Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
File: 281d3ea3-8d51-391f-af59-84facbecc7a0.roa (raw, json)
Hash identifier: NVbbSyQ87IjaPVYL4gixWS8jDLEDWeQci4AT9GoQR0E=
Subject key identifier: 1A:50:F5:37:4A:D8:ED:A7:1F:4D:7C:43:DF:F9:D1:61:9A:8E:50:02
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A17089DE53C26BD54562F000
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
Signing time: Wed 22 Jan 2025 15:58:47 +0000
ROA not before: Wed 22 Jan 2025 15:58:47 +0000
ROA not after: Tue 22 Apr 2025 14:58:47 +0000
asID: 5769
IP address blocks: 207.253.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:70:89:de:53:c2:6b:d5:45:62:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:58:47 2025 GMT
Not After : Apr 22 14:58:47 2025 GMT
Subject: CN=66152778-8e1f-476d-8ae7-15efec8ce9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:1d:16:35:62:78:dd:be:92:32:58:f1:8f:
d0:ae:16:02:46:20:23:9c:c8:3a:be:61:2e:5b:ba:
13:b6:4d:22:83:b5:b6:43:49:0d:e1:f6:26:d5:17:
07:ab:3a:b5:93:5f:bc:36:66:19:88:6e:85:30:78:
34:cf:85:93:05:dd:b0:5b:7c:06:a0:42:33:52:e2:
de:6b:df:90:40:78:29:63:98:a6:6a:0c:a0:a0:3d:
e5:2e:f4:7c:e2:9b:29:fc:2c:1a:12:14:13:32:c1:
27:e2:b3:36:98:80:82:9d:cb:50:71:48:27:4f:fc:
2a:0d:16:8e:10:d6:23:64:68:83:2f:4b:63:ff:50:
5c:19:98:6c:30:18:96:bf:ce:49:ea:24:54:b0:2e:
df:d9:6c:e7:75:d1:ac:e3:e1:fd:e3:8f:4a:ef:62:
a6:8f:b7:a0:40:54:5d:14:c8:17:7d:66:b5:90:dd:
85:a4:d9:25:e3:10:04:af:4a:65:b9:50:75:78:10:
fe:2c:e4:e7:5e:e0:40:56:a7:d6:e8:c9:e7:3c:8f:
89:ea:19:7b:52:fe:ed:cf:fc:2b:e3:f5:ed:c5:5c:
9a:49:24:83:f4:a5:61:51:7a:b3:8d:a2:7f:32:19:
0d:8c:94:f0:81:f8:68:c5:e5:84:15:56:88:90:63:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:F5:37:4A:D8:ED:A7:1F:4D:7C:43:DF:F9:D1:61:9A:8E:50:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:36:f9:31:20:aa:cd:01:6d:73:6a:21:e3:7b:e2:aa:f0:50:
1d:f3:5c:da:1a:34:e0:a2:ad:3c:92:e7:7d:8b:05:a9:da:d2:
b1:25:66:d9:d2:bd:14:97:c9:32:4d:b0:f9:24:2d:15:9f:b4:
37:99:b2:7d:13:67:05:71:58:75:99:5f:66:e1:c2:b7:7e:d0:
01:ee:6e:a0:5b:ff:13:38:ef:15:24:4e:4c:27:76:63:b1:8e:
4a:42:78:20:54:73:b4:64:f5:6d:81:ab:5d:d3:8a:db:2e:cc:
2d:ef:4c:6b:63:de:df:2f:b9:7b:93:84:cd:b6:c5:58:b5:ee:
2e:76:f1:f7:94:cf:71:8b:82:06:d8:31:02:d9:cc:df:93:fe:
7d:c3:8a:93:69:31:38:dd:65:17:28:d0:6c:a3:5f:02:77:85:
9a:e3:1f:6e:14:6b:1d:2d:02:d0:2a:3b:be:51:a6:64:95:73:
6b:a8:54:4c:bc:5a:e9:a9:26:35:c0:16:3a:a3:5e:b6:37:43:
77:dc:b5:b4:e4:96:57:6c:4b:c8:de:23:74:46:b2:41:a2:e8:
c3:66:f9:85:70:30:ca:4c:e0:61:e1:ad:87:86:1b:04:10:cb:
2b:d3:f9:93:3f:cd:d1:e1:8c:d0:25:48:41:ee:5f:67:bd:36:
41:98:7b:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihcIneU8Jr1UVi8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDEyMjE1NTg0N1oXDTI1MDQyMjE0NTg0N1owLzEtMCsGA1UEAxMk
NjYxNTI3NzgtOGUxZi00NzZkLThhZTctMTVlZmVjOGNlOWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB4dFjVieN2+kjJY8Y/QrhYCRiAjnMg6vmEu
W7oTtk0ig7W2Q0kN4fYm1RcHqzq1k1+8NmYZiG6FMHg0z4WTBd2wW3wGoEIzUuLe
a9+QQHgpY5imagygoD3lLvR84psp/CwaEhQTMsEn4rM2mICCnctQcUgnT/wqDRaO
ENYjZGiDL0tj/1BcGZhsMBiWv85J6iRUsC7f2WznddGs4+H9449K72Kmj7egQFRd
FMgXfWa1kN2FpNkl4xAEr0pluVB1eBD+LOTnXuBAVqfW6MnnPI+J6hl7Uv7tz/wr
4/XtxVyaSSSD9KVhUXqzjaJ/MhkNjJTwgfhoxeWEFVaIkGPJUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpQ9TdK2O2nH018Q9/50WGajlACMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMjgxZDNlYTMtOGQ1MS0z
OTFmLWFmNTktODRmYWNiZWNjN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADI2+TEgqs0BbXNqIeN74qrwUB3zXNoaNOCirTyS532LBana0rElZtnS
vRSXyTJNsPkkLRWftDeZsn0TZwVxWHWZX2bhwrd+0AHubqBb/xM47xUkTkwndmOx
jkpCeCBUc7Rk9W2Bq13TitsuzC3vTGtj3t8vuXuThM22xVi17i528feUz3GLggbY
MQLZzN+T/n3DipNpMTjdZRco0GyjXwJ3hZrjH24Uax0tAtAqO75RpmSVc2uoVEy8
WumpJjXAFjqjXrY3Q3fctbTklldsS8jeI3RGskGi6MNm+YVwMMpM4GHhrYeGGwQQ
yyvT+ZM/zdHhjNAlSEHuX2e9NkGYe2I=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:01 2025 by rpki-client