Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/34415dc3-692c-31ef-b052-ff38fceacd10.roa
File: 34415dc3-692c-31ef-b052-ff38fceacd10.roa (raw, json)
Hash identifier: gdQOI5YkcLhwUgJaORJ5JMSgK7rHVENhz/cY3qML+DE=
Subject key identifier: 1D:F0:55:CB:83:01:94:45:4A:B5:57:28:C8:20:F0:B8:64:A3:BB:D4
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A16A77DD152DF952147D2380
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/34415dc3-692c-31ef-b052-ff38fceacd10.roa
Signing time: Wed 22 Jan 2025 15:46:33 +0000
ROA not before: Wed 22 Jan 2025 15:46:33 +0000
ROA not after: Tue 22 Apr 2025 14:46:33 +0000
asID: 395075
IP address blocks: 207.253.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:6a:77:dd:15:2d:f9:52:14:7d:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:46:33 2025 GMT
Not After : Apr 22 14:46:33 2025 GMT
Subject: CN=97e495b9-1875-47ef-ae78-0ca63031f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:9d:3d:d3:8a:3f:12:1a:e0:22:04:0d:95:
e7:72:f8:bc:91:88:0d:da:31:79:5e:e6:69:6b:81:
e2:d1:fe:ad:af:34:95:06:97:73:c3:e3:b0:4b:5d:
36:db:69:71:8d:b2:db:6e:71:40:67:f6:7c:1f:74:
aa:7e:88:61:e3:83:28:a3:1a:e3:26:c3:e1:d4:13:
35:7e:88:be:46:35:04:59:9c:f9:cf:02:55:af:08:
ce:7b:4c:9c:70:2e:09:81:0a:e3:aa:8c:0a:02:29:
98:e9:2e:0d:ce:81:f8:af:d6:44:0a:fc:df:e6:43:
47:c0:00:52:03:94:43:43:ff:99:88:70:a2:4d:69:
38:34:1a:79:9a:1e:cc:c3:51:e5:47:fb:9b:64:ef:
85:b6:ac:fe:68:34:93:44:01:3c:72:6a:76:d7:23:
09:20:7b:d8:0c:cb:d1:b3:94:c9:2f:70:ad:a1:82:
47:c5:ef:bc:3a:3b:24:74:40:cc:d2:09:49:a4:33:
29:74:7e:81:d3:a9:6a:a5:8c:52:a9:78:9b:7c:ed:
38:9c:8b:3b:d7:3d:6d:6d:3c:a9:ae:89:9d:10:dd:
d9:76:e2:a2:33:bb:60:d1:a7:80:69:71:14:c0:98:
3e:52:d3:ae:19:c6:c2:5f:07:be:40:99:a6:17:33:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:55:CB:83:01:94:45:4A:B5:57:28:C8:20:F0:B8:64:A3:BB:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/34415dc3-692c-31ef-b052-ff38fceacd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:25:09:78:e5:28:0c:6b:94:76:dd:09:7a:c1:a0:57:f3:c7:
a7:db:4b:84:ec:ca:7d:c0:7f:ba:0c:ac:ee:23:be:cc:b6:41:
e4:74:fe:d2:49:d5:3f:18:b4:63:21:de:c3:ce:42:c7:41:24:
d7:77:07:77:72:aa:90:90:6a:13:63:2d:95:da:fd:d2:67:84:
0f:01:1b:44:60:fa:dd:8f:50:82:0e:88:23:98:e4:6e:27:1f:
3f:67:9a:0d:b0:cf:a6:64:9f:c2:ea:bd:dd:a0:ab:15:0c:b6:
c3:13:1e:2b:56:bb:cf:2b:99:89:8e:77:c1:fa:1d:59:fa:53:
28:17:98:ba:01:f2:50:50:c8:4a:29:15:17:ae:87:70:93:0a:
8b:ec:7a:29:3e:25:cc:ee:ad:ea:6a:b8:00:73:cb:b2:db:6e:
f3:96:b4:ed:21:4d:b9:d8:d6:d8:d8:5d:1f:39:9a:a7:64:62:
95:39:ef:a2:7c:00:e1:15:fa:fe:02:f4:36:f6:44:37:47:df:
c7:d9:c5:5a:23:55:50:3d:18:44:b6:11:a1:30:31:3f:09:ae:
98:dd:ed:99:08:2f:44:a2:a9:8d:38:c6:60:34:bf:52:68:ee:
94:4c:ea:51:8c:9c:ef:7e:0c:23:3c:33:49:aa:14:f4:2a:08:
06:4e:1f:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihanfdFS35UhR9I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDEyMjE1NDYzM1oXDTI1MDQyMjE0NDYzM1owLzEtMCsGA1UEAxMk
OTdlNDk1YjktMTg3NS00N2VmLWFlNzgtMGNhNjMwMzFmMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vidPdOKPxIa4CIEDZXncvi8kYgN2jF5XuZp
a4Hi0f6trzSVBpdzw+OwS10222lxjbLbbnFAZ/Z8H3Sqfohh44MooxrjJsPh1BM1
foi+RjUEWZz5zwJVrwjOe0yccC4JgQrjqowKAimY6S4NzoH4r9ZECvzf5kNHwABS
A5RDQ/+ZiHCiTWk4NBp5mh7Mw1HlR/ubZO+Ftqz+aDSTRAE8cmp21yMJIHvYDMvR
s5TJL3CtoYJHxe+8OjskdEDM0glJpDMpdH6B06lqpYxSqXibfO04nIs71z1tbTyp
romdEN3ZduKiM7tg0aeAaXEUwJg+UtOuGcbCXwe+QJmmFzOHXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3wVcuDAZRFSrVXKMgg8Lhko7vUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzQ0MTVkYzMtNjkyYy0z
MWVmLWIwNTItZmYzOGZjZWFjZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/2YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHklCXjlKAxrlHbdCXrBoFfzx6fbS4Tsyn3Af7oMrO4jvsy2QeR0/tJJ
1T8YtGMh3sPOQsdBJNd3B3dyqpCQahNjLZXa/dJnhA8BG0Rg+t2PUIIOiCOY5G4n
Hz9nmg2wz6Zkn8Lqvd2gqxUMtsMTHitWu88rmYmOd8H6HVn6UygXmLoB8lBQyEop
FReuh3CTCovseik+JczurepquABzy7LbbvOWtO0hTbnY1tjYXR85mqdkYpU576J8
AOEV+v4C9Db2RDdH38fZxVojVVA9GES2EaEwMT8Jrpjd7ZkIL0SiqY04xmA0v1Jo
7pRM6lGMnO9+DCM8M0mqFPQqCAZOH7E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:55 2025 by rpki-client