Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa
File: 4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa (raw, json)
Hash identifier: yNa6Tc7aoiWwd4LNaVPmi1sku9uDeSRQ22mYeZ0Pc3g=
Subject key identifier: 9B:F3:4F:99:FC:DB:36:3E:7F:A2:79:40:C5:5D:B2:4B:7F:FB:4B:A6
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848BE861B4808709E7BCFBD8E80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 30058
IP address blocks: 67.159.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:1b:48:08:70:9e:7b:cf:bd:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=c3427dfe-66c8-4980-bd1f-ddeb41af8591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:ff:1f:ee:fa:eb:1a:96:4b:81:d3:8a:58:
ad:4f:57:8f:56:96:8b:69:04:c0:d7:d4:e6:16:a9:
ac:41:01:7c:15:67:99:22:41:4e:81:37:99:52:6e:
b7:53:9b:ed:14:cd:8c:07:3b:73:fb:ee:6a:83:8c:
ed:77:90:74:7f:0e:40:c8:98:11:2a:4e:6e:d4:e9:
e6:06:55:c8:af:5b:29:23:0a:15:4f:3d:00:33:6f:
16:dc:3f:47:a2:94:03:30:9d:15:4b:7c:99:42:65:
f8:d6:d9:7a:ff:fb:9a:a3:6f:68:84:db:b5:83:4e:
e4:42:9e:6c:c9:d3:ac:b9:da:a4:94:4f:d0:7f:dc:
e1:8f:50:fe:4f:cb:51:18:23:92:dc:d2:39:2c:5f:
a5:f0:0e:d7:e0:d4:83:14:09:f9:c4:4c:a7:17:d6:
d8:2f:6c:6d:fa:2b:0b:c9:fc:62:96:7e:79:08:e1:
a7:be:c8:3f:6a:fc:5c:05:12:d1:e0:75:22:0b:25:
e5:80:16:64:94:f4:02:07:2f:87:c5:32:d7:6e:8c:
83:d2:e1:6f:19:8c:5d:29:84:a8:20:7b:f6:05:d5:
1e:89:0c:57:93:19:c0:ec:cf:aa:eb:7f:e8:31:bc:
d6:a6:c7:cc:df:e6:3c:65:18:03:8a:08:71:71:cc:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:4F:99:FC:DB:36:3E:7F:A2:79:40:C5:5D:B2:4B:7F:FB:4B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:07:7e:9d:f7:48:13:fd:78:0d:77:11:5f:fe:94:df:5b:97:
e7:25:0e:56:c1:88:16:86:8b:40:bf:20:39:8d:c5:fe:f8:8f:
69:fa:1d:ad:37:6e:05:cb:d5:6a:58:6c:6d:34:25:2c:55:d6:
1e:f6:8b:30:13:c3:fc:4c:f6:eb:59:f9:09:34:d4:9b:28:43:
b9:7c:01:0a:22:94:4e:ef:41:89:03:dc:c4:67:b1:3c:78:4b:
d1:73:84:d9:f3:09:1d:4e:12:f9:50:e4:89:24:22:b5:2e:92:
be:25:90:50:b2:4d:77:99:c0:65:73:49:25:fe:2b:ff:a5:1e:
94:f1:bf:16:6b:fe:8a:9a:60:e7:1f:50:25:05:8f:e3:dd:f4:
1a:aa:9f:e8:b6:b8:76:24:07:1a:37:5e:57:fa:b1:99:6d:23:
eb:34:2a:b6:4e:95:79:f8:aa:6d:1a:55:79:a6:12:6e:86:a5:
e8:ed:55:cc:e1:bf:3b:0c:0d:bb:5d:c8:ea:e0:b8:3d:b0:60:
51:96:dc:c2:41:fb:ed:42:fa:63:ae:64:b6:3b:42:12:26:85:
61:8f:df:9a:67:4b:9b:6d:e0:7e:0e:81:fc:27:9c:4e:13:a3:
0d:da:92:e3:28:0e:58:a3:06:cf:0c:2d:cf:e2:95:a6:8f:b1:
34:3b:6c:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hhtICHCee8+9joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
YzM0MjdkZmUtNjZjOC00OTgwLWJkMWYtZGRlYjQxYWY4NTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPT/H+766xqWS4HTilitT1ePVpaLaQTA19Tm
FqmsQQF8FWeZIkFOgTeZUm63U5vtFM2MBztz++5qg4ztd5B0fw5AyJgRKk5u1Onm
BlXIr1spIwoVTz0AM28W3D9HopQDMJ0VS3yZQmX41tl6//uao29ohNu1g07kQp5s
ydOsudqklE/Qf9zhj1D+T8tRGCOS3NI5LF+l8A7X4NSDFAn5xEynF9bYL2xt+isL
yfxiln55COGnvsg/avxcBRLR4HUiCyXlgBZklPQCBy+HxTLXboyD0uFvGYxdKYSo
IHv2BdUeiQxXkxnA7M+q63/oMbzWpsfM3+Y8ZRgDighxccxqKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvzT5n82zY+f6J5QMVdskt/+0umMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNGJjZWFhNGQtNGFjNi0z
NzY4LTg0ZmEtODhjNzY4ZjQ2YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcHfp33SBP9eA13EV/+lN9bl+clDlbBiBaGi0C/IDmNxf74j2n6Ha03
bgXL1WpYbG00JSxV1h72izATw/xM9utZ+Qk01JsoQ7l8AQoilE7vQYkD3MRnsTx4
S9FzhNnzCR1OEvlQ5IkkIrUukr4lkFCyTXeZwGVzSSX+K/+lHpTxvxZr/oqaYOcf
UCUFj+Pd9Bqqn+i2uHYkBxo3Xlf6sZltI+s0KrZOlXn4qm0aVXmmEm6GpejtVczh
vzsMDbtdyOrguD2wYFGW3MJB++1C+mOuZLY7QhImhWGP35pnS5tt4H4OgfwnnE4T
ow3akuMoDlijBs8MLc/ilaaPsTQ7bO4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:13 2025 by rpki-client