Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa
File: 2499c115-1fa9-3f68-b225-9be53cada24a.roa (raw, json)
Hash identifier: KETf1HWT8WgMQEgSsMqvvYP6ESCIn9oQYwQcP/8tx7U=
Subject key identifier: 63:FB:9A:D6:76:FC:52:E7:C2:E6:D7:F8:9C:E8:33:E9:6E:75:42:25
Certificate issuer: /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial: 010D0C9F432858492CB21F3AB1D0E9D50407F000
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 207.110.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:1f:3a:b1:d0:e9:d5:04:07:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=dc23b4d4-47e7-444c-a18c-2f1d07f33598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:48:bd:1d:eb:00:fe:a6:a6:0d:68:f1:41:
5f:46:ce:15:c5:74:de:01:70:ea:e7:a6:2d:f2:bc:
98:ff:a8:5e:60:eb:c2:99:f4:a1:c9:7b:8a:20:9c:
ff:fa:03:6a:ef:15:c4:7c:f7:62:1d:58:f5:cb:3c:
d4:6e:ca:f2:ad:33:45:88:81:56:92:e7:31:29:db:
91:23:42:97:74:c8:b7:b0:19:13:a6:80:4e:18:2d:
45:b0:bb:70:f2:7c:3e:cc:12:d5:1b:8e:98:43:2b:
3b:24:9e:10:be:f6:9d:28:d3:42:b4:99:d8:87:64:
6e:16:71:c9:a9:1b:34:3f:f8:66:d9:df:da:95:cc:
e5:80:42:8e:a7:35:80:7d:ae:5f:64:c1:6a:82:79:
dc:8a:0b:f6:c9:85:93:c3:37:db:28:35:50:4a:3a:
14:b2:7b:d4:e8:13:5c:21:01:c6:53:9f:1d:fa:52:
24:a8:0c:b3:ed:32:0e:03:cd:77:d9:b5:77:74:9b:
26:65:c4:8d:53:2b:02:d7:55:47:be:4d:f9:5e:41:
e9:1e:65:fb:6d:af:53:cb:7b:8a:f6:04:5f:47:88:
c2:28:a9:83:87:a1:eb:b9:ac:5f:d5:a5:c1:62:bd:
4d:09:54:ab:31:7a:d2:30:30:e2:1a:a0:a6:5c:03:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:9A:D6:76:FC:52:E7:C2:E6:D7:F8:9C:E8:33:E9:6E:75:42:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
X509v3 Authority Key Identifier:
keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.110.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:2a:c6:a0:f3:3f:92:19:f7:d1:50:45:41:a3:f4:64:99:cc:
53:5e:a5:55:72:83:9c:1b:c9:67:18:38:75:e9:27:77:84:ec:
f3:b1:83:ef:5a:cd:fb:d8:53:fa:59:50:48:71:86:18:1a:a4:
9e:5e:c0:1e:7e:19:60:77:d4:f5:d8:f7:33:31:f2:3b:c8:a0:
0f:43:a2:d4:ef:fb:20:8f:eb:7e:27:d4:33:8d:07:05:f8:32:
d1:1e:20:2a:c5:65:89:ff:54:26:61:73:34:d6:6f:4d:75:bb:
d2:c5:cb:e8:fc:93:c1:25:94:29:5d:84:14:5c:c2:8a:ca:f9:
b3:a4:89:fc:58:dd:1b:e6:6c:45:d4:15:29:eb:7d:a7:1b:96:
c9:dd:c4:ca:63:bd:82:68:b3:61:63:c5:36:02:ff:13:45:75:
8e:b8:95:df:d9:ca:99:9f:66:b8:ef:4e:ce:1b:0f:e5:f1:b2:
0b:70:59:cc:9b:fb:69:94:51:96:7e:61:84:02:6d:21:f7:e5:
61:be:53:6e:a6:46:2a:47:66:5e:7a:79:8b:bf:2a:63:50:25:
c0:f7:39:94:b2:0e:26:c5:0a:18:c1:f6:cd:72:de:40:a1:ab:
f1:68:6e:1f:df:d7:06:c1:af:f7:16:e1:d1:96:e9:7f:ad:7c:
95:ad:bb:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssh86sdDp1QQH8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIyNjk4MGEtMmM0My00M2RhLTgzZmQtMTk4Njk2YTli
MDJlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGMyM2I0ZDQtNDdlNy00NDRjLWExOGMtMmYxZDA3ZjMzNTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOFIvR3rAP6mpg1o8UFfRs4VxXTeAXDq56Yt
8ryY/6heYOvCmfShyXuKIJz/+gNq7xXEfPdiHVj1yzzUbsryrTNFiIFWkucxKduR
I0KXdMi3sBkTpoBOGC1FsLtw8nw+zBLVG46YQys7JJ4QvvadKNNCtJnYh2RuFnHJ
qRs0P/hm2d/alczlgEKOpzWAfa5fZMFqgnncigv2yYWTwzfbKDVQSjoUsnvU6BNc
IQHGU58d+lIkqAyz7TIOA8132bV3dJsmZcSNUysC11VHvk35XkHpHmX7ba9Ty3uK
9gRfR4jCKKmDh6Hruaxf1aXBYr1NCVSrMXrSMDDiGqCmXAP7HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGP7mtZ2/FLnwubX+JzoM+ludUIlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2
OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2OTZhOWIwMmUvMjQ5OWMxMTUtMWZhOS0z
ZjY4LWIyMjUtOWJlNTNjYWRhMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTIyNjk4MGEtMmM0My00M2RhLTgz
ZmQtMTk4Njk2YTliMDJlLzEyMjY5ODBhLTJjNDMtNDNkYS04M2ZkLTE5ODY5NmE5
YjAyZS5jcmwwHwYDVR0jBBgwFoAU6HPdb/rXZzrymoMc4BJjmUFXnsUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2
OTZhOWIwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz26JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0qxqDzP5IZ99FQRUGj9GSZzFNepVVyg5wbyWcYOHXpJ3eE7POxg+9a
zfvYU/pZUEhxhhgapJ5ewB5+GWB31PXY9zMx8jvIoA9DotTv+yCP634n1DONBwX4
MtEeICrFZYn/VCZhczTWb011u9LFy+j8k8EllCldhBRcworK+bOkifxY3RvmbEXU
FSnrfacblsndxMpjvYJos2FjxTYC/xNFdY64ld/ZypmfZrjvTs4bD+XxsgtwWcyb
+2mUUZZ+YYQCbSH35WG+U26mRipHZl56eYu/KmNQJcD3OZSyDibFChjB9s1y3kCh
q/Fobh/f1wbBr/cW4dGW6X+tfJWtuzY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:41 2025 by rpki-client