Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json)
Hash identifier: UgBfFtHC3qCAqIDQ1y7zYbdQ08ukEVb6WCW8qO79YpE=
Subject key identifier: 7E:84:FD:09:EA:A7:30:10:EE:F9:7D:76:2C:44:8D:BC:4C:46:56:37
Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9
Certificate serial: 010D0C9F4328584898D603F2783698AA01393200
Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 30528
IP address blocks: 66.96.16.0/20 maxlen: 20
72.0.64.0/20 maxlen: 20
2001:1928::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:03:f2:78:36:98:aa:01:39:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=356ecc16-bf3d-4ff1-92e7-47bb5b1f35f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:fa:55:a0:08:bd:5c:9c:44:f3:70:10:14:
0d:9e:d9:36:89:99:b8:92:f8:a6:e8:a4:9b:5c:d9:
39:d0:bc:09:d7:0a:b3:fb:76:bd:46:ad:99:44:4d:
c5:89:bf:95:17:7c:83:a0:5d:dd:d6:33:cf:5a:e1:
bc:9b:ed:36:13:67:c7:f4:01:22:ed:23:ff:e0:2f:
ae:54:d3:3b:60:2d:52:85:29:1f:e1:df:dd:76:e2:
90:94:d1:61:75:bb:fa:86:76:67:f9:b0:1a:b6:6f:
80:61:78:53:94:d1:7a:b7:ac:93:89:90:11:e8:7e:
39:01:7b:f0:ba:dc:24:6b:55:97:de:c3:4c:01:67:
4c:6f:d4:a1:8e:06:7b:d7:ce:60:4b:f9:b7:1a:87:
82:79:07:87:9a:a2:09:b0:8c:bd:31:2e:d6:e2:9a:
7b:95:2c:20:49:f3:31:cc:0e:01:9c:c9:29:50:53:
c2:ae:9a:22:14:20:39:a4:b7:f6:88:18:89:9d:1e:
67:bd:f2:11:26:d0:42:a6:02:d8:b3:f1:40:5f:64:
69:a9:42:a2:07:d5:23:8f:17:f8:59:0c:86:54:14:
0f:a7:d6:81:c1:42:dc:a9:45:5a:6e:fd:26:38:97:
54:3e:ad:63:dc:45:82:67:67:7b:70:68:32:92:78:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:FD:09:EA:A7:30:10:EE:F9:7D:76:2C:44:8D:BC:4C:46:56:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl
X509v3 Authority Key Identifier:
keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.96.16.0/20
72.0.64.0/20
IPv6:
2001:1928::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b9:7e:c1:93:e7:21:13:c1:85:46:a4:a5:27:e3:39:c7:c6:
cd:b8:6b:60:6e:c3:63:43:a6:83:62:b2:69:e4:8b:ee:55:6f:
aa:27:1b:99:33:ef:2e:9d:8d:b8:e9:3e:fb:f5:f6:e1:18:bd:
bd:00:44:5b:ff:4b:86:9f:b2:46:0e:79:6d:86:83:fd:86:8b:
00:b9:38:71:4c:af:64:c7:fa:52:5b:4a:c5:33:03:a0:5a:87:
69:10:6d:0b:58:32:af:d3:f3:30:3f:64:3f:cd:5f:22:68:2e:
83:59:10:05:42:91:2b:5e:ea:49:ca:0f:56:99:a9:b4:aa:de:
a0:57:7d:f6:53:50:29:0f:1a:53:8c:ee:bb:95:6a:22:53:cd:
5e:6e:a8:31:db:3f:e1:ab:f1:89:f0:19:b4:22:c1:f7:ff:8e:
7c:e3:53:3b:b8:dc:99:f0:c9:a5:7c:63:9f:39:af:fd:5a:4d:
cb:91:4a:2d:52:39:6b:82:d3:b7:0f:6f:19:cd:ff:79:33:1b:
a5:86:3c:03:90:73:ee:d9:34:1b:64:a6:cf:cd:8a:ed:c7:f0:
c2:df:55:44:5a:c1:b6:5f:44:e2:7a:d0:7f:51:1f:53:4c:4c:
87:00:12:83:3e:71:7a:ab:ba:da:d1:f5:50:9b:0d:46:0d:ae:
fd:70:cf:52
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEiY1gPyeDaYqgE5MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw
NGY5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzU2ZWNjMTYtYmYzZC00ZmYxLTkyZTctNDdiYjViMWYzNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfH6VaAIvVycRPNwEBQNntk2iZm4kvim6KSb
XNk50LwJ1wqz+3a9Rq2ZRE3Fib+VF3yDoF3d1jPPWuG8m+02E2fH9AEi7SP/4C+u
VNM7YC1ShSkf4d/dduKQlNFhdbv6hnZn+bAatm+AYXhTlNF6t6yTiZAR6H45AXvw
utwka1WX3sNMAWdMb9ShjgZ7185gS/m3GoeCeQeHmqIJsIy9MS7W4pp7lSwgSfMx
zA4BnMkpUFPCrpoiFCA5pLf2iBiJnR5nvfIRJtBCpgLYs/FAX2RpqUKiB9Ujjxf4
WQyGVBQPp9aBwULcqUVabv0mOJdUPq1j3EWCZ2d7cGgyknjKWwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFH6E/QnqpzAQ7vl9dixEjbxMRlY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3
Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z
NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz
MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx
MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj
YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE
SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADi5fsGT5yETwYVGpKUn4znHxs24
a2Buw2NDpoNismnki+5Vb6onG5kz7y6djbjpPvv19uEYvb0ARFv/S4afskYOeW2G
g/2GiwC5OHFMr2TH+lJbSsUzA6Bah2kQbQtYMq/T8zA/ZD/NXyJoLoNZEAVCkSte
6knKD1aZqbSq3qBXffZTUCkPGlOM7ruVaiJTzV5uqDHbP+Gr8YnwGbQiwff/jnzj
Uzu43JnwyaV8Y585r/1aTcuRSi1SOWuC07cPbxnN/3kzG6WGPAOQc+7ZNBtkps/N
iu3H8MLfVURawbZfROJ60H9RH1NMTIcAEoM+cXqrutrR9VCbDUYNrv1wz1I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:34 2025 by rpki-client