Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
File: af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa (raw, json)
Hash identifier: sfCh/NyjT8NIy9Kh42qG7Y3c+YzTwUSdNq3Z3Pi4nCw=
Subject key identifier: 74:77:59:2A:62:8B:71:70:C9:65:2C:35:F9:9A:63:7C:E4:28:67:B2
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F432858480BDA6144ED9942BBE3D38180
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 42
IP address blocks: 207.34.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:61:44:ed:99:42:bb:e3:d3:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=a8fcede8-929a-4507-9a13-d384f5be4fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:fb:17:4b:25:97:9e:b2:42:07:22:52:bf:
20:16:7b:fd:0a:fd:1d:c5:15:c3:a6:53:44:ec:0e:
3a:93:71:3a:51:db:65:5b:d8:e1:82:dd:f9:56:c1:
1d:87:9b:a7:1f:38:f6:59:cd:a9:64:a0:64:4d:d6:
5f:ce:a7:39:20:af:e9:c9:b7:72:fe:ee:5d:45:30:
a8:c2:0f:ab:f4:29:b3:9c:47:43:f9:a8:c5:fb:71:
95:5c:75:b7:a6:11:91:42:3d:e9:6a:cc:d3:2f:a9:
de:71:f9:0a:66:91:d9:86:dc:3b:79:a2:3f:2a:54:
78:8d:43:17:b1:21:fa:f3:ee:e3:a2:44:e0:88:48:
75:70:fd:e9:6b:6c:eb:02:52:21:58:4e:23:4a:db:
3a:56:58:fa:31:ba:0f:41:46:09:f8:48:ff:a1:aa:
c7:ed:46:32:57:36:11:d5:67:5a:1c:68:ad:37:35:
cd:e0:49:50:aa:08:77:98:ac:7a:9a:4f:23:97:8b:
85:66:c5:f7:d7:f6:8b:22:f8:db:ff:be:b0:ef:5a:
8d:c4:b1:c3:c9:eb:04:dd:57:fa:c2:b4:59:7f:da:
10:4c:29:1f:4d:45:09:e1:8c:1c:d0:cb:bd:dc:5d:
93:39:09:1d:97:47:ae:ee:c9:9e:c4:f3:c2:9a:2a:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:59:2A:62:8B:71:70:C9:65:2C:35:F9:9A:63:7C:E4:28:67:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a7:7f:4a:03:b5:23:74:00:8b:38:f6:01:5c:6b:5f:08:a3:
1d:b8:54:da:11:ba:bd:e8:66:d2:ca:19:97:f7:61:86:6a:33:
6d:09:64:dc:5c:95:3f:6f:d7:da:71:91:92:31:b6:02:bb:97:
ed:8e:c0:d6:17:99:d8:3c:7c:c1:01:7a:d1:a2:f1:8a:07:1b:
a8:e6:04:ca:84:91:ac:33:86:8e:e0:c8:a8:ca:07:58:6a:8d:
a7:a1:be:7a:1b:c9:4d:7f:fa:bc:bd:94:74:09:95:3a:7a:4e:
e1:93:30:48:27:04:e0:59:79:fe:b7:39:7e:e7:d3:4c:13:40:
65:a5:75:f6:13:a9:7c:0f:e5:32:b0:02:5d:2c:8f:ef:3a:20:
67:36:39:9a:02:b9:74:03:93:23:5b:31:32:58:c1:60:95:cb:
d2:1d:ae:ba:d1:30:4b:d2:38:a7:95:c9:68:8c:9c:22:27:f5:
a7:82:e5:a2:9e:35:5b:51:48:1d:bb:ca:9c:e4:9a:34:17:68:
f6:e3:3b:42:2f:88:75:0a:5e:43:47:bd:82:c1:8a:1d:fa:a6:
8e:0f:a2:af:19:87:f8:3f:e6:a5:43:b9:43:4a:1b:ea:f3:be:
ab:74:66:71:e5:51:be:30:ae:11:4a:54:7b:2f:ac:ec:52:e2:
2a:ac:0f:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mFE7ZlCu+PTgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
YThmY2VkZTgtOTI5YS00NTA3LTlhMTMtZDM4NGY1YmU0ZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0P7F0sll56yQgciUr8gFnv9Cv0dxRXDplNE
7A46k3E6UdtlW9jhgt35VsEdh5unHzj2Wc2pZKBkTdZfzqc5IK/pybdy/u5dRTCo
wg+r9CmznEdD+ajF+3GVXHW3phGRQj3paszTL6necfkKZpHZhtw7eaI/KlR4jUMX
sSH68+7jokTgiEh1cP3pa2zrAlIhWE4jSts6Vlj6MboPQUYJ+Ej/oarH7UYyVzYR
1WdaHGitNzXN4ElQqgh3mKx6mk8jl4uFZsX31/aLIvjb/76w71qNxLHDyesE3Vf6
wrRZf9oQTCkfTUUJ4Ywc0Mu93F2TOQkdl0eu7smexPPCmioPpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHR3WSpii3FwyWUsNfmaY3zkKGeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYWYzYTlhNTAtZjIzZi0z
ZWY1LWEzNjYtNGFhMTQwNDgxYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyIGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2nf0oDtSN0AIs49gFca18Iox24VNoRur3oZtLKGZf3YYZqM20JZNxc
lT9v19pxkZIxtgK7l+2OwNYXmdg8fMEBetGi8YoHG6jmBMqEkawzho7gyKjKB1hq
jaehvnobyU1/+ry9lHQJlTp6TuGTMEgnBOBZef63OX7n00wTQGWldfYTqXwP5TKw
Al0sj+86IGc2OZoCuXQDkyNbMTJYwWCVy9IdrrrRMEvSOKeVyWiMnCIn9aeC5aKe
NVtRSB27ypzkmjQXaPbjO0IviHUKXkNHvYLBih36po4Poq8Zh/g/5qVDuUNKG+rz
vqt0ZnHlUb4wrhFKVHsvrOxS4iqsD+Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:44 2025 by rpki-client