Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa
File: 35f29218-f963-3644-9a2b-4ab3af6f8f79.roa (raw, json)
Hash identifier: zqjO2OP4I+HQCz1VNpUvYIEuaKlFc34q5Gs4ACV5pYc=
Subject key identifier: 24:84:9C:33:1B:DC:E4:04:CC:60:70:C0:E6:CC:D9:22:4B:6C:14:53
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858489123389018B7E68A9ED24C80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa
Signing time: Thu 16 Jan 2025 19:50:04 +0000
ROA not before: Thu 16 Jan 2025 19:50:04 +0000
ROA not after: Wed 16 Apr 2025 18:50:04 +0000
asID: 22652
IP address blocks: 68.67.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:23:38:90:18:b7:e6:8a:9e:d2:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 19:50:04 2025 GMT
Not After : Apr 16 18:50:04 2025 GMT
Subject: CN=dc7181bc-9cc1-4eec-85e1-18d0a6eeab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:b4:e3:23:6d:3d:e4:ce:9e:5d:73:a4:97:
21:2c:8c:f1:0c:1d:4e:0d:12:01:50:a8:ee:a7:b4:
6b:fe:16:3a:80:6d:ad:47:1f:65:1b:93:b7:84:54:
6c:97:fa:68:f9:7c:f7:7a:b0:9a:b2:de:59:8a:e0:
c9:57:58:25:c3:3f:ba:b4:40:92:6f:9a:de:ba:fa:
05:40:7e:dc:15:91:70:f8:bc:7a:03:92:65:4c:bb:
58:9f:72:a0:72:5f:44:e6:b7:90:5c:ce:a3:ee:1d:
21:21:94:5a:9e:cd:04:23:b3:da:dc:21:c9:bc:06:
4c:3f:08:be:54:df:93:46:30:49:55:8c:51:34:41:
ec:67:63:52:13:1b:40:82:5b:35:c5:2e:23:2e:55:
81:ba:f6:38:46:02:47:09:1c:95:7e:6a:9a:2b:8b:
7e:37:65:c8:f2:cf:c3:99:3f:97:8d:42:76:f9:2c:
94:ec:d0:de:92:82:ad:20:d9:d7:cb:48:bc:e5:64:
95:e0:08:69:51:63:86:5c:cc:4a:5b:7b:37:bc:e5:
0a:4e:84:d7:4b:d4:54:f0:7a:fe:7f:70:1b:a7:59:
94:f0:19:e5:58:67:0f:75:e1:f0:55:df:af:96:67:
ae:bf:e5:18:d2:33:ea:37:ca:57:6b:46:85:7d:3d:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:9C:33:1B:DC:E4:04:CC:60:70:C0:E6:CC:D9:22:4B:6C:14:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c1:59:20:17:14:4c:fb:ed:47:25:44:47:f1:28:22:fc:1e:
a5:79:91:47:0a:37:3e:24:fc:6b:2a:48:64:b5:d4:7e:e3:4d:
0a:df:10:c4:60:df:4a:21:ba:6c:e5:04:4f:42:63:90:f9:40:
d1:c3:90:e7:cb:49:9f:d5:af:0b:fa:af:f0:fd:1e:c5:1c:fc:
fe:6f:1e:d2:13:89:35:e5:c0:f8:36:6a:57:40:fe:1f:03:34:
23:ae:23:b2:a8:f7:cb:fa:ad:4d:98:3c:47:78:6a:4c:3e:d7:
9a:65:fa:ea:15:96:4d:63:aa:05:18:36:cd:32:ae:59:50:2a:
df:7a:0f:69:43:e1:fd:03:d3:43:79:42:06:d7:ac:01:bc:f4:
44:52:b5:c7:13:73:ee:cd:13:41:f3:54:9d:40:15:6f:51:8b:
eb:59:1d:dd:e7:52:88:34:e2:bf:70:ec:6a:f5:6c:6a:36:56:
45:8d:49:dd:f6:3f:d7:a3:af:ec:45:4c:13:6d:3f:e1:fc:26:
31:a1:0d:07:4b:8c:96:8a:34:99:bd:09:51:12:b7:48:bb:e6:
05:71:29:10:16:9f:32:c9:f8:e9:09:c7:03:1c:0f:ff:8c:28:
f7:0f:7a:93:d9:c6:7b:39:ee:96:36:13:48:cf:b1:bf:8d:6f:
d8:6b:84:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiRIziQGLfmip7STIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDExNjE5NTAwNFoXDTI1MDQxNjE4NTAwNFowLzEtMCsGA1UEAxMk
ZGM3MTgxYmMtOWNjMS00ZWVjLTg1ZTEtMThkMGE2ZWVhYjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6a04yNtPeTOnl1zpJchLIzxDB1ODRIBUKju
p7Rr/hY6gG2tRx9lG5O3hFRsl/po+Xz3erCast5ZiuDJV1glwz+6tECSb5reuvoF
QH7cFZFw+Lx6A5JlTLtYn3Kgcl9E5reQXM6j7h0hIZRans0EI7Pa3CHJvAZMPwi+
VN+TRjBJVYxRNEHsZ2NSExtAgls1xS4jLlWBuvY4RgJHCRyVfmqaK4t+N2XI8s/D
mT+XjUJ2+SyU7NDekoKtINnXy0i85WSV4AhpUWOGXMxKW3s3vOUKToTXS9RU8Hr+
f3Abp1mU8BnlWGcPdeHwVd+vlmeuv+UY0jPqN8pXa0aFfT3ClwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSEnDMb3OQEzGBwwObM2SJLbBRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzVmMjkyMTgtZjk2My0z
NjQ0LTlhMmItNGFiM2FmNmY4Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREM8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvBWSAXFEz77UclREfxKCL8HqV5kUcKNz4k/GsqSGS11H7jTQrfEMRg
30ohumzlBE9CY5D5QNHDkOfLSZ/Vrwv6r/D9HsUc/P5vHtITiTXlwPg2aldA/h8D
NCOuI7Ko98v6rU2YPEd4akw+15pl+uoVlk1jqgUYNs0yrllQKt96D2lD4f0D00N5
QgbXrAG89ERStccTc+7NE0HzVJ1AFW9Ri+tZHd3nUog04r9w7Gr1bGo2VkWNSd32
P9ejr+xFTBNtP+H8JjGhDQdLjJaKNJm9CVESt0i75gVxKRAWnzLJ+OkJxwMcD/+M
KPcPepPZxns57pY2E0jPsb+Nb9hrhCs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:35 2025 by rpki-client