Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e7ff48-9cd9-372b-83af-d7ae40f775b5.roa
File: 70e7ff48-9cd9-372b-83af-d7ae40f775b5.roa (raw, json)
Hash identifier: 7q7wirWnvQrORSwm+Dy/dNd31i2b/gZASyuN/r/zBa4=
Subject key identifier: 49:CA:04:73:C4:EE:24:73:E0:3E:32:2D:51:C9:8F:00:72:26:77:E1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99648DC5D028D8523B43500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e7ff48-9cd9-372b-83af-d7ae40f775b5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397215
IP address blocks: 199.7.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:48:dc:5d:02:8d:85:23:b4:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c07567f6-93f5-40f2-ab5d-e9729ee6d5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:06:c7:2e:ad:17:c6:32:48:13:30:10:21:
ae:3d:e6:a4:ee:51:34:3b:09:16:dd:ef:4e:a5:8d:
3a:76:4c:c1:ee:4a:94:3a:b3:a0:8a:8c:d9:d1:6b:
17:7a:45:16:21:e4:53:33:e9:46:05:79:94:dd:18:
e0:ea:6b:a0:6d:64:e8:72:1c:4d:44:72:f1:71:d7:
71:bd:a2:fb:5f:f7:82:13:5d:fa:6a:02:0a:52:c0:
b1:53:9e:bc:d0:19:cf:97:20:1c:88:84:62:d4:77:
a6:15:43:86:ac:d9:14:e1:78:0a:7d:cb:d7:69:ff:
99:07:06:dd:9a:42:a3:f4:4f:a7:30:ef:16:a5:cc:
40:ad:cc:2d:94:2d:1d:3b:df:cb:5b:2b:cb:0e:f1:
08:3c:46:83:da:af:17:93:3d:a8:a0:c5:35:5c:02:
87:1a:d2:0a:f1:1f:71:44:24:5e:fc:1d:8f:24:d9:
c4:9c:c3:1c:03:00:3f:b9:f4:72:ba:cb:b3:4b:e7:
53:90:8f:a6:6a:f5:c2:a0:53:85:e7:b9:29:c4:ab:
21:87:d4:46:1f:e1:e0:b1:b1:7d:2b:a8:a5:3a:5a:
61:91:aa:4a:cc:8e:4a:a3:9b:87:75:c4:9d:6c:db:
49:ff:84:a8:fa:5c:a0:f8:84:32:1d:a3:8c:a4:d9:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:04:73:C4:EE:24:73:E0:3E:32:2D:51:C9:8F:00:72:26:77:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e7ff48-9cd9-372b-83af-d7ae40f775b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:06:18:5f:e5:a5:38:e6:52:af:1b:68:d8:f3:85:4a:cc:68:
66:b0:d6:ca:09:04:81:6b:87:6d:ed:4b:76:4a:bb:5f:e0:fd:
49:f3:7e:65:ab:b9:69:c2:af:0f:31:82:a8:d8:72:f8:80:ee:
03:5c:3a:a9:9a:d5:bd:2f:50:00:35:0c:47:78:b8:d4:81:6b:
bd:13:28:46:05:24:bc:34:ec:0d:df:81:59:ca:37:21:d0:1a:
fa:7c:0c:b2:f0:5a:30:ac:f8:e1:7f:aa:98:4f:fc:26:45:ba:
0b:67:f7:66:78:ad:78:e5:9d:6c:a6:07:73:16:54:06:41:46:
5f:00:6e:10:14:96:8e:24:9b:ee:23:9d:42:17:89:a3:5d:1a:
28:e5:fd:7f:a8:bd:1b:f9:66:57:42:de:ea:81:85:49:3c:ed:
5f:a4:f3:2d:90:99:c1:4c:1d:ae:7d:25:a4:2f:ca:a9:0b:48:
b6:3c:cb:3f:5b:c0:f2:d6:db:b1:27:26:d8:87:23:c2:78:4c:
d4:b6:de:d1:d3:77:d8:a1:5b:66:49:de:f7:3b:28:26:43:e8:
e3:b3:2c:32:05:de:bb:d2:83:e9:9b:d8:8a:c3:e1:4d:e0:03:
f8:31:92:ca:08:5f:c5:69:85:80:b2:f1:51:92:3c:a4:b4:ac:
6a:5f:47:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkjcXQKNhSO0NQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzA3NTY3ZjYtOTNmNS00MGYyLWFiNWQtZTk3MjllZTZkNWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj44Gxy6tF8YySBMwECGuPeak7lE0OwkW3e9O
pY06dkzB7kqUOrOgiozZ0WsXekUWIeRTM+lGBXmU3Rjg6mugbWTochxNRHLxcddx
vaL7X/eCE136agIKUsCxU5680BnPlyAciIRi1HemFUOGrNkU4XgKfcvXaf+ZBwbd
mkKj9E+nMO8WpcxArcwtlC0dO9/LWyvLDvEIPEaD2q8Xkz2ooMU1XAKHGtIK8R9x
RCRe/B2PJNnEnMMcAwA/ufRyusuzS+dTkI+mavXCoFOF57kpxKshh9RGH+HgsbF9
K6ilOlphkapKzI5Ko5uHdcSdbNtJ/4So+lyg+IQyHaOMpNklwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnKBHPE7iRz4D4yLVHJjwByJnfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzBlN2ZmNDgtOWNkOS0z
NzJiLTgzYWYtZDdhZTQwZjc3NWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMGGF/lpTjmUq8baNjzhUrMaGaw1soJBIFrh23tS3ZKu1/g/UnzfmWr
uWnCrw8xgqjYcviA7gNcOqma1b0vUAA1DEd4uNSBa70TKEYFJLw07A3fgVnKNyHQ
Gvp8DLLwWjCs+OF/qphP/CZFugtn92Z4rXjlnWymB3MWVAZBRl8AbhAUlo4km+4j
nUIXiaNdGijl/X+ovRv5ZldC3uqBhUk87V+k8y2QmcFMHa59JaQvyqkLSLY8yz9b
wPLW27EnJtiHI8J4TNS23tHTd9ihW2ZJ3vc7KCZD6OOzLDIF3rvSg+mb2IrD4U3g
A/gxksoIX8VphYCy8VGSPKS0rGpfR5M=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:53 2025 by rpki-client