Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa
File: 821ff32e-07d4-3b00-9b7a-0fca8537383a.roa (raw, json)
Hash identifier: R3A68YBaHlUWdswZfkKNqXovxspMV5kYnn87ApkbFDo=
Subject key identifier: 07:0E:02:17:D8:1C:B7:32:BD:8B:BF:CC:E0:39:5D:25:98:EC:74:F5
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584880336C69A446471B8E38F800
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa
Signing time: Fri 10 Jan 2025 18:13:58 +0000
ROA not before: Fri 10 Jan 2025 18:13:58 +0000
ROA not after: Thu 10 Apr 2025 17:13:58 +0000
asID: 1824
IP address blocks: 192.252.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:33:6c:69:a4:46:47:1b:8e:38:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 10 18:13:58 2025 GMT
Not After : Apr 10 17:13:58 2025 GMT
Subject: CN=d98123b9-7c5c-48cf-9d89-42034f7677e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:7f:9b:7f:6b:c5:f9:81:31:63:72:4e:c9:
64:eb:9a:e1:20:63:99:be:3e:a8:fa:35:0a:1a:cc:
ed:3d:4d:ba:4c:6b:c8:f3:59:19:b3:25:35:df:5e:
fc:c4:c6:10:6f:8c:29:45:e2:43:76:91:28:ee:7e:
c3:76:73:1e:8d:bf:f3:cc:fd:73:13:92:31:0e:a9:
e9:05:30:7a:3b:62:ae:d7:16:af:f1:f7:56:64:93:
15:9d:64:fd:ed:e5:f5:50:20:0d:6c:c2:c6:8a:49:
1e:41:76:41:c0:2f:d2:d0:5b:14:4f:ce:ff:87:ec:
5c:87:7f:78:76:00:11:80:11:1c:80:1b:7d:2b:ce:
be:8f:21:3c:0f:dc:e6:6e:e7:d4:a4:ab:22:69:86:
20:50:1c:15:a0:75:ca:55:4b:e9:af:68:21:ee:cf:
06:0c:e3:e5:44:13:eb:19:e7:03:29:ef:82:15:c6:
8e:e6:07:ca:4f:44:1c:06:72:1b:b5:55:a7:0c:75:
2b:42:f6:e1:30:c1:f5:fe:a2:fc:06:5a:1a:79:42:
79:3d:5f:8c:37:c7:1a:ae:21:6e:cd:b3:9f:41:be:
9c:9e:28:2c:2d:3c:12:1f:d4:ca:af:a0:89:f8:3c:
24:10:da:71:1f:1a:8d:9c:be:1c:bb:b6:7c:82:7e:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:02:17:D8:1C:B7:32:BD:8B:BF:CC:E0:39:5D:25:98:EC:74:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:2e:e6:99:36:68:7e:32:1a:f4:3f:3a:70:ef:36:11:13:e9:
85:93:ce:77:8d:d3:64:dc:91:df:f1:df:b6:8c:52:53:86:41:
d6:d7:f6:71:ac:bf:f3:52:54:0a:52:70:01:2b:69:aa:f7:4b:
23:b7:fe:1a:f1:10:01:70:e5:d2:d7:50:7e:e4:f2:8f:23:06:
f0:ea:0f:3f:3f:60:c7:98:29:b2:be:39:0a:5f:a3:f1:7c:f3:
09:32:d6:00:5f:35:33:ed:91:d5:0a:cd:54:e1:d3:76:1d:f7:
61:98:e5:3b:1e:d3:af:21:d8:0f:02:f8:bd:8a:45:01:00:db:
2a:a1:6a:3d:de:24:c0:11:90:f9:f3:fd:ce:3b:d2:0e:28:61:
46:ba:6f:ac:5a:4e:9e:11:2c:c8:c5:12:1c:2c:8e:42:9e:49:
79:af:18:f9:b6:61:bc:5c:55:20:7d:e4:45:57:af:44:a8:b4:
4c:13:d1:88:32:ee:ea:9c:f5:5f:61:fb:3f:cf:6c:18:16:e4:
8f:a4:ce:52:f0:bc:c1:8f:72:c8:44:b9:b2:79:ba:00:4d:5d:
65:fd:c9:f7:a6:58:8d:ae:33:80:4c:3c:f3:95:48:55:ea:3d:
ce:d3:3a:60:c5:d3:66:c1:55:cd:22:ee:32:ae:cc:14:bb:d3:
1b:d7:bb:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiAM2xppEZHG444+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDExMDE4MTM1OFoXDTI1MDQxMDE3MTM1OFowLzEtMCsGA1UEAxMk
ZDk4MTIzYjktN2M1Yy00OGNmLTlkODktNDIwMzRmNzY3N2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFx/m39rxfmBMWNyTslk65rhIGOZvj6o+jUK
GsztPU26TGvI81kZsyU13178xMYQb4wpReJDdpEo7n7DdnMejb/zzP1zE5IxDqnp
BTB6O2Ku1xav8fdWZJMVnWT97eX1UCANbMLGikkeQXZBwC/S0FsUT87/h+xch394
dgARgBEcgBt9K86+jyE8D9zmbufUpKsiaYYgUBwVoHXKVUvpr2gh7s8GDOPlRBPr
GecDKe+CFcaO5gfKT0QcBnIbtVWnDHUrQvbhMMH1/qL8BloaeUJ5PV+MN8cariFu
zbOfQb6cnigsLTwSH9TKr6CJ+DwkENpxHxqNnL4cu7Z8gn43xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcOAhfYHLcyvYu/zOA5XSWY7HT1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvODIxZmYzMmUtMDdkNC0z
YjAwLTliN2EtMGZjYTg1MzczODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4u5pk2aH4yGvQ/OnDvNhET6YWTzneN02Tckd/x37aMUlOGQdbX9nGs
v/NSVApScAEraar3SyO3/hrxEAFw5dLXUH7k8o8jBvDqDz8/YMeYKbK+OQpfo/F8
8wky1gBfNTPtkdUKzVTh03Yd92GY5Tse068h2A8C+L2KRQEA2yqhaj3eJMARkPnz
/c470g4oYUa6b6xaTp4RLMjFEhwsjkKeSXmvGPm2YbxcVSB95EVXr0SotEwT0Ygy
7uqc9V9h+z/PbBgW5I+kzlLwvMGPcshEubJ5ugBNXWX9yfemWI2uM4BMPPOVSFXq
Pc7TOmDF02bBVc0i7jKuzBS70xvXu18=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:28 2025 by rpki-client