Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa
File: d567916b-284d-37ff-bd27-7bb372493011.roa (raw, json)
Hash identifier: URwO7OJnjy1fniOq9BgTZS+gYQyd4TGDDdIB7DLrRGI=
Subject key identifier: 32:6C:C4:4C:4D:C1:9F:64:A4:A4:AB:C5:C9:F4:B6:72:57:AD:45:95
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858490CB16C597582DC0203ABD1C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 46623
IP address blocks: 96.2.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6c:59:75:82:dc:02:03:ab:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=1f88792d-09ac-4278-a18d-31d8c171a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:a2:2a:bf:d5:65:c9:b1:eb:cb:81:e5:5c:
cd:ef:b6:36:99:a0:6a:a9:14:6c:d1:95:7d:aa:9c:
8b:d8:ac:65:83:4b:09:bf:9b:59:10:e1:72:40:9d:
84:ca:bb:4b:43:d1:7b:31:86:6a:5f:e1:2e:d3:45:
2d:68:a6:b8:ab:45:01:2d:b7:95:9d:03:89:6b:ed:
ac:75:0c:99:dc:6f:43:c4:bd:7f:39:e4:8d:f2:bc:
5b:8c:96:8b:de:e6:c3:78:af:67:e5:77:4f:44:ef:
92:e5:94:bc:1f:98:af:c7:63:bc:c7:f3:e5:62:41:
51:27:72:f4:5a:dc:7f:b2:e7:20:f5:48:26:3f:db:
97:72:53:fa:b0:d2:bb:3f:ce:fb:7d:9f:39:f3:ef:
80:f1:2e:f1:af:8d:81:93:16:26:69:6e:5b:1a:aa:
29:01:82:24:8e:c5:9e:c5:99:03:9b:30:f1:42:85:
b0:26:05:2e:44:7a:f1:5f:4f:13:d0:e2:1d:eb:95:
be:63:39:7d:30:28:4f:d3:e4:ff:c1:43:ab:43:6c:
20:a2:59:d3:b8:a9:2e:f2:76:03:34:91:b8:24:fe:
cf:d5:65:76:6b:27:0e:70:79:e9:e4:88:b7:c3:ef:
35:de:a6:de:ea:70:23:da:d3:e4:e6:81:05:18:0a:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:C4:4C:4D:C1:9F:64:A4:A4:AB:C5:C9:F4:B6:72:57:AD:45:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
96.2.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c4:6a:af:6f:26:44:ab:68:9c:2d:3a:dd:b9:67:80:9e:a3:
73:27:35:ef:06:46:5a:07:97:b4:f9:8a:b8:f1:1e:17:5d:6a:
26:5e:9d:9a:53:85:59:a7:6a:6c:7b:d3:ee:7c:8e:85:e2:f6:
77:a0:44:cd:eb:e5:66:6d:b6:99:2c:47:5b:b4:f0:41:7f:ac:
81:88:2e:93:19:3c:55:a5:ff:db:78:bd:f9:78:ed:09:81:05:
a1:55:2a:e3:e4:eb:3c:c5:96:19:3f:81:77:13:d0:a0:a4:50:
c0:ae:71:8d:63:b4:b1:6b:f8:c5:f8:85:a1:6c:99:ca:2b:da:
33:f3:86:17:77:9f:fe:59:90:32:cd:07:bb:e1:d7:bb:f7:e8:
31:11:fd:df:63:d0:76:91:bd:f8:ee:e4:95:4b:dc:c4:2d:aa:
31:a2:03:43:dc:a4:f7:a7:ac:2b:7d:99:eb:6a:1f:3d:e7:4d:
e7:5f:a2:00:d9:a8:ed:81:5e:6b:39:e3:42:f3:c5:4a:fc:1d:
c0:26:5c:70:f4:50:7c:d3:db:df:3d:11:1f:d2:dd:a7:57:2c:
f7:2c:74:ed:cd:bf:36:87:2a:43:d5:73:24:2f:54:fd:12:a2:
01:f8:68:38:9b:7a:5d:37:f8:22:1c:02:b4:8b:a9:8b:f9:6d:
e6:ac:39:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWxZdYLcAgOr0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MWY4ODc5MmQtMDlhYy00Mjc4LWExOGQtMzFkOGMxNzFhMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hOiKr/VZcmx68uB5VzN77Y2maBqqRRs0ZV9
qpyL2Kxlg0sJv5tZEOFyQJ2EyrtLQ9F7MYZqX+Eu00UtaKa4q0UBLbeVnQOJa+2s
dQyZ3G9DxL1/OeSN8rxbjJaL3ubDeK9n5XdPRO+S5ZS8H5ivx2O8x/PlYkFRJ3L0
Wtx/sucg9UgmP9uXclP6sNK7P877fZ858++A8S7xr42BkxYmaW5bGqopAYIkjsWe
xZkDmzDxQoWwJgUuRHrxX08T0OId65W+Yzl9MChP0+T/wUOrQ2wgolnTuKku8nYD
NJG4JP7P1WV2aycOcHnp5Ii3w+813qbe6nAj2tPk5oEFGAoXbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJsxExNwZ9kpKSrxcn0tnJXrUWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDU2NzkxNmItMjg0ZC0z
N2ZmLWJkMjctN2JiMzcyNDkzMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAL6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3Eaq9vJkSraJwtOt25Z4Ceo3MnNe8GRloHl7T5irjxHhddaiZenZpT
hVmnamx70+58joXi9negRM3r5WZttpksR1u08EF/rIGILpMZPFWl/9t4vfl47QmB
BaFVKuPk6zzFlhk/gXcT0KCkUMCucY1jtLFr+MX4haFsmcor2jPzhhd3n/5ZkDLN
B7vh17v36DER/d9j0HaRvfju5JVL3MQtqjGiA0PcpPenrCt9metqHz3nTedfogDZ
qO2BXms540LzxUr8HcAmXHD0UHzT2989ER/S3adXLPcsdO3NvzaHKkPVcyQvVP0S
ogH4aDibel03+CIcArSLqYv5beasOWo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:09 2025 by rpki-client