Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/4784a435-0e06-3cbf-bde6-277d592427d9.roa
File: 4784a435-0e06-3cbf-bde6-277d592427d9.roa (raw, json)
Hash identifier: /bPjDDqp7ASumOJqSWQ97cnzp0ccAsXplT/TC0kGc1M=
Subject key identifier: 39:CE:3E:B2:BF:C1:AD:40:7F:08:DF:4B:EE:DC:1E:BE:BC:AE:B3:33
Certificate issuer: /CN=cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4
Certificate serial: 010D0C9F432858485E35ABDEE7E06071B7BF6580
Authority key identifier: 49:F0:FB:F6:EE:1E:5A:38:2A:E0:3E:68:C8:07:0D:4C:4B:7E:C4:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/4784a435-0e06-3cbf-bde6-277d592427d9.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 16509
IP address blocks: 207.90.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:ab:de:e7:e0:60:71:b7:bf:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=21fc1b92-4042-43d7-adde-eb937bb6926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:44:1c:04:c1:f2:7c:eb:38:eb:6d:14:67:
ab:76:6b:62:8f:91:15:f8:f5:80:e8:55:5e:1f:bd:
ea:11:f4:62:c1:59:bd:99:52:b9:15:1c:00:c1:e1:
79:b8:fb:a4:6c:4b:6e:56:7d:9c:1f:f6:ef:b6:94:
f4:a7:52:19:33:1c:7e:41:d3:78:1d:46:e6:95:7b:
c8:1e:61:40:6e:c1:45:55:d7:4d:44:2e:1d:08:fe:
25:55:21:ca:d4:e6:6d:dd:5f:50:79:f3:a5:ad:0f:
cc:0a:e2:a8:dc:6f:92:a6:47:0f:52:7e:f6:ae:c9:
cd:6c:57:18:34:2d:08:c8:97:c0:b3:3c:54:77:7a:
2d:8b:e5:ed:6d:c7:e0:0f:49:ab:a0:4e:57:a0:14:
16:d0:d5:05:b7:10:fe:70:c9:3a:28:2a:8f:d1:20:
22:6c:b7:53:cd:c8:f0:f4:39:aa:d7:d8:79:a4:29:
ad:31:ff:a8:85:ff:4d:49:3f:ea:5d:ef:4a:b1:3f:
ef:2e:a6:25:05:97:fd:8f:fb:d7:06:ab:e4:4c:2d:
b8:70:53:9f:29:8b:8c:6c:f3:e8:25:a8:ca:36:17:
26:99:82:69:a1:80:96:7d:4b:eb:31:40:88:0a:c0:
76:88:76:10:59:6d:52:a8:a0:24:a6:30:b0:4b:bb:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:3E:B2:BF:C1:AD:40:7F:08:DF:4B:EE:DC:1E:BE:BC:AE:B3:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/4784a435-0e06-3cbf-bde6-277d592427d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.crl
X509v3 Authority Key Identifier:
keyid:49:F0:FB:F6:EE:1E:5A:38:2A:E0:3E:68:C8:07:0D:4C:4B:7E:C4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:5a:6f:a8:d4:dc:28:18:4b:a6:96:0c:01:7c:fd:2f:cd:9d:
18:88:af:a3:cb:62:8b:e1:30:ea:d2:05:39:3f:48:da:22:2c:
a1:1a:01:2f:77:70:dc:9c:fd:3d:1b:1d:07:14:09:e6:df:97:
72:e6:da:0e:68:c0:7b:08:e1:03:e6:b9:27:eb:37:3f:96:71:
a3:7c:88:7d:26:f4:8c:c5:8a:77:41:43:b8:c2:2d:00:38:15:
9e:58:92:83:d8:8b:5d:75:93:a1:e4:ea:cb:e9:b5:ef:33:67:
c6:29:00:04:11:77:20:2c:d6:6b:42:cf:dd:0d:8a:f9:d0:4c:
c0:ab:eb:40:4c:49:09:a0:d0:10:d3:de:5e:0a:76:93:af:f8:
b1:eb:f5:3b:7b:25:be:13:b0:23:a7:34:c6:eb:6a:78:03:fb:
2c:16:fb:c1:5f:e9:36:1b:f6:fa:c1:06:f9:57:ea:4b:41:32:
5d:d1:ee:ec:e5:fb:69:c5:03:87:ea:e7:5b:ba:6b:a3:28:6d:
23:eb:e8:d1:43:d8:b4:2f:a2:6a:bb:49:30:18:61:3b:ba:db:
03:41:20:09:bb:b0:bd:34:15:cc:3d:9c:96:1d:0c:dd:03:b4:
6e:8a:52:4a:ff:a7:c7:90:88:41:70:f5:aa:9a:16:a7:0b:fb:
d2:d3:96:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNave5+Bgcbe/ZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5NmMwYjYtMDRkNC00YjYxLTllNGEtZmIyMjBjZDhl
MmQ0MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
MjFmYzFiOTItNDA0Mi00M2Q3LWFkZGUtZWI5MzdiYjY5MjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVEHATB8nzrOOttFGerdmtij5EV+PWA6FVe
H73qEfRiwVm9mVK5FRwAweF5uPukbEtuVn2cH/bvtpT0p1IZMxx+QdN4HUbmlXvI
HmFAbsFFVddNRC4dCP4lVSHK1OZt3V9QefOlrQ/MCuKo3G+SpkcPUn72rsnNbFcY
NC0IyJfAszxUd3oti+XtbcfgD0mroE5XoBQW0NUFtxD+cMk6KCqP0SAibLdTzcjw
9Dmq19h5pCmtMf+ohf9NST/qXe9KsT/vLqYlBZf9j/vXBqvkTC24cFOfKYuMbPPo
JajKNhcmmYJpoYCWfUvrMUCICsB2iHYQWW1SqKAkpjCwS7uXWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnOPrK/wa1AfwjfS+7cHr68rrMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYzk2
YzBiNi0wNGQ0LTRiNjEtOWU0YS1mYjIyMGNkOGUyZDQvNDc4NGE0MzUtMGUwNi0z
Y2JmLWJkZTYtMjc3ZDU5MjQyN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2M5NmMwYjYtMDRkNC00YjYxLTll
NGEtZmIyMjBjZDhlMmQ0L2NjOTZjMGI2LTA0ZDQtNGI2MS05ZTRhLWZiMjIwY2Q4
ZTJkNC5jcmwwHwYDVR0jBBgwFoAUSfD79u4eWjgq4D5oyAcNTEt+xKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYzk2YzBiNi0wNGQ0LTRiNjEtOWU0YS1mYjIy
MGNkOGUyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz1r8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdab6jU3CgYS6aWDAF8/S/NnRiIr6PLYovhMOrSBTk/SNoiLKEaAS93
cNyc/T0bHQcUCebfl3Lm2g5owHsI4QPmuSfrNz+WcaN8iH0m9IzFindBQ7jCLQA4
FZ5YkoPYi111k6Hk6svpte8zZ8YpAAQRdyAs1mtCz90NivnQTMCr60BMSQmg0BDT
3l4KdpOv+LHr9Tt7Jb4TsCOnNMbrangD+ywW+8Ff6TYb9vrBBvlX6ktBMl3R7uzl
+2nFA4fq51u6a6MobSPr6NFD2LQvomq7STAYYTu62wNBIAm7sL00Fcw9nJYdDN0D
tG6KUkr/p8eQiEFw9aqaFqcL+9LTlg8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:51 2025 by rpki-client