Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa
File: 2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa (raw, json)
Hash identifier: Qm0Kfn53sJYV2oXwBRc4BfpHV1dLgmTBVCisyF0Xr/c=
Subject key identifier: 44:ED:BE:41:72:94:C4:97:B5:4F:EF:48:36:19:C9:CA:3A:D4:17:2C
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858490E16C6EE83D6D42BF18E9300
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 271
IP address blocks: 207.23.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c6:ee:83:d6:d4:2b:f1:8e:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=c736aea9-5797-4e56-ba56-5a529c0c9359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:1a:7b:a8:8e:ca:32:16:1e:6e:61:f6:27:
f3:fd:f5:d9:df:0d:17:d3:28:9d:f4:0c:a1:8a:6c:
df:b9:9b:75:3c:fc:1a:27:97:8a:57:9d:91:63:42:
e0:08:57:02:68:60:05:3e:89:ed:82:de:ca:c0:73:
dd:f6:a6:cf:69:9c:38:a9:31:e5:94:95:63:33:3a:
b1:88:41:ee:0d:32:4e:2e:c2:ae:ac:5f:f8:01:d8:
62:d3:45:69:ac:c7:49:90:5a:d6:dd:37:0a:ee:9f:
92:f8:03:01:b9:ff:ca:2f:b1:9c:12:13:45:fe:91:
bd:31:60:9d:22:f4:55:79:9b:53:2e:59:e0:13:c0:
ae:1c:b5:86:28:3d:a1:0c:18:7c:88:ed:12:18:0b:
c7:e8:93:ef:da:20:89:4f:b8:5e:1c:ad:36:91:b4:
14:96:14:88:d8:87:5c:88:3e:95:1b:6d:67:29:92:
4a:f0:75:b9:f6:c5:8e:3c:b2:04:e0:14:08:5f:8a:
e2:22:9d:84:c2:5d:4d:dc:2c:e9:bd:84:55:89:de:
1e:18:a5:5a:a5:ab:a5:0c:dd:e2:2c:09:5f:d9:e3:
f9:02:78:4f:2c:a5:99:96:2c:1a:02:42:34:27:d9:
25:f1:9c:2a:30:cd:fe:ab:b9:5f:95:12:84:5b:78:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:BE:41:72:94:C4:97:B5:4F:EF:48:36:19:C9:CA:3A:D4:17:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:7c:8a:68:32:53:6b:96:46:86:d6:7d:1a:28:69:bb:82:76:
0d:88:15:db:54:75:fa:1b:40:96:7a:51:83:f4:18:5a:b2:ca:
46:88:17:d7:db:0e:54:bc:be:a4:8f:59:25:02:c3:11:4b:d3:
ad:00:65:de:36:17:34:57:a3:ba:58:f1:08:25:35:05:12:24:
f0:c0:18:48:05:66:5f:36:af:07:29:a7:80:e0:ae:16:7d:82:
fb:6b:49:e5:9c:d8:a2:3a:a0:fa:9c:f7:2b:f2:c9:a9:9a:d1:
43:87:de:5e:d9:29:88:a5:2d:45:65:0d:5d:f8:16:7e:2f:05:
56:3d:d6:38:0c:84:d3:3a:e9:ab:1a:8b:f5:ff:c7:1a:d4:8a:
8e:43:40:81:c0:e4:57:36:74:15:e6:76:7a:ce:09:05:22:76:
72:3e:76:a9:2e:cb:45:9a:27:ed:b2:15:b9:df:c0:1c:88:05:
05:66:62:67:7c:ed:f8:b3:26:cc:72:ee:b1:bc:17:4f:87:7d:
8a:9c:75:8c:b6:05:97:c9:80:01:0d:12:0a:e9:d7:41:37:e3:
70:b5:1a:69:6f:9e:f3:6a:c8:88:31:56:9f:37:ee:10:19:86:
b4:59:38:02:3a:1c:39:a0:34:00:c3:c0:97:1c:75:87:9f:dd:
a5:77:05:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsbug9bUK/GOkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzczNmFlYTktNTc5Ny00ZTU2LWJhNTYtNWE1MjljMGM5MzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFIae6iOyjIWHm5h9ifz/fXZ3w0X0yid9Ayh
imzfuZt1PPwaJ5eKV52RY0LgCFcCaGAFPontgt7KwHPd9qbPaZw4qTHllJVjMzqx
iEHuDTJOLsKurF/4Adhi00VprMdJkFrW3TcK7p+S+AMBuf/KL7GcEhNF/pG9MWCd
IvRVeZtTLlngE8CuHLWGKD2hDBh8iO0SGAvH6JPv2iCJT7heHK02kbQUlhSI2Idc
iD6VG21nKZJK8HW59sWOPLIE4BQIX4riIp2Ewl1N3CzpvYRVid4eGKVapaulDN3i
LAlf2eP5AnhPLKWZliwaAkI0J9kl8ZwqMM3+q7lflRKEW3gnRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETtvkFylMSXtU/vSDYZyco61BcsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMmZmYTJiZTUtYmYwZS0z
NjMyLWFjMTEtY2JmMTQxOTYxYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx8imgyU2uWRobWfRooabuCdg2IFdtUdfobQJZ6UYP0GFqyykaIF9fb
DlS8vqSPWSUCwxFL060AZd42FzRXo7pY8QglNQUSJPDAGEgFZl82rwcpp4DgrhZ9
gvtrSeWc2KI6oPqc9yvyyama0UOH3l7ZKYilLUVlDV34Fn4vBVY91jgMhNM66asa
i/X/xxrUio5DQIHA5Fc2dBXmdnrOCQUidnI+dqkuy0WaJ+2yFbnfwByIBQVmYmd8
7fizJsxy7rG8F0+HfYqcdYy2BZfJgAENEgrp10E343C1GmlvnvNqyIgxVp837hAZ
hrRZOAI6HDmgNADDwJccdYef3aV3BWo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:40 2025 by rpki-client