Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a57c980e-c4e4-3673-a9a6-faa0a6159f66.roa
File: a57c980e-c4e4-3673-a9a6-faa0a6159f66.roa (raw, json)
Hash identifier: IywxxOXL/wzrW1NNYpAT1nMi0W6yN+BEvkH21JAFYiU=
Subject key identifier: 60:41:6B:05:E9:80:B3:6F:71:83:3B:DF:2B:7D:3F:01:89:40:47:85
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B765341A526829D249D700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a57c980e-c4e4-3673-a9a6-faa0a6159f66.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 207.236.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:65:34:1a:52:68:29:d2:49:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4dbaaf6d-e9e6-4536-bf0b-0427a30e114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:21:6d:93:e6:86:1f:92:9b:08:5c:d2:be:
4b:fd:56:3f:b8:1c:82:a7:67:96:c6:af:ac:ff:4a:
1d:b6:2f:ea:fb:75:20:16:af:73:1f:4d:27:79:3c:
ee:6e:5b:94:1a:b9:d0:02:f8:68:93:aa:86:63:0d:
6c:65:72:d9:41:fb:8e:64:d4:22:09:34:da:65:8b:
95:23:5e:5d:e5:85:34:29:b6:54:a1:a9:ce:0a:9c:
4d:ab:df:e6:4d:f7:9d:f3:8b:2e:23:dd:a5:ec:35:
ab:ad:eb:99:af:c0:bc:77:23:f0:00:7f:8c:0f:15:
fb:5c:fb:20:c8:25:7e:fb:7e:ca:9e:0d:4d:22:71:
ef:af:2e:b3:87:8c:34:0d:db:2b:d3:2d:40:6b:ea:
82:bd:e9:58:ec:fc:c9:1d:e8:47:f3:6b:e0:c9:e4:
b7:5b:81:2f:ec:6f:50:27:bd:52:13:50:7c:bf:bc:
d2:c6:6a:72:5f:41:a1:e7:08:14:46:08:b8:eb:fa:
94:71:be:0f:7b:9c:ce:bf:bd:67:be:99:58:4f:f4:
78:6a:7e:7f:c1:69:17:17:ec:be:7b:1e:78:46:a7:
4b:e4:63:fd:b6:4d:b8:cc:f7:62:96:26:1a:4c:c7:
40:16:8c:00:d4:f1:ba:0b:13:6a:7e:1c:ae:92:35:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:6B:05:E9:80:B3:6F:71:83:3B:DF:2B:7D:3F:01:89:40:47:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a57c980e-c4e4-3673-a9a6-faa0a6159f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:06:15:1c:62:a2:ce:60:f4:0a:8e:6f:4a:59:cf:98:d8:a1:
28:ad:82:51:34:bd:e8:15:d2:0c:14:55:92:37:91:02:f3:c3:
be:e3:60:d1:dc:c2:54:24:ce:4e:6d:3c:8a:34:2f:cf:97:68:
f4:06:34:b9:8d:c8:84:64:bf:63:f0:10:40:40:b0:8b:eb:0d:
ec:93:dc:f0:06:84:72:47:eb:43:6d:82:21:2c:a9:b2:6d:7b:
76:0c:9f:50:ec:11:a6:9c:29:32:18:90:8c:87:fa:94:7c:7e:
e4:11:41:ad:e6:3b:59:ab:17:b5:09:ba:3d:87:ba:d4:fb:ad:
1c:09:52:ba:aa:f9:ed:e2:30:a4:a1:ee:38:be:46:00:8f:60:
c4:31:e1:af:4f:d3:c6:15:93:63:bc:81:7f:da:fa:c3:c1:67:
b4:ff:14:a2:d1:e9:34:43:d5:e5:52:16:df:6e:ef:b0:27:28:
fa:05:fb:be:c8:3c:cc:c7:03:14:ae:d5:38:04:02:35:30:15:
f3:ea:43:e7:2e:27:cc:16:09:01:b5:99:c1:2a:66:0e:d0:5f:
4a:28:85:4e:9a:6c:21:5f:30:3f:c6:f3:77:59:09:e5:2d:0a:
fc:0b:f6:c0:56:1a:a0:3f:b7:3a:e6:67:c9:49:d4:fe:4c:9e:
32:84:31:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmt2U0GlJoKdJJ1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NGRiYWFmNmQtZTllNi00NTM2LWJmMGItMDQyN2EzMGUxMTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVAhbZPmhh+Smwhc0r5L/VY/uByCp2eWxq+s
/0odti/q+3UgFq9zH00neTzubluUGrnQAvhok6qGYw1sZXLZQfuOZNQiCTTaZYuV
I15d5YU0KbZUoanOCpxNq9/mTfed84suI92l7DWrreuZr8C8dyPwAH+MDxX7XPsg
yCV++37Kng1NInHvry6zh4w0Ddsr0y1Aa+qCvelY7PzJHehH82vgyeS3W4Ev7G9Q
J71SE1B8v7zSxmpyX0Gh5wgURgi46/qUcb4Pe5zOv71nvplYT/R4an5/wWkXF+y+
ex54RqdL5GP9tk24zPdiliYaTMdAFowA1PG6CxNqfhyukjXYeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBBawXpgLNvcYM73yt9PwGJQEeFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTU3Yzk4MGUtYzRlNC0z
NjczLWE5YTYtZmFhMGE2MTU5ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+ySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYGFRxios5g9AqOb0pZz5jYoSitglE0vegV0gwUVZI3kQLzw77jYNHc
wlQkzk5tPIo0L8+XaPQGNLmNyIRkv2PwEEBAsIvrDeyT3PAGhHJH60NtgiEsqbJt
e3YMn1DsEaacKTIYkIyH+pR8fuQRQa3mO1mrF7UJuj2HutT7rRwJUrqq+e3iMKSh
7ji+RgCPYMQx4a9P08YVk2O8gX/a+sPBZ7T/FKLR6TRD1eVSFt9u77AnKPoF+77I
PMzHAxSu1TgEAjUwFfPqQ+cuJ8wWCQG1mcEqZg7QX0oohU6abCFfMD/G83dZCeUt
CvwL9sBWGqA/tzrmZ8lJ1P5MnjKEMZs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:54 2025 by rpki-client