Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/03b0c3b7-2e2b-3985-a293-d8cb43831e7c.roa
File: 03b0c3b7-2e2b-3985-a293-d8cb43831e7c.roa (raw, json)
Hash identifier: gejFAR1hD8DoC1+YPJUuGvurwxmmE8T+tPr2RLPZg/E=
Subject key identifier: 74:D9:FC:EC:0D:60:91:43:C1:5A:63:5C:48:9F:57:CC:63:1D:F6:00
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487DEF465F121F855D0A8FFDC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/03b0c3b7-2e2b-3985-a293-d8cb43831e7c.roa
Signing time: Thu 09 Jan 2025 22:45:02 +0000
ROA not before: Thu 09 Jan 2025 22:45:02 +0000
ROA not after: Wed 09 Apr 2025 21:45:02 +0000
asID: 54175
IP address blocks: 70.35.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:ef:46:5f:12:1f:85:5d:0a:8f:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 9 22:45:02 2025 GMT
Not After : Apr 9 21:45:02 2025 GMT
Subject: CN=2681aa8e-1f1e-4ae3-8eab-2535b25acae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:61:af:0b:f1:bb:7d:68:ac:eb:e9:ee:a1:
b7:57:21:4a:c2:c2:92:95:59:4a:18:4c:70:d2:55:
3b:a2:10:32:41:22:e9:bc:d4:ea:13:57:c3:a6:8f:
54:bc:c6:c3:9d:29:14:cf:d0:7f:6f:79:f4:bb:4b:
fc:71:1d:4d:c7:cd:8f:05:83:88:c8:c3:03:d1:38:
b6:4c:dc:49:06:bb:6e:7e:a2:73:80:f8:d2:25:b9:
5c:6c:7f:5c:1c:73:c0:05:fa:59:20:0c:55:53:48:
c5:7e:fd:fd:c5:b4:7f:37:87:98:12:42:b0:4b:72:
28:3d:34:7f:66:a8:42:51:cf:8c:33:2f:b2:29:04:
65:8f:78:3d:2b:8f:a0:29:be:6c:45:2a:fb:46:79:
57:e3:ae:85:e8:62:23:f0:f8:30:18:ab:3f:38:06:
2e:cb:96:94:38:a3:e0:82:c2:53:a0:15:1d:d8:be:
60:fd:3c:59:c1:56:0f:6e:c5:62:97:8f:5c:7a:ff:
fa:4e:76:ce:8d:da:8c:4a:d7:97:df:0f:2a:17:15:
65:3a:22:a7:f1:de:c5:37:ba:6f:32:12:15:83:10:
e6:32:ae:2b:30:cf:91:fa:82:de:fa:7d:59:97:e5:
c2:b5:fa:87:0b:05:40:53:eb:89:3a:94:b3:f9:9d:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:FC:EC:0D:60:91:43:C1:5A:63:5C:48:9F:57:CC:63:1D:F6:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/03b0c3b7-2e2b-3985-a293-d8cb43831e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
70.35.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:e9:1b:c5:cd:9d:bd:70:6e:90:60:11:f7:d1:4e:c9:80:db:
9b:33:b8:f5:67:94:3d:3f:91:f2:b2:00:8e:f4:a3:22:ec:10:
29:55:b7:a2:ef:ac:91:8c:7f:1b:56:c2:4e:71:3d:9d:a4:a1:
a7:e3:ce:98:2c:a2:e1:64:7d:57:e1:44:35:88:7e:47:72:cf:
fb:25:60:dc:60:fc:74:78:8d:67:fc:1e:25:9e:e9:a1:37:3d:
82:2c:d1:c1:dc:49:0e:2f:27:dc:9a:a1:b2:fd:25:3c:bc:50:
d6:9e:c4:36:57:a6:50:9e:67:3d:54:5a:6b:3d:57:3a:9c:72:
fa:d9:19:e9:d7:ad:00:6a:b0:99:06:5a:6c:6f:75:9c:9b:f4:
33:d0:03:2f:1e:10:f3:08:15:0c:ba:59:0a:6c:bd:1d:3f:1d:
d5:59:2f:a2:27:f2:6d:dc:fd:b7:a1:b1:fc:e4:85:d7:3b:1b:
3b:cc:82:96:be:64:90:d1:fa:4f:8e:c8:88:54:20:92:5b:98:
09:f5:83:23:d9:18:31:91:d9:9d:be:62:29:ec:68:f6:61:ad:
f3:bd:dc:2e:2e:a5:b1:99:f1:37:04:e1:e6:71:81:15:8c:70:
93:34:4c:3f:b9:8e:9e:d9:2c:21:ca:3c:e9:b5:9f:cb:3c:25:
f3:74:01:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh970ZfEh+FXQqP/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDEwOTIyNDUwMloXDTI1MDQwOTIxNDUwMlowLzEtMCsGA1UEAxMk
MjY4MWFhOGUtMWYxZS00YWUzLThlYWItMjUzNWIyNWFjYWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpZhrwvxu31orOvp7qG3VyFKwsKSlVlKGExw
0lU7ohAyQSLpvNTqE1fDpo9UvMbDnSkUz9B/b3n0u0v8cR1Nx82PBYOIyMMD0Ti2
TNxJBrtufqJzgPjSJblcbH9cHHPABfpZIAxVU0jFfv39xbR/N4eYEkKwS3IoPTR/
ZqhCUc+MMy+yKQRlj3g9K4+gKb5sRSr7RnlX466F6GIj8PgwGKs/OAYuy5aUOKPg
gsJToBUd2L5g/TxZwVYPbsVil49cev/6TnbOjdqMSteX3w8qFxVlOiKn8d7FN7pv
MhIVgxDmMq4rMM+R+oLe+n1Zl+XCtfqHCwVAU+uJOpSz+Z1ZuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTZ/OwNYJFDwVpjXEifV8xjHfYAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDNiMGMzYjctMmUyYi0z
OTg1LWEyOTMtZDhjYjQzODMxZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiPTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/pG8XNnb1wbpBgEffRTsmA25szuPVnlD0/kfKyAI70oyLsEClVt6Lv
rJGMfxtWwk5xPZ2koafjzpgsouFkfVfhRDWIfkdyz/slYNxg/HR4jWf8HiWe6aE3
PYIs0cHcSQ4vJ9yaobL9JTy8UNaexDZXplCeZz1UWms9VzqccvrZGenXrQBqsJkG
WmxvdZyb9DPQAy8eEPMIFQy6WQpsvR0/HdVZL6In8m3c/behsfzkhdc7GzvMgpa+
ZJDR+k+OyIhUIJJbmAn1gyPZGDGR2Z2+YinsaPZhrfO93C4upbGZ8TcE4eZxgRWM
cJM0TD+5jp7ZLCHKPOm1n8s8JfN0AWk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:01:39 2025 by rpki-client