Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json)
Hash identifier: qGK1rpKTMSpv/K1ZKBFirTHe4Bp/+UQMW/eVUL/6O2s=
Subject key identifier: EC:F0:4B:BD:ED:28:B4:25:82:2E:57:51:8A:5A:99:AE:32:8A:56:9D
Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949
Certificate serial: 010D0C9F432858483455625D4754F0F9FEDA5F80
Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 30500
IP address blocks: 74.123.68.0/22 maxlen: 24
198.134.28.0/22 maxlen: 24
208.77.196.0/22 maxlen: 24
208.123.208.0/24 maxlen: 24
208.123.210.0/23 maxlen: 24
208.123.212.0/22 maxlen: 24
208.123.216.0/22 maxlen: 24
2605:e680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:62:5d:47:54:f0:f9:fe:da:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=78f5adff-9b4b-4cb3-bec3-f96ab3c38426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:e4:a8:14:59:ad:c3:45:bd:57:c1:bc:09:
ec:b3:ff:cb:82:8f:a0:35:cb:4a:cb:b3:a0:00:16:
ee:24:c0:d8:c8:6d:9c:f5:0b:0f:b2:27:91:a9:65:
9e:28:20:75:98:fe:31:41:ec:70:ba:12:d2:aa:f7:
77:c0:45:0b:77:ea:9e:8e:22:db:f5:d0:51:cc:54:
b5:8b:af:80:53:68:57:4e:00:0a:d4:0d:e5:ef:51:
46:76:04:61:86:0b:eb:65:19:94:70:73:61:e6:f0:
71:ef:83:48:64:d8:d9:e4:64:59:96:b9:b6:ed:07:
2f:83:7f:eb:6b:5d:a7:60:20:80:fa:6a:29:cd:5f:
41:2f:da:10:16:3b:a4:08:b7:4d:61:15:6d:3b:bc:
71:fb:1d:34:8c:53:eb:04:eb:fc:e9:9f:b1:3e:e0:
a4:a9:40:bb:72:cd:a5:79:94:1b:78:dd:76:1a:90:
69:8a:be:d7:57:c6:5a:90:7c:b0:cb:e2:ca:b4:cd:
8d:0a:83:4e:f3:4e:74:80:c5:88:cd:f0:55:dd:ec:
ad:44:09:8e:b2:32:b0:8d:52:a9:cc:d7:da:30:f6:
60:57:87:e9:0b:ed:ba:ca:06:04:87:61:ab:91:87:
a3:fe:45:4d:e7:43:e4:47:07:0b:8b:f0:f0:0b:bc:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F0:4B:BD:ED:28:B4:25:82:2E:57:51:8A:5A:99:AE:32:8A:56:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
X509v3 Authority Key Identifier:
keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.68.0/22
198.134.28.0/22
208.77.196.0/22
208.123.208.0/24
208.123.210.0-208.123.219.255
IPv6:
2605:e680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:eb:9c:9a:4f:55:c9:06:09:01:19:f0:e1:84:c1:95:59:46:
bb:3a:78:99:0d:ab:61:90:c8:ac:a3:87:9a:f7:9a:80:52:59:
3e:45:dd:2c:51:b6:cd:bd:1e:f7:cd:9f:6b:62:1d:13:d5:d5:
d4:96:03:80:2f:3e:59:f6:ae:ce:e6:c9:56:3e:aa:e5:9c:b1:
56:92:1f:d9:09:5c:22:7a:f0:c1:04:03:19:7c:e3:96:3a:92:
6d:b3:68:dc:b3:02:49:0e:ed:1d:b2:ae:e9:1f:ee:15:6e:29:
d8:71:c9:9b:95:b9:63:92:e7:0b:69:30:96:37:26:8a:89:be:
c2:95:77:39:28:bc:70:dd:4f:85:06:39:be:b1:49:d6:3b:ec:
eb:be:56:aa:30:1a:72:08:ea:16:7f:16:3b:7b:bf:dc:01:66:
9c:57:13:f8:6e:25:52:09:18:cf:60:cf:c4:cc:8a:c2:67:30:
ca:62:38:fd:b5:e2:ab:28:1b:6a:85:f9:7e:65:2b:d2:9d:62:
3c:a4:79:3e:be:71:dd:a7:16:7e:57:0e:37:e5:83:26:58:0d:
68:d9:34:28:22:bf:07:b0:48:aa:eb:60:3b:71:47:57:af:58:
25:8a:64:56:bf:37:d5:a4:2d:ad:37:cc:16:d6:ac:ee:48:74:
cc:ef:f0:f0
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWEg0VWJdR1Tw+f7aX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3
OTQ5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NzhmNWFkZmYtOWI0Yi00Y2IzLWJlYzMtZjk2YWIzYzM4NDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi83kqBRZrcNFvVfBvAnss//Lgo+gNctKy7Og
ABbuJMDYyG2c9QsPsieRqWWeKCB1mP4xQexwuhLSqvd3wEULd+qejiLb9dBRzFS1
i6+AU2hXTgAK1A3l71FGdgRhhgvrZRmUcHNh5vBx74NIZNjZ5GRZlrm27Qcvg3/r
a12nYCCA+mopzV9BL9oQFjukCLdNYRVtO7xx+x00jFPrBOv86Z+xPuCkqUC7cs2l
eZQbeN12GpBpir7XV8ZakHywy+LKtM2NCoNO8050gMWIzfBV3eytRAmOsjKwjVKp
zNfaMPZgV4fpC+26ygYEh2GrkYej/kVN50PkRwcLi/DwC7zKTwIDAQABo4IDhDCC
A4AwHQYDVR0OBBYEFOzwS73tKLQlgi5XUYpama4yiladMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0
MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z
YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3
MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm
Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj
NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC
xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa+ucmk9VyQYJARnw4YTBlVlGuzp4mQ2rYZDIrKOHmveagFJZPkXdLFG2
zb0e982fa2IdE9XV1JYDgC8+WfauzubJVj6q5ZyxVpIf2QlcInrwwQQDGXzjljqS
bbNo3LMCSQ7tHbKu6R/uFW4p2HHJm5W5Y5LnC2kwljcmiom+wpV3OSi8cN1PhQY5
vrFJ1jvs675WqjAacgjqFn8WO3u/3AFmnFcT+G4lUgkYz2DPxMyKwmcwymI4/bXi
qygbaoX5fmUr0p1iPKR5Pr5x3acWflcON+WDJlgNaNk0KCK/B7BIqutgO3FHV69Y
JYpkVr831aQtrTfMFtas7kh0zO/w8A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:25:29 2025 by rpki-client