Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/041690a8-f923-358c-bcd8-cde7863ee0da.roa
File: 041690a8-f923-358c-bcd8-cde7863ee0da.roa (raw, json)
Hash identifier: Zm7ZN08BBLL0mnyo2q0XuBBNVVU2Xk4vkJfmNwIZ0Dg=
Subject key identifier: 5F:C3:DA:FE:19:6B:D9:E7:A8:3F:86:B9:BA:56:70:CE:D7:D6:58:5C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C580FB6CAA1A16BA01164F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/041690a8-f923-358c-bcd8-cde7863ee0da.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 40306
IP address blocks: 75.107.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:fb:6c:aa:1a:16:ba:01:16:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=8c0907b3-b194-4699-b793-ae97e998b939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:b8:23:ba:b9:61:4d:df:90:99:5f:c2:33:
4e:98:73:bb:e9:73:80:36:ad:9b:66:d8:9b:98:19:
9f:71:ef:aa:c4:bb:ae:aa:95:3c:a2:6a:07:aa:c8:
c8:30:ea:04:ef:18:18:e4:6a:bc:20:c4:1a:e7:94:
ac:ed:bf:06:a1:7e:8d:d9:df:b6:3c:05:7b:95:ec:
61:75:05:fa:2f:54:f2:e8:aa:b7:ed:0f:96:98:38:
87:4b:40:8c:94:2d:22:a6:b6:dd:6b:78:79:1c:83:
4d:65:4d:bf:5d:79:fd:23:cc:67:cd:8e:83:b4:42:
57:f4:35:8a:30:c2:82:37:12:39:97:36:b8:ac:e1:
6a:4b:96:7c:bb:aa:b6:8f:d2:da:00:bb:81:65:ba:
4e:89:05:83:e9:8f:7e:31:f6:e6:f4:0f:ab:28:51:
c0:b3:f7:d3:38:34:5e:e9:ca:0b:fe:f4:a9:89:3e:
ec:fb:d2:74:58:1e:6c:9f:b1:00:ae:e5:a6:aa:e6:
e0:4a:df:2e:97:bf:b8:34:73:a9:a5:89:71:ec:63:
e9:39:f1:89:e4:76:2c:06:1f:d2:6b:09:22:36:3d:
84:eb:17:2c:3d:0e:93:e0:56:85:83:39:0f:29:cb:
5d:f8:5a:7a:63:20:c5:22:ba:81:7d:e8:c2:fa:ca:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:DA:FE:19:6B:D9:E7:A8:3F:86:B9:BA:56:70:CE:D7:D6:58:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/041690a8-f923-358c-bcd8-cde7863ee0da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.107.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:86:2f:c5:21:cf:be:83:43:c2:fc:2c:fc:2b:0e:05:d2:18:
49:c9:14:bb:c6:5e:9d:bb:e0:77:2f:9c:d7:63:55:4f:96:5d:
24:61:f7:7b:7d:20:28:65:64:54:c8:82:f2:3a:a5:8f:0d:e7:
70:5b:6e:57:c7:2d:0a:37:45:5d:52:bf:b3:82:f8:3d:12:43:
91:0d:33:f7:e6:a9:6c:2f:d2:37:03:76:37:a2:39:7f:c4:e8:
7c:72:8f:d9:1c:f2:4a:4c:95:9e:b8:0c:46:82:52:b9:bb:e8:
bb:44:6f:82:e2:07:a5:2d:c4:a3:34:19:2a:8a:ce:64:56:55:
b7:a5:60:13:b5:11:cb:ba:c1:64:06:40:00:34:37:d4:3a:69:
af:0c:e7:6a:0d:03:05:18:57:51:f8:f8:20:1f:1c:0b:d7:86:
10:6a:2c:0f:96:af:e9:54:65:c6:3e:f0:79:3f:e0:41:24:4d:
8a:fc:9e:da:9e:79:e3:30:98:db:14:94:82:79:f5:8e:6e:2f:
0d:cb:df:6f:72:4d:5a:60:bb:e5:a3:26:22:43:a0:5b:cf:a8:
da:bc:0f:65:de:44:c2:f9:6f:b6:4f:e3:88:51:7d:98:dd:c3:
55:89:14:89:3f:e1:fb:2c:8a:a9:fb:25:7f:c9:f4:e5:e6:f8:
53:f4:a2:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPtsqhoWugEWT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGMwOTA3YjMtYjE5NC00Njk5LWI3OTMtYWU5N2U5OThiOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf24I7q5YU3fkJlfwjNOmHO76XOANq2bZtib
mBmfce+qxLuuqpU8omoHqsjIMOoE7xgY5Gq8IMQa55Ss7b8GoX6N2d+2PAV7lexh
dQX6L1Ty6Kq37Q+WmDiHS0CMlC0iprbda3h5HINNZU2/XXn9I8xnzY6DtEJX9DWK
MMKCNxI5lza4rOFqS5Z8u6q2j9LaALuBZbpOiQWD6Y9+Mfbm9A+rKFHAs/fTODRe
6coL/vSpiT7s+9J0WB5sn7EAruWmqubgSt8ul7+4NHOppYlx7GPpOfGJ5HYsBh/S
awkiNj2E6xcsPQ6T4FaFgzkPKctd+Fp6YyDFIrqBfejC+so2JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/D2v4Za9nnqD+GubpWcM7X1lhcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQxNjkwYTgtZjkyMy0z
NThjLWJjZDgtY2RlNzg2M2VlMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2GL8Uhz76DQ8L8LPwrDgXSGEnJFLvGXp274HcvnNdjVU+WXSRh93t9
IChlZFTIgvI6pY8N53BbblfHLQo3RV1Sv7OC+D0SQ5ENM/fmqWwv0jcDdjeiOX/E
6Hxyj9kc8kpMlZ64DEaCUrm76LtEb4LiB6UtxKM0GSqKzmRWVbelYBO1Ecu6wWQG
QAA0N9Q6aa8M52oNAwUYV1H4+CAfHAvXhhBqLA+Wr+lUZcY+8Hk/4EEkTYr8ntqe
eeMwmNsUlIJ59Y5uLw3L329yTVpgu+WjJiJDoFvPqNq8D2XeRML5b7ZP44hRfZjd
w1WJFIk/4fssiqn7JX/J9OXm+FP0ouE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:22 2025 by rpki-client