Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa
File: 4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa (raw, json)
Hash identifier: j9rbx8zPkuDWBwTshDxyKg6gmjEfseb8LpikoNUg8K4=
Subject key identifier: 77:14:7A:CB:EF:02:25:5B:69:A7:8F:DE:44:C6:C0:55:67:2F:34:88
Certificate issuer: /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial: 010D0C9F4328584824FA88F3481B1CEA6468D740
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 26946
IP address blocks: 207.28.238.0/24 maxlen: 24
207.165.60.0/24 maxlen: 24
207.165.200.0/24 maxlen: 24
207.165.223.0/24 maxlen: 24
207.165.224.0/23 maxlen: 24
209.56.112.0/23 maxlen: 24
209.56.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:88:f3:48:1b:1c:ea:64:68:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=ceaca117-2e1f-4075-83b6-e203ca9abaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:5c:37:a2:4b:5c:e3:08:ff:28:c5:80:65:
ca:9e:60:dc:23:f0:c4:ae:bb:29:7f:ed:d6:2f:cd:
05:cc:ef:7b:0b:3b:fa:e0:14:64:5b:e8:b4:b2:5f:
f0:8f:0e:f5:7c:f7:e3:ff:b5:76:4d:f6:6b:b1:01:
66:fb:c6:5b:3f:b5:50:8f:13:9d:0f:76:27:60:8d:
d7:d8:8d:0d:a1:4d:dd:0e:95:6c:e8:d8:bf:cd:d6:
a3:7d:f1:bb:51:a9:53:85:e8:43:02:7a:1c:e1:2a:
07:d8:fd:d3:69:65:dd:af:01:1e:53:2b:73:e6:67:
52:07:52:94:91:7f:f9:b5:e6:6f:80:40:bb:fc:fd:
ba:9d:94:fa:56:74:16:19:9a:44:17:80:72:71:22:
1a:05:a7:ba:99:7e:61:41:58:9b:be:bd:1a:b1:9a:
e3:f2:e2:9a:35:d9:ea:f7:e6:79:72:c1:07:ff:dc:
32:37:c6:55:42:f4:56:96:00:c1:0b:b8:37:0a:8e:
15:03:86:24:10:50:08:73:3b:c3:fa:ce:a0:82:c0:
4e:0b:8a:7b:bb:b6:f4:9e:79:70:7e:ef:bc:27:03:
4a:7c:12:1b:8e:eb:f0:c6:3e:4f:12:37:e7:c5:9c:
20:e2:11:55:c8:ac:c1:8c:78:09:cd:a0:ac:8b:24:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:7A:CB:EF:02:25:5B:69:A7:8F:DE:44:C6:C0:55:67:2F:34:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
X509v3 Authority Key Identifier:
keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
207.28.238.0/24
207.165.60.0/24
207.165.200.0/24
207.165.223.0-207.165.225.255
209.56.112.0/23
209.56.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:96:4c:0d:7f:40:6f:37:a2:13:d1:37:01:58:99:26:08:f4:
22:5a:e0:68:7c:5a:e6:7c:40:da:56:2d:71:cd:6d:4f:d5:5f:
58:ea:d4:60:21:49:7b:dc:8f:2b:68:f6:69:b3:d9:12:39:25:
8c:dc:59:ec:51:3c:31:93:96:c8:e1:3b:7d:b6:64:70:3d:1e:
ee:61:d1:b0:9d:1f:43:4d:c9:89:b9:5c:29:a5:ea:64:50:7f:
01:19:8b:9b:e2:91:f8:74:b4:7c:28:0f:10:72:c1:f1:c1:1f:
7f:3f:fc:d3:f9:de:68:3e:56:db:87:4d:8d:51:0a:e5:f2:a2:
cc:aa:7f:16:56:a0:89:78:89:cc:1a:08:bb:8c:87:a1:c6:61:
d6:80:2e:ea:63:29:d6:63:69:b5:b3:1d:ff:50:2a:91:77:a0:
59:d5:48:f4:46:f0:8b:f8:3f:90:0f:9c:6a:38:de:15:13:15:
22:df:57:8b:32:dc:43:03:17:e0:29:0e:39:45:4a:19:79:f1:
ba:0d:e8:f7:6d:09:ca:45:f6:e2:df:4c:22:c7:d3:e1:d0:b6:
97:ad:8b:fe:e2:78:f1:13:81:fc:9c:b8:00:19:97:50:6b:ff:
e4:e8:32:1d:91:1c:85:65:b6:b7:9a:bf:56:a6:5b:fb:cb:f8:
fb:e1:1c:c3
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEgk+ojzSBsc6mRo10AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJlZjdjOWItYzc1Ni00MzlhLWFjNTktMGZiNWU1ZThj
MWVlMB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
Y2VhY2ExMTctMmUxZi00MDc1LTgzYjYtZTIwM2NhOWFiYWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndFcN6JLXOMI/yjFgGXKnmDcI/DErrspf+3W
L80FzO97Czv64BRkW+i0sl/wjw71fPfj/7V2TfZrsQFm+8ZbP7VQjxOdD3YnYI3X
2I0NoU3dDpVs6Ni/zdajffG7UalThehDAnoc4SoH2P3TaWXdrwEeUytz5mdSB1KU
kX/5teZvgEC7/P26nZT6VnQWGZpEF4BycSIaBae6mX5hQVibvr0asZrj8uKaNdnq
9+Z5csEH/9wyN8ZVQvRWlgDBC7g3Co4VA4YkEFAIczvD+s6ggsBOC4p7u7b0nnlw
fu+8JwNKfBIbjuvwxj5PEjfnxZwg4hFVyKzBjHgJzaCsiySSOQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFHcUesvvAiVbaaeP3kTGwFVnLzSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVm
N2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVlOGMxZWUvNGU4YTZhNjAtMWQ5Mi0z
N2Y2LTk5OTAtZmRlZGNlNWRkNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzJlZjdjOWItYzc1Ni00MzlhLWFj
NTktMGZiNWU1ZThjMWVlLzcyZWY3YzliLWM3NTYtNDM5YS1hYzU5LTBmYjVlNWU4
YzFlZS5jcmwwHwYDVR0jBBgwFoAUJ7ij3Un12fMQU7ZDWsI4uCWn130wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1
ZTVlOGMxZWUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAzxzuAwQA
z6U8AwQAz6XIMAwDBADPpd8DBAHPpeADBAHROHADBAHROJ4wVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmZZM
DX9AbzeiE9E3AViZJgj0IlrgaHxa5nxA2lYtcc1tT9VfWOrUYCFJe9yPK2j2abPZ
EjkljNxZ7FE8MZOWyOE7fbZkcD0e7mHRsJ0fQ03JiblcKaXqZFB/ARmLm+KR+HS0
fCgPEHLB8cEffz/80/neaD5W24dNjVEK5fKizKp/FlagiXiJzBoIu4yHocZh1oAu
6mMp1mNptbMd/1AqkXegWdVI9Ebwi/g/kA+cajjeFRMVIt9XizLcQwMX4CkOOUVK
GXnxug3o920JykX24t9MIsfT4dC2l62L/uJ48ROB/Jy4ABmXUGv/5OgyHZEchWW2
t5q/VqZb+8v4++Ecww==
-----END CERTIFICATE-----
Generated at Tue May 13 14:15:15 2025 by rpki-client