Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5077676-8ef1-38d3-a3a6-3bdecdd35746.roa
File: b5077676-8ef1-38d3-a3a6-3bdecdd35746.roa (raw, json)
Hash identifier: AEEd0W6NkutWSBha2xGAZutToGeRIsrvtZfQ6XSC4xo=
Subject key identifier: 54:F9:9C:26:13:11:69:B1:12:9B:E8:7B:DC:72:BA:6B:B2:12:D0:7B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6CD97CBB43B9ED4C4AB58
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5077676-8ef1-38d3-a3a6-3bdecdd35746.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 207.34.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:cd:97:cb:b4:3b:9e:d4:c4:ab:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=0377b5e8-53ba-4b33-b0a0-73539cc38c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:f6:07:fa:0f:b2:10:b1:cf:31:c9:75:c9:
eb:61:50:a7:fa:ea:d2:d3:ca:73:c3:da:07:55:2b:
de:a9:89:6c:54:56:4e:61:1f:bc:3d:b4:5f:2e:0c:
7f:cf:ab:ce:87:91:5c:6a:91:b1:99:ce:8f:71:75:
64:a7:a2:fc:34:53:3b:60:1b:78:e4:54:24:a4:58:
2c:fa:f4:f3:bc:ad:34:9f:e6:40:34:00:41:38:94:
01:a5:a7:76:2a:b7:8a:25:a6:50:ea:af:8e:eb:e1:
68:c4:1b:1a:8b:d7:ce:5d:63:f3:6f:26:b2:64:9f:
ca:d5:f5:fd:6a:a9:a4:fe:f3:cc:27:aa:43:24:00:
15:5d:0b:c5:db:92:ad:b0:61:6e:c4:db:7d:34:15:
98:01:87:39:44:28:5d:61:ac:49:61:80:fb:51:1a:
53:e9:9a:49:73:28:73:1e:01:0f:6f:b8:d4:83:6c:
6c:77:a7:dd:00:8b:43:59:32:3d:80:4c:ae:49:01:
21:b1:c9:32:04:16:2b:08:b9:27:38:0b:5f:c4:6d:
37:69:87:2a:3a:a8:89:8b:e0:fc:fe:0a:c9:4f:22:
02:da:cd:94:ab:7e:63:cc:ee:f7:2e:b2:23:f5:04:
b7:aa:e7:1f:54:52:a6:89:88:c9:78:40:49:5d:3a:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:9C:26:13:11:69:B1:12:9B:E8:7B:DC:72:BA:6B:B2:12:D0:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5077676-8ef1-38d3-a3a6-3bdecdd35746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:01:9e:5c:8e:1e:34:bd:2d:1e:ef:a3:4b:fd:2a:89:1e:3a:
23:2a:ba:9a:14:a5:02:8b:b8:e4:2c:28:a1:27:13:ba:ce:78:
2f:f7:53:bf:72:21:46:31:0b:2c:3c:af:50:15:51:44:8d:9a:
13:39:41:81:a9:9e:6d:b4:30:41:89:b9:a5:c2:ac:d4:43:2e:
3c:03:a8:1a:7d:09:91:b8:76:ea:ce:5c:ec:61:2c:ca:d3:96:
46:7f:bb:87:21:80:52:3f:34:5d:2d:3c:c1:07:c5:62:fd:e4:
3f:66:b4:aa:0f:ab:1c:92:c5:c7:cb:e6:ea:75:be:62:61:f8:
0e:7e:b8:a8:1e:03:d8:f6:47:0b:25:55:27:23:4c:7c:36:d9:
a7:04:d4:90:66:95:34:df:0d:68:b0:57:b6:ed:f7:22:f8:23:
08:88:b6:bf:d8:63:b1:59:68:00:ee:de:63:06:c9:51:c8:19:
67:7e:99:ea:98:23:b7:91:10:5c:99:8e:e1:f9:50:a8:cc:ac:
c1:6c:38:f2:37:0c:51:03:35:e2:f1:c8:37:73:0f:d4:77:5b:
82:1f:d6:02:9f:d2:3a:b8:d7:a0:02:48:14:6d:6b:5b:d8:34:
50:c6:fe:23:90:89:fd:d5:e1:c3:cf:f2:d5:c3:f4:f0:44:a0:
29:37:f3:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmts2Xy7Q7ntTEq1gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MDM3N2I1ZTgtNTNiYS00YjMzLWIwYTAtNzM1MzljYzM4YzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie72B/oPshCxzzHJdcnrYVCn+urS08pzw9oH
VSveqYlsVFZOYR+8PbRfLgx/z6vOh5FcapGxmc6PcXVkp6L8NFM7YBt45FQkpFgs
+vTzvK00n+ZANABBOJQBpad2KreKJaZQ6q+O6+FoxBsai9fOXWPzbyayZJ/K1fX9
aqmk/vPMJ6pDJAAVXQvF25KtsGFuxNt9NBWYAYc5RChdYaxJYYD7URpT6ZpJcyhz
HgEPb7jUg2xsd6fdAItDWTI9gEyuSQEhsckyBBYrCLknOAtfxG03aYcqOqiJi+D8
/grJTyIC2s2Uq35jzO73LrIj9QS3qucfVFKmiYjJeEBJXTqHfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFT5nCYTEWmxEpvoe9xyumuyEtB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjUwNzc2NzYtOGVmMS0z
OGQzLWEzYTYtM2JkZWNkZDM1NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8BnlyOHjS9LR7vo0v9KokeOiMqupoUpQKLuOQsKKEnE7rOeC/3U79y
IUYxCyw8r1AVUUSNmhM5QYGpnm20MEGJuaXCrNRDLjwDqBp9CZG4durOXOxhLMrT
lkZ/u4chgFI/NF0tPMEHxWL95D9mtKoPqxySxcfL5up1vmJh+A5+uKgeA9j2Rwsl
VScjTHw22acE1JBmlTTfDWiwV7bt9yL4IwiItr/YY7FZaADu3mMGyVHIGWd+meqY
I7eREFyZjuH5UKjMrMFsOPI3DFEDNeLxyDdzD9R3W4If1gKf0jq416ACSBRta1vY
NFDG/iOQif3V4cPP8tXD9PBEoCk38wU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:01 2025 by rpki-client