Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
File: 68a0299b-9da0-3984-8e69-8112484fd69e.roa (raw, json)
Hash identifier: PJidkoWcL+Tw+fNK0B1OIzoePRnB8T9M8aYrT/vBzEs=
Subject key identifier: C2:74:E5:D9:1A:AA:0A:66:26:32:E4:16:DA:8B:F0:4D:E4:EF:CC:35
Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial: 010D0C9F43285848530AEB39E7C3A99FCE2085D0
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.80.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:eb:39:e7:c3:a9:9f:ce:20:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=0c553a54-12d7-465e-8150-f2105c9e842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:76:b1:2b:6b:57:b0:62:51:61:aa:ff:97:
98:0b:2e:b0:e6:fc:e4:04:6a:97:b9:19:6b:2f:b0:
90:16:2f:c0:08:46:43:ad:5c:99:e0:18:f2:b5:4e:
8d:c9:89:b0:ab:d1:6d:4e:16:5b:80:f5:a5:85:3f:
20:e4:43:fc:76:01:a4:04:cc:20:fb:eb:cd:a8:5f:
51:06:a8:bb:b6:94:ef:78:20:57:96:10:f9:2c:0b:
c2:48:48:03:b3:55:29:45:7b:5d:a9:cc:15:e6:25:
fb:20:7f:68:ab:f7:73:1d:fb:b6:01:92:9a:53:3a:
a9:e1:f1:a6:f6:a8:34:4e:32:08:0a:f1:08:e6:74:
55:fc:b3:b2:58:6d:a0:91:60:a1:7b:2c:f1:62:ff:
76:12:36:d3:63:c5:45:5f:da:60:f8:87:a5:ba:54:
8d:f1:90:f4:92:55:7e:39:72:45:ba:d5:ac:c8:e8:
88:2c:aa:24:4e:27:63:72:18:f6:c9:e9:92:a6:d5:
38:0c:bc:af:72:c3:a9:02:13:67:b2:6e:13:73:90:
32:eb:d8:41:94:9a:78:96:04:7c:e4:43:86:0b:9f:
83:61:c7:5d:2f:a3:e8:b2:5b:df:d7:51:47:ff:9b:
11:29:4e:77:80:fe:f3:ea:18:85:fc:03:6e:61:5b:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:E5:D9:1A:AA:0A:66:26:32:E4:16:DA:8B:F0:4D:E4:EF:CC:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
X509v3 Authority Key Identifier:
keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.80.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f1:56:0b:cd:f4:ec:78:24:27:2a:2d:02:ef:e7:d1:83:f2:
81:cb:0f:2d:c4:43:42:ef:fb:2b:07:68:c8:9d:18:13:5e:46:
16:26:69:48:72:63:29:23:13:58:3f:fe:6c:4b:b1:b2:77:19:
4b:34:d9:1c:dd:2d:aa:9e:a2:09:11:03:fa:85:35:ba:eb:b9:
02:9b:c6:12:65:be:67:ee:82:20:0f:97:53:46:68:59:77:cd:
38:bc:e6:36:90:16:03:7b:83:24:ab:d1:0d:17:fb:b5:17:41:
7a:15:0f:cb:09:a7:60:66:61:3f:e8:9c:6a:0d:ca:54:99:2e:
7c:8e:ad:2c:d3:b6:50:74:dd:f5:c1:0c:c5:66:e3:5f:0a:60:
c5:59:3b:d3:b5:bb:97:66:63:d4:90:6b:05:5e:85:ea:4c:e4:
ea:48:30:0a:fb:db:56:57:39:0d:a8:d2:ef:8d:b2:29:06:44:
c2:5b:92:7e:65:77:ea:85:af:40:47:e7:88:7e:2e:a2:ea:40:
d4:01:c1:a0:98:ec:5a:46:d2:cc:89:2b:c6:bb:c0:85:73:73:
a5:70:66:68:95:3f:87:8a:82:af:e1:42:83:73:27:02:a2:4b:
dd:6e:ae:7a:c1:25:3b:80:f8:04:5d:66:21:a0:00:2b:50:85:
6b:3b:6d:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCus558Opn84ghdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3
OGRkMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MGM1NTNhNTQtMTJkNy00NjVlLTgxNTAtZjIxMDVjOWU4NDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupt2sStrV7BiUWGq/5eYCy6w5vzkBGqXuRlr
L7CQFi/ACEZDrVyZ4BjytU6NyYmwq9FtThZbgPWlhT8g5EP8dgGkBMwg++vNqF9R
Bqi7tpTveCBXlhD5LAvCSEgDs1UpRXtdqcwV5iX7IH9oq/dzHfu2AZKaUzqp4fGm
9qg0TjIICvEI5nRV/LOyWG2gkWCheyzxYv92EjbTY8VFX9pg+IelulSN8ZD0klV+
OXJFutWsyOiILKokTidjchj2yemSptU4DLyvcsOpAhNnsm4Tc5Ay69hBlJp4lgR8
5EOGC5+DYcddL6Poslvf11FH/5sRKU53gP7z6hiF/ANuYVu6EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ05dkaqgpmJjLkFtqL8E3k78w1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3
NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvNjhhMDI5OWItOWRhMC0z
OTg0LThlNjktODExMjQ4NGZkNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz
YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj
NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz
NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFD0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7xVgvN9Ox4JCcqLQLv59GD8oHLDy3EQ0Lv+ysHaMidGBNeRhYmaUhy
YykjE1g//mxLsbJ3GUs02RzdLaqeogkRA/qFNbrruQKbxhJlvmfugiAPl1NGaFl3
zTi85jaQFgN7gySr0Q0X+7UXQXoVD8sJp2BmYT/onGoNylSZLnyOrSzTtlB03fXB
DMVm418KYMVZO9O1u5dmY9SQawVehepM5OpIMAr721ZXOQ2o0u+NsikGRMJbkn5l
d+qFr0BH54h+LqLqQNQBwaCY7FpG0syJK8a7wIVzc6VwZmiVP4eKgq/hQoNzJwKi
S91urnrBJTuA+ARdZiGgACtQhWs7bfo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:27 2025 by rpki-client