Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
File: c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa (raw, json)
Hash identifier: lsxJ9Yjqn1eDkwmT9HViYvtzob//aHaHbgJh0+8B4rg=
Subject key identifier: A3:B2:14:DD:B4:8C:67:EF:BA:9F:1E:DA:A9:88:53:BB:BD:17:88:45
Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial: 010D0C9F43285848EC968FEB3AC15DD660E72200
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 3807
IP address blocks: 207.196.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:8f:eb:3a:c1:5d:d6:60:e7:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=9b07f574-769a-4ac7-aa77-81eb999c551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:53:65:be:92:8e:7d:6c:6b:6f:a1:41:00:
2f:06:74:26:04:0a:33:fe:7f:aa:93:5a:be:fd:b9:
e4:cb:2b:24:85:80:27:42:4e:64:5d:0a:b8:ab:28:
a9:42:a5:77:ee:fb:e0:2b:77:b0:85:12:b0:99:d4:
08:58:cf:da:5e:09:77:99:e0:0c:ff:2d:0b:2f:3b:
1f:bb:f8:8b:d5:36:69:1f:29:1b:d3:26:68:12:01:
71:b2:ff:98:ce:29:e9:24:2a:7d:e5:3a:63:cd:b1:
de:ac:52:23:c1:37:07:36:13:f0:23:5a:92:03:72:
a7:90:d4:f1:3d:5c:22:05:6b:2b:00:13:e4:06:ae:
05:5c:90:52:5d:0a:a9:ed:24:29:65:83:f0:cc:72:
be:49:d7:6e:af:10:06:f5:ab:4c:97:3c:08:1c:cc:
58:fe:38:4d:bf:89:d2:09:27:de:d6:3e:9e:fc:f0:
44:dd:fe:fc:9a:d1:88:2c:cd:5d:97:2b:10:86:66:
46:f2:a3:c4:42:36:4c:19:cf:32:ba:ce:17:86:e5:
14:13:8f:8e:d0:af:8b:68:8b:73:eb:c0:64:45:cf:
ce:18:34:1a:be:45:f2:85:f2:92:6e:66:07:03:fd:
c8:f0:df:e7:5c:96:dc:a1:fb:75:b6:2d:9a:90:c8:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:14:DD:B4:8C:67:EF:BA:9F:1E:DA:A9:88:53:BB:BD:17:88:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
X509v3 Authority Key Identifier:
keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
sbgp-ipAddrBlock: critical
IPv4:
207.196.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:03:56:49:c6:52:fc:ad:3b:66:a8:74:aa:28:f3:a4:48:82:
90:69:b6:5e:3b:fe:46:da:44:1e:4b:ba:ac:50:b6:7e:46:ca:
23:da:c0:13:ba:9b:c4:b1:a6:c8:79:34:26:97:2c:4f:c3:fd:
79:76:de:85:4d:5a:6b:c8:da:78:17:01:a7:3b:22:86:57:64:
df:d4:b5:d2:5d:bb:ba:88:16:5d:b5:c6:54:88:5d:6a:8e:27:
a9:41:50:e3:e0:22:ea:4b:c3:af:01:f8:84:f8:8c:86:77:4f:
f3:1b:9b:9b:56:d4:07:b3:86:72:be:94:cf:ed:ba:fa:56:d4:
17:75:3d:51:ca:d0:b0:0b:ae:d9:0e:2a:4c:e2:6f:da:09:8e:
0d:fc:35:a8:6f:8d:1c:87:33:d8:49:72:b2:b7:86:c7:fa:24:
86:6d:f3:40:4c:8f:26:29:f2:5c:1f:cf:2e:f9:34:08:d3:b8:
6b:33:0d:77:9f:16:5e:13:04:f4:4b:e5:6b:5c:33:7b:c1:e6:
36:56:da:75:c0:44:13:25:a1:80:48:ef:26:5a:c3:23:95:72:
ad:ed:94:dc:32:3a:73:fe:1c:dc:e3:ad:73:86:be:12:98:0c:
56:fc:e2:63:59:9c:0d:f7:8c:98:7d:f0:56:c0:35:84:ee:52:
68:c5:f8:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo/rOsFd1mDnIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OWIwN2Y1NzQtNzY5YS00YWM3LWFhNzctODFlYjk5OWM1NTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSJTZb6Sjn1sa2+hQQAvBnQmBAoz/n+qk1q+
/bnkyyskhYAnQk5kXQq4qyipQqV37vvgK3ewhRKwmdQIWM/aXgl3meAM/y0LLzsf
u/iL1TZpHykb0yZoEgFxsv+YzinpJCp95TpjzbHerFIjwTcHNhPwI1qSA3KnkNTx
PVwiBWsrABPkBq4FXJBSXQqp7SQpZYPwzHK+SddurxAG9atMlzwIHMxY/jhNv4nS
CSfe1j6e/PBE3f78mtGILM1dlysQhmZG8qPEQjZMGc8yus4XhuUUE4+O0K+LaItz
68BkRc/OGDQavkXyhfKSbmYHA/3I8N/nXJbcoft1ti2akMhbfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOyFN20jGfvup8e2qmIU7u9F4hFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYzc1MmUzMWYtOWQ0MS0z
ZDE0LWExNGMtZTE5ZDZiZWE1MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMDVknGUvytO2aodKoo86RIgpBptl47/kbaRB5LuqxQtn5GyiPawBO6
m8Sxpsh5NCaXLE/D/Xl23oVNWmvI2ngXAac7IoZXZN/UtdJdu7qIFl21xlSIXWqO
J6lBUOPgIupLw68B+IT4jIZ3T/Mbm5tW1AezhnK+lM/tuvpW1Bd1PVHK0LALrtkO
Kkzib9oJjg38NahvjRyHM9hJcrK3hsf6JIZt80BMjyYp8lwfzy75NAjTuGszDXef
Fl4TBPRL5WtcM3vB5jZW2nXARBMloYBI7yZawyOVcq3tlNwyOnP+HNzjrXOGvhKY
DFb84mNZnA33jJh98FbANYTuUmjF+K0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:52 2025 by rpki-client