Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa
File: e72af840-3a40-3474-98bc-76b68a34ef2c.roa (raw, json)
Hash identifier: OQKaroCO7f9jTVcoZED/iMtvepnmd4iIAaYkubgUcRw=
Subject key identifier: C2:1E:4D:C9:49:27:C0:8E:F4:C3:8D:88:F4:B2:55:11:AD:67:ED:44
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F432858484EDAC4AABDECFA3F2592D900
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 400039
IP address blocks: 68.67.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c4:aa:bd:ec:fa:3f:25:92:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=b773ce0a-2d2a-4d42-9b4f-f6a1f9ce5972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:e0:92:a2:02:c5:93:0c:b6:24:93:6c:b1:
a2:3c:18:5e:c3:57:44:6b:c3:c8:95:b5:b8:e5:dd:
51:17:07:16:6e:a9:28:18:89:e1:c3:e6:b5:f8:49:
9f:e5:fd:08:1d:73:64:8f:ec:d3:fc:ff:33:02:c0:
2d:dc:34:02:36:4c:ea:d9:15:cb:1e:59:fc:a7:07:
97:c6:0c:ea:f7:60:35:da:36:61:82:e1:0e:65:b6:
c2:05:d1:b4:a8:71:2c:24:d3:72:ae:d1:89:ec:d5:
e5:cc:ba:a5:f9:94:67:16:1d:0f:39:a2:55:a8:1b:
55:08:5e:56:e2:8c:e8:fd:f4:dd:b8:bd:2c:6f:c6:
c1:68:3c:b2:09:0c:bc:23:56:37:be:47:24:8c:5a:
74:14:d1:c8:34:2a:d5:51:01:60:21:42:48:6b:74:
21:78:46:51:74:d4:f0:94:26:6f:a0:fc:e3:cf:2d:
be:85:d0:0f:9d:2e:d5:63:47:5b:2b:85:c0:c4:de:
f1:b7:41:25:a2:e0:15:5e:5d:c2:6b:73:76:8b:e2:
68:9e:56:f7:57:80:a6:0d:63:3e:2a:1c:ab:f6:a6:
69:35:b9:fe:21:ff:b6:e0:87:e9:f2:bd:13:25:7a:
f8:5c:66:67:e6:32:ee:6c:ea:72:61:74:6b:0e:dc:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:4D:C9:49:27:C0:8E:F4:C3:8D:88:F4:B2:55:11:AD:67:ED:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:93:dd:2f:31:3a:e6:96:76:71:e1:f2:7a:04:44:00:e5:54:
28:a9:f6:9d:23:cd:fd:62:a4:82:71:d0:9d:4b:ef:0c:58:29:
b2:cf:31:a8:84:4a:d6:3c:0b:80:7b:41:5c:25:15:ad:7e:d9:
fc:21:c9:48:20:ab:5f:e4:d3:fb:d2:3d:02:e3:ac:1c:12:37:
33:b7:2a:e2:ca:29:13:ab:6e:99:72:77:7c:d2:b6:ff:ae:a7:
5f:27:79:64:3a:ff:c8:27:43:7e:57:9d:5d:d8:6b:b9:6c:76:
17:8a:24:b9:e9:53:5d:f0:20:75:c4:c9:15:aa:d9:e9:72:5e:
e8:54:cf:7d:67:76:a3:b2:a9:5c:2f:93:bc:87:c8:f2:b8:c4:
8f:96:fa:9b:d8:47:e6:fa:ce:bd:d2:c6:76:47:e1:74:d4:96:
6b:97:fa:63:38:2d:52:c7:5b:99:65:b1:fc:c8:7f:0a:a2:d0:
0a:5b:36:80:72:69:f3:be:0d:b9:44:db:22:6a:d7:53:3a:ff:
22:d3:7b:5b:c6:d9:a0:83:50:36:c0:c5:8f:37:8b:4f:21:a7:
18:e2:3f:66:83:68:6e:22:0d:88:38:2d:1d:7a:2f:64:7b:b3:
6b:88:c4:a0:56:8e:8d:e7:03:ae:d0:5b:fa:d6:ee:86:b7:b5:
9a:eb:00:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sSqvez6PyWS2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
Yjc3M2NlMGEtMmQyYS00ZDQyLTliNGYtZjZhMWY5Y2U1OTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJjgkqICxZMMtiSTbLGiPBhew1dEa8PIlbW4
5d1RFwcWbqkoGInhw+a1+Emf5f0IHXNkj+zT/P8zAsAt3DQCNkzq2RXLHln8pweX
xgzq92A12jZhguEOZbbCBdG0qHEsJNNyrtGJ7NXlzLql+ZRnFh0POaJVqBtVCF5W
4ozo/fTduL0sb8bBaDyyCQy8I1Y3vkckjFp0FNHINCrVUQFgIUJIa3QheEZRdNTw
lCZvoPzjzy2+hdAPnS7VY0dbK4XAxN7xt0ElouAVXl3Ca3N2i+Jonlb3V4CmDWM+
Khyr9qZpNbn+If+24Ifp8r0TJXr4XGZn5jLubOpyYXRrDtxJjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIeTclJJ8CO9MONiPSyVRGtZ+1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZTcyYWY4NDAtM2E0MC0z
NDc0LTk4YmMtNzZiNjhhMzRlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANeT3S8xOuaWdnHh8noERADlVCip9p0jzf1ipIJx0J1L7wxYKbLPMaiE
StY8C4B7QVwlFa1+2fwhyUggq1/k0/vSPQLjrBwSNzO3KuLKKROrbplyd3zStv+u
p18neWQ6/8gnQ35XnV3Ya7lsdheKJLnpU13wIHXEyRWq2elyXuhUz31ndqOyqVwv
k7yHyPK4xI+W+pvYR+b6zr3SxnZH4XTUlmuX+mM4LVLHW5llsfzIfwqi0ApbNoBy
afO+DblE2yJq11M6/yLTe1vG2aCDUDbAxY83i08hpxjiP2aDaG4iDYg4LR16L2R7
s2uIxKBWjo3nA67QW/rW7oa3tZrrAKs=
-----END CERTIFICATE-----
Generated at Mon May 12 20:28:21 2025 by rpki-client