Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
File: f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa (raw, json)
Hash identifier: wcJhTbTz1dOHADp5nhCgZW+aZw4EzGJkuFxRQqv34qc=
Subject key identifier: DB:EE:DA:A2:35:9D:15:02:65:C8:ED:2C:37:07:C0:7D:B1:72:B0:84
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848907602FBA85FD239D8ABDA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397229
IP address blocks: 199.7.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:02:fb:a8:5f:d2:39:d8:ab:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=8d05e5f1-2868-42a8-856b-daee5fcaf2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:06:ff:56:6d:c9:1e:f8:e6:2f:f7:4a:5d:
f5:61:0b:c2:3c:ad:41:48:9d:48:23:74:b4:dd:9c:
58:c2:c1:21:46:eb:e4:d7:a3:ea:6d:d8:aa:61:01:
e6:a6:8d:f3:a9:6a:9e:70:11:33:91:8d:70:d2:fc:
5d:c9:c9:c4:db:9b:12:fd:c1:ec:ab:0f:82:a3:64:
a6:f3:67:c0:81:e7:ce:b0:d4:a2:ff:81:5b:2c:bd:
9d:20:08:d2:10:4f:56:4b:54:95:27:36:49:d3:08:
e2:12:06:d3:e6:ae:bd:cc:66:e2:7a:95:88:7a:fa:
ea:c2:d9:2d:56:d1:1a:63:34:11:9e:e7:e3:85:d3:
09:98:25:80:0c:24:dd:f4:fb:18:2c:6d:27:16:6a:
9e:c7:4c:08:9f:e6:1b:66:e1:7f:1d:d3:78:64:00:
60:1e:b5:c0:6e:0b:85:66:79:da:dc:70:9e:fe:f8:
c9:2e:1d:4c:e6:44:af:77:95:ea:19:ff:d1:d1:c1:
cd:0b:e7:70:63:32:57:b2:13:d7:b5:7c:cf:92:af:
3e:cc:5b:3c:b3:e2:b8:04:77:55:98:51:b0:60:a1:
51:5a:fe:db:71:18:5d:7c:76:70:18:ed:a7:58:3e:
b5:e0:04:04:31:4b:80:0e:e6:6c:8a:88:79:ac:5d:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:DA:A2:35:9D:15:02:65:C8:ED:2C:37:07:C0:7D:B1:72:B0:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:33:54:c1:29:0e:d8:3b:b1:4a:4a:4c:ef:11:a3:53:d6:0a:
2a:35:21:38:a6:a4:51:b3:51:a4:b8:ec:b9:71:ca:41:f9:85:
e6:3d:d3:e5:95:87:11:ce:9a:53:bd:ab:f7:7c:ee:b2:6b:50:
34:4f:bf:18:ae:fa:8e:34:8b:a1:b3:84:fc:00:c3:ac:e0:19:
cf:6e:f9:d4:a4:d9:6a:85:9e:69:5f:be:78:ca:19:fe:bb:a2:
f0:d2:b6:a2:2d:37:3f:da:f5:de:ea:5d:63:71:31:19:d0:3b:
ac:8b:e7:6c:33:b6:1c:7b:61:42:a3:1f:10:fb:61:e8:a4:eb:
6e:88:b3:66:6d:dc:26:02:c6:4d:be:0e:49:c8:63:a7:ff:37:
62:7b:8e:d2:56:fc:17:0b:82:d4:08:a8:6c:1f:ab:33:14:39:
d4:74:54:f8:55:3d:14:f5:dd:a1:44:9c:57:01:0c:de:76:6e:
1b:b3:ac:d5:d1:e4:c8:b5:da:14:63:92:f2:ec:42:60:70:37:
05:9c:30:4d:b6:70:8a:ce:67:82:51:73:80:e1:db:07:cc:61:
dd:0b:ff:57:44:61:79:70:4e:0c:83:83:4e:55:1e:0f:e5:51:
14:84:6f:f6:3e:9f:19:3f:3a:b7:be:f8:1c:ed:fc:96:10:d4:
2c:5b:8f:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgL7qF/SOdir2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
OGQwNWU1ZjEtMjg2OC00MmE4LTg1NmItZGFlZTVmY2FmMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiEG/1ZtyR745i/3Sl31YQvCPK1BSJ1II3S0
3ZxYwsEhRuvk16PqbdiqYQHmpo3zqWqecBEzkY1w0vxdycnE25sS/cHsqw+Co2Sm
82fAgefOsNSi/4FbLL2dIAjSEE9WS1SVJzZJ0wjiEgbT5q69zGbiepWIevrqwtkt
VtEaYzQRnufjhdMJmCWADCTd9PsYLG0nFmqex0wIn+YbZuF/HdN4ZABgHrXAbguF
Znna3HCe/vjJLh1M5kSvd5XqGf/R0cHNC+dwYzJXshPXtXzPkq8+zFs8s+K4BHdV
mFGwYKFRWv7bcRhdfHZwGO2nWD614AQEMUuADuZsioh5rF0L7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvu2qI1nRUCZcjtLDcHwH2xcrCEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjg4MzdlYmEtNmQ3Ny0z
YTk4LTk5ZTgtZTQzNjdjZmRmOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0zVMEpDtg7sUpKTO8Ro1PWCio1ITimpFGzUaS47LlxykH5heY90+WV
hxHOmlO9q/d87rJrUDRPvxiu+o40i6GzhPwAw6zgGc9u+dSk2WqFnmlfvnjKGf67
ovDStqItNz/a9d7qXWNxMRnQO6yL52wzthx7YUKjHxD7Yeik626Is2Zt3CYCxk2+
DknIY6f/N2J7jtJW/BcLgtQIqGwfqzMUOdR0VPhVPRT13aFEnFcBDN52bhuzrNXR
5Mi12hRjkvLsQmBwNwWcME22cIrOZ4JRc4Dh2wfMYd0L/1dEYXlwTgyDg05VHg/l
URSEb/Y+nxk/Ore++Bzt/JYQ1Cxbj30=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:29 2025 by rpki-client