkYS0z
MWQwLWI2MWQtNjFlNjVkM2MxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEp1Lt4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCXRWSj4WTeQUKx87pg6gQ5WwOTKdx/AqoKXjcvpvJb1mx6owZ1m0Qy
huJB+Z4VtusYkd9qul9WHckxQSEnRLIR9qdOocQnytE91Ke1HhPN8hWW84532FjL
9q+9q9CQ71T9lDf0obw5kF9InMMLmPm6PWIyHpVDI9uMDhOWowbpc7CwbFdyEjj6
Exhg/DWQMyGWbzOBhUkbq7EVsc4hJ9V4UHmkWqxdPmsyeghvH3qKVTI/SNcNL7s3
DRcKLXe8yQ/17WG8oT/DBVU+g36xuNWFBZ3rb0uCYMT9zabWOFFwGFWKQu4A+jRZ
HLMpZbay1Gqvu5yIbLFspi9VC3TShJJ7
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:58 2025 by rpki-client