Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/d3b67ccf-52a7-3a72-8dfc-0752652be055.roa
File: d3b67ccf-52a7-3a72-8dfc-0752652be055.roa (raw, json)
Hash identifier: DrKSobNcb9FDyi/nSaoQYN8rByaUn0s7/Liw88VJxXM=
Subject key identifier: 4F:14:0D:86:9A:25:B8:5C:7A:39:C8:51:5D:25:15:DA:01:B3:80:2F
Certificate issuer: /CN=3f61b400-76de-4d47-93da-b04c33b5a504
Certificate serial: 010D0C9F4328584943E36CC9A2CBDE3478D9EF00
Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/d3b67ccf-52a7-3a72-8dfc-0752652be055.roa
Signing time: Fri 21 Mar 2025 20:31:13 +0000
ROA not before: Fri 21 Mar 2025 20:31:13 +0000
ROA not after: Thu 19 Jun 2025 20:31:13 +0000
asID: 14618
IP address blocks: 192.67.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:e3:6c:c9:a2:cb:de:34:78:d9:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504
Validity
Not Before: Mar 21 20:31:13 2025 GMT
Not After : Jun 19 20:31:13 2025 GMT
Subject: CN=4d48c85a-1380-46e0-ac87-eccb2a76c890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:1e:9c:4b:3d:3e:80:87:7d:bf:62:74:36:
d2:08:62:53:03:66:ab:c6:30:c4:bd:36:ad:92:3d:
c6:94:f0:35:66:81:47:e2:82:e7:37:b3:9f:45:36:
e8:c9:b5:d0:bc:51:cd:d4:bd:8c:35:84:28:91:7d:
2d:fd:dc:73:6c:91:0c:bd:8a:8f:bd:a7:39:83:d0:
21:39:24:3a:2c:f9:eb:6c:d7:e1:1b:bf:8b:75:b1:
f9:12:43:57:5a:dc:d5:4f:0d:53:60:d1:f2:e9:e3:
42:f1:53:28:a2:11:2a:70:7a:fa:77:f0:8e:4a:d9:
f2:ec:b9:49:5e:1e:30:bd:fa:5f:30:4a:0e:ad:f0:
49:08:48:b3:73:c6:a9:71:57:1a:60:da:43:90:4a:
78:42:cd:dd:02:08:9f:7b:b0:91:14:1a:4a:2b:37:
0a:25:69:46:59:cd:83:be:e5:c7:f7:04:2e:4a:c7:
43:c9:d8:b0:40:4d:24:34:86:d9:7c:6c:66:56:25:
2b:0e:6f:8b:5c:63:48:cb:e8:61:44:93:ca:bd:a6:
a1:91:0f:12:e6:9f:d1:bd:fc:d2:d8:b5:c5:6d:49:
39:58:75:4c:ba:bd:f4:7e:f2:91:2a:b1:20:2e:3e:
6a:9e:b5:9b:e8:1d:ac:dd:45:de:44:c8:51:6b:0f:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:0D:86:9A:25:B8:5C:7A:39:C8:51:5D:25:15:DA:01:B3:80:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/d3b67ccf-52a7-3a72-8dfc-0752652be055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl
X509v3 Authority Key Identifier:
keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1f:55:f2:c0:f3:15:d1:0a:09:28:59:f9:57:96:e0:81:11:
0a:72:8d:96:0d:76:cc:ad:8b:8c:f8:71:a6:a7:3b:a7:69:ab:
5c:f2:19:93:c6:af:59:8e:a2:af:c9:45:af:bf:15:19:39:5e:
9f:c9:0e:1c:78:01:ea:e5:be:fc:79:70:24:23:84:f4:15:48:
11:df:0a:88:1c:4f:ac:b6:aa:33:d9:02:7f:84:d2:8b:3b:00:
9a:75:00:83:ad:d1:fa:21:37:fb:f7:45:46:7f:0b:1b:39:2b:
ca:24:10:bb:33:65:50:66:fb:77:0b:85:cd:24:16:2c:6f:f4:
39:28:f6:04:b7:8f:90:72:45:f5:5f:e1:ff:cd:11:e2:b9:ad:
75:24:53:26:c4:e2:21:2b:5d:64:6a:a3:d5:11:1e:5e:88:d6:
cf:e1:48:db:42:74:b6:f9:9c:08:4f:b5:f6:77:78:03:27:fe:
0d:7c:fb:ec:e0:d5:3c:4e:f6:1e:ec:1b:ab:15:67:f7:8e:37:
f6:25:fe:a2:8a:07:47:88:1a:b3:34:9c:e7:69:3e:9f:5f:29:
ec:90:69:a6:28:43:4c:7e:6e:c9:d5:d0:7b:9a:d3:df:66:e8:
00:13:81:a4:45:7f:ea:75:f1:32:97:ce:58:6b:98:2c:f9:62:
e1:88:c2:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElD42zJosveNHjZ7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVh
NTA0MB4XDTI1MDMyMTIwMzExM1oXDTI1MDYxOTIwMzExM1owLzEtMCsGA1UEAxMk
NGQ0OGM4NWEtMTM4MC00NmUwLWFjODctZWNjYjJhNzZjODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ssenEs9PoCHfb9idDbSCGJTA2arxjDEvTat
kj3GlPA1ZoFH4oLnN7OfRTboybXQvFHN1L2MNYQokX0t/dxzbJEMvYqPvac5g9Ah
OSQ6LPnrbNfhG7+LdbH5EkNXWtzVTw1TYNHy6eNC8VMoohEqcHr6d/COStny7LlJ
Xh4wvfpfMEoOrfBJCEizc8apcVcaYNpDkEp4Qs3dAgife7CRFBpKKzcKJWlGWc2D
vuXH9wQuSsdDydiwQE0kNIbZfGxmViUrDm+LXGNIy+hhRJPKvaahkQ8S5p/RvfzS
2LXFbUk5WHVMur30fvKRKrEgLj5qnrWb6B2s3UXeRMhRaw+xBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8UDYaaJbhcejnIUV0lFdoBs4AvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYx
YjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvZDNiNjdjY2YtNTJhNy0z
YTcyLThkZmMtMDc1MjY1MmJlMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y2MWI0MDAtNzZkZS00ZDQ3LTkz
ZGEtYjA0YzMzYjVhNTA0LzNmNjFiNDAwLTc2ZGUtNGQ0Ny05M2RhLWIwNGMzM2I1
YTUwNC5jcmwwHwYDVR0jBBgwFoAUJrkmWgYvEjfu8GnUFNufdDpqgD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRj
MzNiNWE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgfVfLA8xXRCgkoWflXluCBEQpyjZYNdsyti4z4caanO6dpq1zyGZPG
r1mOoq/JRa+/FRk5Xp/JDhx4Aerlvvx5cCQjhPQVSBHfCogcT6y2qjPZAn+E0os7
AJp1AIOt0fohN/v3RUZ/Cxs5K8okELszZVBm+3cLhc0kFixv9Dko9gS3j5ByRfVf
4f/NEeK5rXUkUybE4iErXWRqo9URHl6I1s/hSNtCdLb5nAhPtfZ3eAMn/g18++zg
1TxO9h7sG6sVZ/eON/Yl/qKKB0eIGrM0nOdpPp9fKeyQaaYoQ0x+bsnV0Hua099m
6AATgaRFf+p18TKXzlhrmCz5YuGIwqg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:51 2025 by rpki-client