Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa
File: 25199343-1161-33f9-b82e-3f54d559b4c4.roa (raw, json)
Hash identifier: wSbfA3qsEP46L85kU9lu0FCTVCGD6eHYcQ/4Q2vnbls=
Subject key identifier: 69:5D:29:E3:EE:4A:71:3D:E3:0B:A2:C4:E8:E8:E7:85:7B:5B:F0:7C
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A176B4392093E763B710EAC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa
Signing time: Wed 22 Jan 2025 16:11:12 +0000
ROA not before: Wed 22 Jan 2025 16:11:12 +0000
ROA not after: Tue 22 Apr 2025 15:11:12 +0000
asID: 22652
IP address blocks: 207.253.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:76:b4:39:20:93:e7:63:b7:10:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 16:11:12 2025 GMT
Not After : Apr 22 15:11:12 2025 GMT
Subject: CN=957f8733-a393-42aa-b731-2f01256bd3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:30:f3:b1:a4:9e:ce:c4:ca:a1:86:af:4f:
da:6a:39:ae:6a:c2:eb:f7:52:22:79:1b:a2:cb:2f:
60:36:30:ed:9a:2a:dc:b3:7a:5b:5a:c5:d0:43:f6:
79:50:a6:8c:c5:f7:5c:c7:01:5a:c5:b6:31:08:e6:
00:42:f3:5e:d8:c5:90:9c:25:26:52:87:0f:08:4e:
35:d9:3e:f4:85:d1:69:b5:ee:40:a8:d4:4f:c7:50:
65:d9:6f:bc:5d:c2:20:1b:00:a6:36:77:40:73:7b:
ff:6f:6c:4f:3e:27:9e:d1:9f:80:39:af:63:5c:29:
c7:6b:a7:2c:3d:dd:af:f2:fa:68:9c:6e:92:2a:5a:
27:fe:a1:f3:a6:2c:3b:6b:1f:3a:a5:ae:ba:6f:fc:
9c:fe:b1:d2:7f:21:ed:21:00:e5:bf:93:bd:aa:ea:
46:3f:fe:e3:ae:2f:e8:3d:f6:d5:6a:85:62:a6:de:
aa:d5:a3:2b:1b:8a:d8:8f:de:63:8c:f0:de:e7:f7:
20:b2:33:9a:3f:c1:6b:d7:06:ad:a2:4a:d5:b1:77:
79:42:c7:53:67:50:f6:60:b6:8d:01:7b:83:f7:0b:
66:54:ed:0c:67:4c:9f:13:d7:9b:4d:f9:0d:aa:e6:
d8:59:cd:9c:37:65:b5:3d:41:78:ad:7e:41:87:9c:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:29:E3:EE:4A:71:3D:E3:0B:A2:C4:E8:E8:E7:85:7B:5B:F0:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:42:98:2b:34:01:b4:7b:f3:a7:20:6c:56:79:a6:fe:30:03:
46:38:89:f9:0c:00:a7:67:a3:42:75:31:bf:f3:91:59:71:79:
1e:91:ae:00:bb:2e:47:8d:79:ab:e9:a8:d0:7c:a1:79:d5:36:
76:9a:06:40:fc:92:cb:fc:20:db:b0:7f:bb:f3:28:09:34:4b:
15:72:6f:55:e1:d3:88:54:f7:03:a9:05:9c:71:16:a2:67:0d:
71:f8:c0:f1:be:32:ac:a0:c5:97:a4:b9:28:94:1a:54:45:d1:
a6:f0:fc:0c:63:0f:11:0b:db:f4:51:a8:c3:07:f6:30:80:e5:
0d:e9:e3:f7:18:16:70:22:9d:3b:fc:16:0e:ab:a4:91:be:f0:
b1:25:71:a0:3c:ee:9c:40:22:88:ae:05:30:9d:20:a9:df:93:
a0:cc:e5:a2:68:5a:c6:00:9c:ba:db:cd:9d:fb:7b:b7:ca:ff:
a5:76:d3:41:53:4e:1c:13:48:1f:b4:d1:06:47:fb:37:fd:67:
82:52:1e:84:17:ef:11:8f:de:5e:3a:39:b4:bd:ba:66:ba:fe:
46:31:2e:8a:f9:30:18:8f:47:1b:23:d6:7e:de:86:8d:7d:e6:
19:d6:cf:86:5b:b5:8c:63:af:b0:b0:be:67:a9:da:b9:5d:2a:
13:37:77:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihdrQ5IJPnY7cQ6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDEyMjE2MTExMloXDTI1MDQyMjE1MTExMlowLzEtMCsGA1UEAxMk
OTU3Zjg3MzMtYTM5My00MmFhLWI3MzEtMmYwMTI1NmJkM2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Ew87Gkns7EyqGGr0/aajmuasLr91IieRui
yy9gNjDtmircs3pbWsXQQ/Z5UKaMxfdcxwFaxbYxCOYAQvNe2MWQnCUmUocPCE41
2T70hdFpte5AqNRPx1Bl2W+8XcIgGwCmNndAc3v/b2xPPiee0Z+AOa9jXCnHa6cs
Pd2v8vponG6SKlon/qHzpiw7ax86pa66b/yc/rHSfyHtIQDlv5O9qupGP/7jri/o
PfbVaoVipt6q1aMrG4rYj95jjPDe5/cgsjOaP8Fr1watokrVsXd5QsdTZ1D2YLaN
AXuD9wtmVO0MZ0yfE9ebTfkNqubYWc2cN2W1PUF4rX5Bh5xPrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGldKePuSnE94wuixOjo54V7W/B8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMjUxOTkzNDMtMTE2MS0z
M2Y5LWI4MmUtM2Y1NGQ1NTliNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpCmCs0AbR786cgbFZ5pv4wA0Y4ifkMAKdno0J1Mb/zkVlxeR6RrgC7
LkeNeavpqNB8oXnVNnaaBkD8ksv8INuwf7vzKAk0SxVyb1Xh04hU9wOpBZxxFqJn
DXH4wPG+MqygxZekuSiUGlRF0abw/AxjDxEL2/RRqMMH9jCA5Q3p4/cYFnAinTv8
Fg6rpJG+8LElcaA87pxAIoiuBTCdIKnfk6DM5aJoWsYAnLrbzZ37e7fK/6V200FT
ThwTSB+00QZH+zf9Z4JSHoQX7xGP3l46ObS9uma6/kYxLor5MBiPRxsj1n7eho19
5hnWz4ZbtYxjr7Cwvmep2rldKhM3d4A=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:01 2025 by rpki-client