Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa
File: 1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa (raw, json)
Hash identifier: b03VZD4JTG2CZy582xq7rAi4wCbbsFsqEKbi0QSR6EQ=
Subject key identifier: 1F:F1:43:8E:5F:56:07:00:08:9F:FD:12:B0:3A:BF:C6:CF:EA:E4:58
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285848BFEBA77483892917F612D5C0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 198949
IP address blocks: 67.218.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a7:74:83:89:29:17:f6:12:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=170fb076-1493-47b1-b5a6-ebc5daa5f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:17:2c:19:f6:fd:04:95:f6:ff:c5:79:08:
a6:16:a6:5c:0e:11:91:65:8e:ee:a5:46:61:71:69:
a8:2f:b8:8b:0c:c0:79:19:ed:7c:e3:26:aa:d0:13:
e7:67:86:61:bd:a5:ac:9b:5a:cb:ce:22:46:f9:fb:
f8:a9:3f:c1:c1:9e:0d:d7:87:b9:1d:2e:e1:ce:90:
89:be:b3:24:cf:24:35:1c:33:5d:83:1c:78:ce:ed:
dc:83:cf:fa:34:75:de:78:cd:aa:34:15:6e:75:26:
52:13:21:5c:70:cb:4e:7d:15:07:47:21:3b:e8:c4:
5b:8d:3b:7a:e5:62:49:a8:40:5d:f8:45:b4:c4:eb:
3a:d4:39:97:f8:86:fc:13:86:f8:dd:a9:1b:d2:ca:
c4:c2:8b:75:62:fd:00:7e:b9:83:97:df:09:1a:00:
77:48:cd:fa:36:39:a7:7d:a5:85:4c:91:2f:80:b0:
d9:90:6e:67:71:fe:49:bd:da:62:20:f9:51:23:fc:
78:dc:b5:6c:f4:99:a2:e9:7c:fc:6f:39:4e:d6:11:
5e:b9:b7:53:63:33:6c:e4:a5:97:77:b7:ac:d7:60:
a5:40:25:09:1a:fd:76:96:a0:69:13:70:89:bc:5b:
b8:11:3c:ce:93:6c:39:ec:15:dd:5a:6b:bb:50:d9:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:43:8E:5F:56:07:00:08:9F:FD:12:B0:3A:BF:C6:CF:EA:E4:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.218.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:05:b2:6b:43:eb:86:d5:40:14:f4:27:3f:94:d5:31:1b:97:
35:39:29:7d:02:a9:ed:5c:db:c5:c8:75:9b:06:a3:fe:b1:17:
54:ad:95:a6:a4:32:a8:1c:5b:17:13:ec:7e:17:34:5f:7c:8c:
06:f6:b4:e5:88:86:15:75:c1:ed:78:c5:d2:9d:00:7c:9d:f7:
24:45:25:14:7a:2f:9a:4f:a2:6d:1b:4d:21:c3:43:dd:40:90:
c1:49:42:9b:80:1e:b2:10:b3:3f:3c:da:b3:65:f8:7b:f6:b6:
b7:5d:1c:b8:c4:84:52:10:ba:40:f3:a0:ee:3d:f9:75:2f:b8:
03:1f:33:a4:b6:36:2d:29:6b:03:93:30:e0:17:3a:bc:a7:83:
9b:09:1c:cb:42:5b:46:02:14:09:39:bf:4e:1d:c5:17:d4:cb:
88:ea:76:c2:c4:1b:a6:47:a1:40:24:cf:1e:27:3c:01:4c:78:
aa:9c:19:bd:e9:07:e0:92:96:7b:be:7d:db:e3:d4:bd:c5:3d:
08:a3:8a:f3:34:85:a5:a4:46:3a:92:15:cf:97:8f:d2:a8:b4:
63:e6:db:4f:26:17:ba:c3:e5:bb:8d:3f:b9:71:de:85:ed:4a:
ec:96:00:3e:b6:75:66:41:6b:63:62:d8:0f:14:7d:6e:1b:c9:
38:57:32:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66d0g4kpF/YS1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl
MmI0MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MTcwZmIwNzYtMTQ5My00N2IxLWI1YTYtZWJjNWRhYTVmNDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJsXLBn2/QSV9v/FeQimFqZcDhGRZY7upUZh
cWmoL7iLDMB5Ge184yaq0BPnZ4ZhvaWsm1rLziJG+fv4qT/BwZ4N14e5HS7hzpCJ
vrMkzyQ1HDNdgxx4zu3cg8/6NHXeeM2qNBVudSZSEyFccMtOfRUHRyE76MRbjTt6
5WJJqEBd+EW0xOs61DmX+Ib8E4b43akb0srEwot1Yv0AfrmDl98JGgB3SM36Njmn
faWFTJEvgLDZkG5ncf5JvdpiIPlRI/x43LVs9Jmi6Xz8bzlO1hFeubdTYzNs5KWX
d7es12ClQCUJGv12lqBpE3CJvFu4ETzOk2w57BXdWmu7UNlKvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/xQ45fVgcACJ/9ErA6v8bP6uRYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi
YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvMWI3MzRmNmEtZGUyMS0z
ZDQ0LTk1MDMtNWJjOWVjYmYxYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy
YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw
ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk
ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9pQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQFsmtD64bVQBT0Jz+U1TEblzU5KX0Cqe1c28XIdZsGo/6xF1Stlaak
MqgcWxcT7H4XNF98jAb2tOWIhhV1we14xdKdAHyd9yRFJRR6L5pPom0bTSHDQ91A
kMFJQpuAHrIQsz882rNl+Hv2trddHLjEhFIQukDzoO49+XUvuAMfM6S2Ni0pawOT
MOAXOryng5sJHMtCW0YCFAk5v04dxRfUy4jqdsLEG6ZHoUAkzx4nPAFMeKqcGb3p
B+CSlnu+fdvj1L3FPQijivM0haWkRjqSFc+Xj9KotGPm208mF7rD5buNP7lx3oXt
SuyWAD62dWZBa2Ni2A8UfW4byThXMks=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:03 2025 by rpki-client