Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/944daa20-7424-3a76-bbe3-25cd47e66d14.roa
File: 944daa20-7424-3a76-bbe3-25cd47e66d14.roa (raw, json)
Hash identifier: eirqNe2C+Vsr6ZBntIbZfEJIV7HqhtiEOZA2/QD9/+U=
Subject key identifier: 59:63:B8:CA:4D:88:D6:EE:F9:32:7C:6B:8B:C7:A0:70:E7:D0:4C:4D
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328583DEB815DF18B2BA6AD054B38A0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/944daa20-7424-3a76-bbe3-25cd47e66d14.roa
Signing time: Sun 15 May 2022 12:00:00 +0000
ROA not before: Sun 15 May 2022 12:00:00 +0000
ROA not after: Thu 10 Jan 2030 05:00:00 +0000
asID: 36692
IP address blocks: 67.215.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:eb:81:5d:f1:8b:2b:a6:ad:05:4b:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: May 15 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2030 GMT
Subject: CN=7e685f95-3fcd-4ed4-b0ef-2c41ed2dd1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:5a:f3:d9:5c:f0:54:9a:a2:85:3a:13:0a:
12:76:e0:5e:6a:a9:2d:73:84:c3:66:9c:cf:18:fb:
78:e7:cf:54:8e:8d:bf:a4:ce:5a:37:b9:bf:04:11:
69:71:8f:f9:cc:d7:cf:e7:85:28:37:c6:eb:70:c7:
68:a6:75:e7:a0:46:0a:8e:f5:83:9f:0d:13:9f:80:
d6:49:62:a5:93:76:02:8d:1c:d9:eb:ca:8f:60:b3:
e3:80:5f:cb:3e:5b:28:24:0e:a9:2b:18:eb:1b:13:
ea:32:47:26:b4:1d:f0:73:e0:12:d2:e7:f0:51:0d:
e0:f2:02:21:29:be:e3:6d:3d:2b:fb:33:72:50:2c:
f9:36:71:8e:9c:ca:43:97:11:02:1f:9c:52:c7:d3:
59:1b:32:a0:75:da:22:f3:2e:d8:98:0a:8b:26:dc:
6b:1a:44:5e:77:3c:e8:c5:97:e9:e2:04:c5:3a:97:
45:b0:59:37:00:5e:71:e8:2c:a0:0d:1d:da:27:cf:
7f:36:48:fd:6f:c8:e6:5a:31:6f:96:49:01:08:be:
30:e6:5c:aa:94:6b:58:77:6b:41:52:e5:05:c3:fc:
5d:1a:31:b6:7b:5d:4d:e8:61:12:56:a0:a7:ab:34:
f1:de:40:49:88:f0:2e:aa:df:06:fc:f7:b1:45:5e:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:B8:CA:4D:88:D6:EE:F9:32:7C:6B:8B:C7:A0:70:E7:D0:4C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/944daa20-7424-3a76-bbe3-25cd47e66d14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2e:e9:1a:20:81:6a:ab:6f:ab:53:30:71:14:75:5c:db:33:
ec:62:3d:7c:f8:4d:3d:12:01:8d:fa:36:23:bb:d5:37:6f:ef:
8e:37:dc:50:82:5b:9b:ef:ca:9a:7d:23:1e:ff:e6:b1:25:19:
3c:9c:31:de:d7:88:95:6e:71:bf:21:49:ae:fa:69:77:06:e2:
99:d9:97:f3:82:0e:3e:9c:45:1b:a7:f5:d5:d5:d3:c1:81:7e:
0a:31:bd:21:c3:7d:a0:3c:63:b8:ef:99:fb:73:2a:02:9a:56:
5e:50:e0:b8:b8:ad:73:de:c1:65:84:ac:6d:b7:16:58:02:47:
f9:20:54:42:0a:c9:0e:e8:dd:76:9a:72:8a:0f:98:6a:1d:03:
8c:53:1d:96:3c:72:4b:0b:c8:c5:35:e6:56:a3:0c:88:99:b0:
a0:95:5b:78:d2:b3:d9:89:5c:9c:9c:d1:b6:1f:4c:c1:7f:dd:
ec:de:d2:f4:92:55:46:bd:15:51:43:ce:a5:8c:4a:d4:de:db:
ab:8b:0c:25:60:56:da:5c:50:96:d3:fb:85:a1:ab:22:05:f4:
55:15:2b:3f:8a:15:d5:f7:82:c6:fc:c7:4c:79:6c:cd:c1:b2:
ff:66:25:4c:34:fa:ac:83:f2:c5:c3:76:32:60:1d:eb:7b:a3:
85:9e:29:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3rgV3xiyumrQVLOKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTIyMDUxNTEyMDAwMFoXDTMwMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
N2U2ODVmOTUtM2ZjZC00ZWQ0LWIwZWYtMmM0MWVkMmRkMWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT5a89lc8FSaooU6EwoSduBeaqktc4TDZpzP
GPt4589Ujo2/pM5aN7m/BBFpcY/5zNfP54UoN8brcMdopnXnoEYKjvWDnw0Tn4DW
SWKlk3YCjRzZ68qPYLPjgF/LPlsoJA6pKxjrGxPqMkcmtB3wc+AS0ufwUQ3g8gIh
Kb7jbT0r+zNyUCz5NnGOnMpDlxECH5xSx9NZGzKgddoi8y7YmAqLJtxrGkRedzzo
xZfp4gTFOpdFsFk3AF5x6CygDR3aJ89/Nkj9b8jmWjFvlkkBCL4w5lyqlGtYd2tB
UuUFw/xdGjG2e11N6GESVqCnqzTx3kBJiPAuqt8G/PexRV63kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFljuMpNiNbu+TJ8a4vHoHDn0ExNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTQ0ZGFhMjAtNzQyNC0z
YTc2LWJiZTMtMjVjZDQ3ZTY2ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8u6RoggWqrb6tTMHEUdVzbM+xiPXz4TT0SAY36NiO71Tdv74433FCC
W5vvypp9Ix7/5rElGTycMd7XiJVucb8hSa76aXcG4pnZl/OCDj6cRRun9dXV08GB
fgoxvSHDfaA8Y7jvmftzKgKaVl5Q4Li4rXPewWWErG23FlgCR/kgVEIKyQ7o3Xaa
cooPmGodA4xTHZY8cksLyMU15lajDIiZsKCVW3jSs9mJXJyc0bYfTMF/3eze0vSS
VUa9FVFDzqWMStTe26uLDCVgVtpcUJbT+4WhqyIF9FUVKz+KFdX3gsb8x0x5bM3B
sv9mJUw0+qyD8sXDdjJgHet7o4WeKRE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:28 2025 by rpki-client