Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c08dd0-41e4-381f-bd83-55d3b6ec35c6.roa
File: 21c08dd0-41e4-381f-bd83-55d3b6ec35c6.roa (raw, json)
Hash identifier: VXnlZ4myPMtQjQAJDaUkeYLcIVFcF3bi6HTMn9wgbWE=
Subject key identifier: 69:94:FA:44:1B:E9:C4:E8:6C:F1:EF:DC:B2:0F:23:12:58:90:D6:E9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213446C3CD9E499E6C3BA800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c08dd0-41e4-381f-bd83-55d3b6ec35c6.roa
Signing time: Sun 09 Mar 2025 10:20:50 +0000
ROA not before: Sun 09 Mar 2025 10:20:50 +0000
ROA not after: Sat 07 Jun 2025 10:20:50 +0000
asID: 577
IP address blocks: 205.207.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:46:c3:cd:9e:49:9e:6c:3b:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:50 2025 GMT
Not After : Jun 7 10:20:50 2025 GMT
Subject: CN=eaaad1b2-3951-4398-a86c-c380d18d9ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:21:85:1d:a1:79:fa:82:3d:27:34:9b:1a:
6e:96:f1:6f:48:2b:f1:38:3f:45:32:79:5c:79:2b:
4c:53:a0:fc:90:3d:6a:a6:15:d5:9e:a9:d2:5a:11:
5e:5b:d8:d6:6a:35:d7:54:c9:20:d5:91:37:52:fe:
b1:79:5d:10:15:78:4e:b9:e1:d6:d6:c0:49:22:4d:
7c:42:6d:ed:fe:a5:2b:9e:ec:17:3f:af:c2:9b:f3:
c3:ae:db:e7:75:11:71:69:9c:c0:2a:c0:00:74:9a:
32:91:08:5c:e8:f5:0d:92:6d:7d:fb:e7:92:ff:17:
ea:dc:f9:95:80:f2:15:44:33:66:2f:aa:bd:c8:aa:
6f:35:cf:65:43:d7:19:25:9f:d2:f3:86:48:1a:38:
2f:5c:ab:37:50:41:49:99:29:6b:bc:00:90:f9:66:
0e:fb:ad:c9:80:e2:02:ef:c8:1c:17:d5:17:7a:c1:
a1:39:99:21:c5:91:3f:f4:e2:d1:15:89:f2:8e:cd:
95:85:6a:db:6d:85:1e:f3:ce:12:33:ec:cb:79:6e:
e4:f8:3b:8a:cd:7a:e8:b5:00:b5:f5:a6:56:09:93:
b0:c2:c4:84:f8:5e:7d:42:7e:57:4a:c4:c1:73:7d:
d3:23:f8:89:02:b0:80:72:1d:b2:c2:50:c0:cf:30:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:FA:44:1B:E9:C4:E8:6C:F1:EF:DC:B2:0F:23:12:58:90:D6:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c08dd0-41e4-381f-bd83-55d3b6ec35c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.207.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:96:dc:c3:41:f9:40:a4:49:b5:16:67:ea:68:5e:24:cd:e0:
a8:92:75:c0:da:dc:9e:a5:94:74:92:64:c0:4d:a1:25:c3:47:
c9:2c:b4:ee:af:ea:b5:a5:8e:f3:4e:a8:cf:6c:02:2e:57:d1:
6b:28:0e:e9:f3:4e:1b:f9:50:0a:f5:61:59:dd:8f:e3:ab:67:
ea:ac:46:cf:48:fe:8d:f1:1c:bf:16:72:ec:2f:5b:73:53:ce:
08:72:fd:18:e3:18:a7:6b:e7:19:a3:4f:c2:d3:d4:51:1e:aa:
8a:36:0c:1a:45:cb:a4:c9:7e:1f:52:ac:62:ce:92:1a:f6:5a:
b1:14:44:00:aa:70:b1:a1:bd:1c:8b:24:45:de:71:b1:df:fc:
c4:1e:a2:04:dd:d7:8a:99:29:82:6d:8b:55:4e:6d:60:a0:e5:
7f:d7:63:12:33:a4:44:b1:af:ca:b2:6f:98:a4:a1:0a:b2:9a:
0d:61:e0:52:4f:6b:12:28:cd:af:0f:0d:e5:00:9c:14:47:72:
e4:e9:93:25:5f:1d:df:ed:3d:7f:35:cd:61:ef:0c:fc:b0:90:
0c:78:3c:49:17:a4:17:66:48:40:5b:ac:c4:16:cb:ed:28:b3:
9c:70:68:4f:79:4e:c1:26:e5:27:63:c2:0f:e9:16:9f:d6:30:
00:9c:d8:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEbDzZ5Jnmw7qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA1MFoXDTI1MDYwNzEwMjA1MFowLzEtMCsGA1UEAxMk
ZWFhYWQxYjItMzk1MS00Mzk4LWE4NmMtYzM4MGQxOGQ5ZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0IhhR2hefqCPSc0mxpulvFvSCvxOD9FMnlc
eStMU6D8kD1qphXVnqnSWhFeW9jWajXXVMkg1ZE3Uv6xeV0QFXhOueHW1sBJIk18
Qm3t/qUrnuwXP6/Cm/PDrtvndRFxaZzAKsAAdJoykQhc6PUNkm19++eS/xfq3PmV
gPIVRDNmL6q9yKpvNc9lQ9cZJZ/S84ZIGjgvXKs3UEFJmSlrvACQ+WYO+63JgOIC
78gcF9UXesGhOZkhxZE/9OLRFYnyjs2VhWrbbYUe884SM+zLeW7k+DuKzXrotQC1
9aZWCZOwwsSE+F59Qn5XSsTBc33TI/iJArCAch2ywlDAzzBZnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmU+kQb6cTobPHv3LIPIxJYkNbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjFjMDhkZDAtNDFlNC0z
ODFmLWJkODMtNTVkM2I2ZWMzNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc/tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICW3MNB+UCkSbUWZ+poXiTN4KiSdcDa3J6llHSSZMBNoSXDR8kstO6v
6rWljvNOqM9sAi5X0WsoDunzThv5UAr1YVndj+OrZ+qsRs9I/o3xHL8WcuwvW3NT
zghy/RjjGKdr5xmjT8LT1FEeqoo2DBpFy6TJfh9SrGLOkhr2WrEURACqcLGhvRyL
JEXecbHf/MQeogTd14qZKYJti1VObWCg5X/XYxIzpESxr8qyb5ikoQqymg1h4FJP
axIoza8PDeUAnBRHcuTpkyVfHd/tPX81zWHvDPywkAx4PEkXpBdmSEBbrMQWy+0o
s5xwaE95TsEm5Sdjwg/pFp/WMACc2IM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:01 2025 by rpki-client