Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
File: 7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa (raw, json)
Hash identifier: Mluch525Ozvkr42oQwwq5Z3Q+/30dpTxiFoAnEr1wbo=
Subject key identifier: 08:C8:06:04:DA:04:90:15:7B:36:5E:0E:13:CC:65:55:33:7D:30:5B
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F43285848A29B4F5C9E4754BB94AFC500
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 5650
IP address blocks: 168.91.64.0/24 maxlen: 24
168.91.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4f:5c:9e:47:54:bb:94:af:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=f4d92eec-9359-441d-9fc9-9128f5f24760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4d:1b:b9:cc:4f:36:4f:72:88:be:6d:15:d8:
8e:39:ef:1c:fa:24:64:4b:6b:3a:bd:93:cc:99:5c:
b2:22:3e:93:d2:6e:ff:80:d9:28:86:cb:13:1f:db:
6e:99:9c:9b:5f:02:2b:ad:88:50:0e:16:32:54:36:
27:12:04:49:0c:30:db:11:c3:b3:72:6d:f4:eb:41:
eb:d1:61:a1:17:42:80:74:f6:53:19:c7:58:d0:6f:
bf:06:e3:b4:92:9e:b5:40:ac:34:e1:f7:22:2a:5f:
0a:4e:a1:f6:c3:03:44:bf:a4:8c:1a:2a:05:97:6a:
a3:98:6b:71:5e:2a:a7:77:c3:13:b7:be:1f:12:b5:
75:a0:00:1c:b3:6e:db:e4:eb:5e:3b:0b:5d:ea:fd:
4e:03:f6:69:c2:c8:96:92:c2:61:1b:eb:be:8a:31:
53:43:40:c8:fb:c1:c8:78:2f:54:5e:81:d6:45:54:
13:3c:bd:e0:66:0a:43:9d:66:eb:50:6d:99:59:ee:
f2:85:0c:6a:ee:bc:12:ec:75:0b:73:c2:51:95:f5:
21:e2:bd:23:36:88:ae:66:0f:b3:fb:fd:ee:2e:b7:
6e:78:d4:62:d0:b2:12:f4:cc:4a:d8:63:a7:44:c6:
49:c7:9e:48:b2:c7:31:95:ad:ca:d0:63:95:09:ae:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:06:04:DA:04:90:15:7B:36:5E:0E:13:CC:65:55:33:7D:30:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:12:26:82:18:31:d5:5c:7d:64:12:34:07:9d:4d:b6:1d:d0:
0d:3a:90:aa:76:10:51:66:3c:88:c8:4d:9d:00:05:38:9b:1b:
00:a3:af:4e:6f:41:3b:95:39:2d:38:b7:de:92:cf:30:7e:55:
79:f1:75:47:8f:a6:ac:79:e2:57:17:74:3c:84:f4:a7:c6:b3:
8d:62:46:f8:7e:98:f3:5f:28:b8:a5:d2:c2:3c:62:65:6f:f6:
9c:4c:d2:d6:3e:9c:5f:11:61:56:72:6a:97:3d:e5:11:65:19:
8a:e4:13:70:89:fc:2e:60:94:35:89:90:70:85:8d:3c:a8:51:
32:f2:40:cb:03:f6:fc:67:8e:f5:6d:c6:02:0a:26:35:d7:90:
45:53:2a:84:9c:d9:b7:b7:81:c2:6e:9a:08:e1:ba:c9:13:5f:
32:84:39:33:0b:88:db:70:ea:2c:b1:95:60:17:20:c9:eb:0d:
48:9b:39:60:bf:c5:e6:06:4b:17:e3:cb:f5:da:14:66:15:a6:
bb:3e:4d:f7:9c:d7:d7:0d:c2:0a:98:9d:8d:8e:41:b5:b5:ee:
8c:08:de:71:eb:a7:c0:ff:57:74:29:2e:b4:ba:d7:bb:6c:3b:
49:8b:f5:86:c8:50:18:8f:fc:11:40:15:04:65:a8:8a:69:0d:
af:01:f8:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim09cnkdUu5SvxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw
MWIxMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjRkOTJlZWMtOTM1OS00NDFkLTlmYzktOTEyOGY1ZjI0NzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE0bucxPNk9yiL5tFdiOOe8c+iRkS2s6vZPM
mVyyIj6T0m7/gNkohssTH9tumZybXwIrrYhQDhYyVDYnEgRJDDDbEcOzcm3060Hr
0WGhF0KAdPZTGcdY0G+/BuO0kp61QKw04fciKl8KTqH2wwNEv6SMGioFl2qjmGtx
Xiqnd8MTt74fErV1oAAcs27b5OteOwtd6v1OA/ZpwsiWksJhG+u+ijFTQ0DI+8HI
eC9UXoHWRVQTPL3gZgpDnWbrUG2ZWe7yhQxq7rwS7HULc8JRlfUh4r0jNoiuZg+z
+/3uLrdueNRi0LIS9MxK2GOnRMZJx55Isscxla3K0GOVCa5AFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjIBgTaBJAVezZeDhPMZVUzfTBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj
NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2E2YjFhN2ItOWJkNy0z
YzVhLTgyMTctNTVhODQwYzM2MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3
YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy
MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz
MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0SJoIYMdVcfWQSNAedTbYd0A06kKp2EFFmPIjITZ0ABTibGwCjr05v
QTuVOS04t96SzzB+VXnxdUePpqx54lcXdDyE9KfGs41iRvh+mPNfKLil0sI8YmVv
9pxM0tY+nF8RYVZyapc95RFlGYrkE3CJ/C5glDWJkHCFjTyoUTLyQMsD9vxnjvVt
xgIKJjXXkEVTKoSc2be3gcJumgjhuskTXzKEOTMLiNtw6iyxlWAXIMnrDUibOWC/
xeYGSxfjy/XaFGYVprs+Tfec19cNwgqYnY2OQbW17owI3nHrp8D/V3QpLrS617ts
O0mL9YbIUBiP/BFAFQRlqIppDa8B+K0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:27 2025 by rpki-client