Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa
File: 2c7835ed-71f5-3bf7-8a93-4473a895c021.roa (raw, json)
Hash identifier: ynjHBz/nVxzjzIsEdC3bLQ3hGrRfNIV0mvzBRb/iYvc=
Subject key identifier: 7F:7C:B8:F7:EE:C4:AE:2A:02:8A:A6:19:E2:EA:F6:02:5D:3C:70:C1
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F4328584949FE8506B1F1E7B4C9B071E0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 19437
IP address blocks: 67.43.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:85:06:b1:f1:e7:b4:c9:b0:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=79280ec9-136b-4138-b2b3-e62f7dd070c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:28:21:b4:44:e4:ad:4e:77:b8:55:e5:4b:
92:b0:b9:77:e9:ac:d4:35:9b:7b:ae:44:be:12:d4:
c7:a3:1b:c7:ff:48:fa:e0:07:70:ed:bf:ea:6a:ef:
8d:ae:1e:d3:2e:f4:33:e7:9c:9a:5b:ef:9e:e6:a9:
c8:19:2c:aa:b5:8e:da:86:30:db:ac:e8:fa:98:e1:
5f:f1:0b:90:1b:f6:85:7a:2d:3d:96:c1:eb:fa:84:
7a:9b:f7:63:63:ac:c2:0b:2a:cc:4a:d4:8e:94:79:
03:da:47:91:a9:5d:b6:d1:e4:5f:c9:cc:b8:74:1c:
11:82:2c:43:e8:9a:33:de:9b:70:a6:82:4f:a1:1b:
e5:70:7e:9f:50:e2:c1:5c:99:45:6e:13:6c:81:45:
07:f8:04:e1:e8:70:36:23:1f:89:24:87:fb:03:ed:
5a:85:a4:f5:25:6c:2f:56:e9:e5:bc:b9:3e:9e:72:
3d:ec:6d:09:06:ff:8c:bc:a9:96:aa:91:1d:a0:d6:
35:fc:db:02:fd:c6:81:9f:46:60:58:72:fe:43:8d:
f6:69:3a:13:b9:16:99:f4:cf:87:8b:9b:37:6b:c6:
71:1b:6b:b3:95:35:35:61:23:04:40:f0:38:0f:9a:
e9:c5:b3:42:b3:c3:93:4a:7f:db:5d:55:b1:7b:6b:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:B8:F7:EE:C4:AE:2A:02:8A:A6:19:E2:EA:F6:02:5D:3C:70:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:15:8f:3a:dc:38:e1:40:05:42:a7:48:aa:9b:e3:e9:cc:8c:
60:23:c4:36:36:be:8a:74:0e:59:f2:57:24:b1:a4:f7:e8:0c:
9a:49:7a:f9:a6:a4:7a:ed:82:59:7a:bd:40:78:82:f7:30:3b:
5d:53:ef:64:48:01:42:f5:32:5c:96:38:c4:ca:af:17:b4:09:
33:98:e0:b1:72:94:7c:b7:10:53:3c:f2:b7:ad:a6:91:b3:94:
69:63:88:72:a6:db:5a:39:24:46:93:66:bf:b3:b7:a1:6e:d9:
65:35:38:49:e9:57:86:04:66:b1:cb:cc:a9:dc:47:bd:fb:e2:
c2:b5:7e:25:67:14:31:a1:91:80:99:fa:d7:a9:75:2d:2f:f3:
79:b7:4b:4f:74:4b:45:3b:11:32:36:c4:6d:0e:bf:37:8e:36:
4a:54:71:65:e7:6e:56:c3:f6:8a:b8:76:d7:fe:85:bc:ba:2e:
13:85:5a:7b:b8:67:ff:07:0e:5a:c7:9a:df:62:c8:a4:7b:d7:
c7:81:e1:62:f0:c9:c9:ac:66:11:0e:4e:91:82:5c:91:7d:67:
d8:14:90:28:10:c5:d6:fd:97:93:75:bc:e5:a0:93:43:06:39:
d2:fc:5a:2e:31:ae:05:83:8b:38:4c:2a:c8:dd:83:98:b7:1a:
68:54:e5:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/oUGsfHntMmwceAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
NzkyODBlYzktMTM2Yi00MTM4LWIyYjMtZTYyZjdkZDA3MGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGYoIbRE5K1Od7hV5UuSsLl36azUNZt7rkS+
EtTHoxvH/0j64Adw7b/qau+Nrh7TLvQz55yaW++e5qnIGSyqtY7ahjDbrOj6mOFf
8QuQG/aFei09lsHr+oR6m/djY6zCCyrMStSOlHkD2keRqV220eRfycy4dBwRgixD
6Joz3ptwpoJPoRvlcH6fUOLBXJlFbhNsgUUH+ATh6HA2Ix+JJIf7A+1ahaT1JWwv
VunlvLk+nnI97G0JBv+MvKmWqpEdoNY1/NsC/caBn0ZgWHL+Q432aToTuRaZ9M+H
i5s3a8ZxG2uzlTU1YSMEQPA4D5rpxbNCs8OTSn/bXVWxe2txuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH98uPfuxK4qAoqmGeLq9gJdPHDBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMmM3ODM1ZWQtNzFmNS0z
YmY3LThhOTMtNDQ3M2E4OTVjMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUVjzrcOOFABUKnSKqb4+nMjGAjxDY2vop0DlnyVySxpPfoDJpJevmm
pHrtgll6vUB4gvcwO11T72RIAUL1MlyWOMTKrxe0CTOY4LFylHy3EFM88retppGz
lGljiHKm21o5JEaTZr+zt6Fu2WU1OEnpV4YEZrHLzKncR7374sK1fiVnFDGhkYCZ
+tepdS0v83m3S090S0U7ETI2xG0OvzeONkpUcWXnblbD9oq4dtf+hby6LhOFWnu4
Z/8HDlrHmt9iyKR718eB4WLwycmsZhEOTpGCXJF9Z9gUkCgQxdb9l5N1vOWgk0MG
OdL8Wi4xrgWDizhMKsjdg5i3GmhU5UE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:50 2025 by rpki-client