Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa
File: 174846cb-0f67-325c-b817-d538a17e3ac5.roa (raw, json)
Hash identifier: 1+2Fpz9ckotprrsEiRoiDkpzBKSY9fYlHwgSGOhDiNM=
Subject key identifier: 7C:0F:0C:2A:D2:2B:AB:26:BA:0E:15:81:E1:41:9A:A6:F1:EE:C1:AF
Certificate issuer: /CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Certificate serial: 010D0C9F4328584902EC29AC9C5545716023FF80
Authority key identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 398395
IP address blocks: 67.219.137.0/24 maxlen: 24
67.219.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:29:ac:9c:55:45:71:60:23:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=6097a7f7-5438-4e99-a982-0f9b5070e63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:1b:4d:f2:40:6b:1d:2c:5c:e4:e8:90:3a:
9b:9a:a7:ff:e9:77:a4:42:fd:60:73:f6:2f:5e:80:
47:32:96:72:2b:2f:88:c4:07:f7:1b:c7:1b:0e:fb:
ea:9a:4f:95:23:40:6d:68:23:f1:e4:f3:b9:5a:70:
20:47:55:b2:4d:53:b2:cd:cc:84:37:02:34:90:32:
22:10:07:ab:38:41:63:02:81:9a:8b:de:ff:26:40:
3f:a3:9d:60:99:aa:c3:9e:13:0e:bd:69:2f:4a:77:
32:17:3e:e2:47:83:7c:fc:dd:22:38:a7:b7:b3:c0:
57:50:7f:0d:6c:79:f9:8b:35:25:1b:8b:45:28:e0:
5c:3b:f6:f1:f9:bf:53:1d:56:08:c5:2b:95:64:6f:
17:2b:be:f1:47:c3:41:3d:49:13:74:36:37:28:30:
68:50:71:09:82:5d:ea:3c:12:e4:94:54:88:c8:ff:
f3:78:8f:a1:1d:5d:66:eb:00:6a:79:00:44:e7:2f:
bd:9d:d5:d3:34:c0:54:d6:6c:da:03:55:0b:90:1c:
f7:e9:45:a6:7a:37:5f:19:2e:d3:67:1a:1a:8e:26:
bc:11:40:e7:c2:bf:fe:0d:99:4a:ac:c5:8a:17:a7:
f2:0c:0e:f1:97:33:d3:2f:9c:bc:1a:69:00:92:07:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0F:0C:2A:D2:2B:AB:26:BA:0E:15:81:E1:41:9A:A6:F1:EE:C1:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl
X509v3 Authority Key Identifier:
keyid:B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.137.0/24
67.219.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:51:7b:77:0e:95:c7:46:2c:3f:c4:13:ae:af:a3:59:43:bc:
66:2d:f6:c0:ae:ae:39:5e:d6:fd:c1:21:4e:56:b1:52:df:c8:
e0:78:d1:16:c0:11:1e:c0:b3:ba:b9:69:eb:ae:28:78:45:48:
c1:c0:28:63:7f:85:d1:35:59:de:36:ba:0c:62:da:b2:f7:17:
50:61:69:bd:07:ec:3a:54:06:d0:4e:14:6f:32:9f:c6:87:af:
79:2e:fd:05:18:d3:fb:6e:a3:df:48:cf:bf:0e:7b:72:fd:da:
dd:eb:da:38:3b:58:ef:ca:17:0b:96:c1:53:66:78:40:e3:ce:
b3:18:00:e8:a1:68:45:50:18:82:26:5c:8b:8b:63:be:11:61:
be:aa:84:b4:df:c8:15:66:b7:91:48:51:22:27:a5:5c:ba:8e:
6a:d4:e2:a1:1c:3f:2c:79:21:47:a9:42:51:a3:a2:ca:49:7c:
3a:2a:43:0d:72:74:1f:6c:ea:95:15:ad:68:09:fb:79:59:8d:
91:bb:fc:bb:9a:0e:61:df:0e:77:3f:a9:72:74:09:32:70:92:
35:5a:6b:57:6e:0e:26:0d:a6:42:d9:67:e7:63:05:2f:34:09:
6d:e6:8f:7a:8b:65:8e:c7:93:cb:77:73:5a:76:9f:97:95:e2:
d2:68:04:1c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkC7CmsnFVFcWAj/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZiN2E4ODEtN2FiNC00ODFiLWE5YjItMjI3ODk2NzZm
OTYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NjA5N2E3ZjctNTQzOC00ZTk5LWE5ODItMGY5YjUwNzBlNjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt8bTfJAax0sXOTokDqbmqf/6XekQv1gc/Yv
XoBHMpZyKy+IxAf3G8cbDvvqmk+VI0BtaCPx5PO5WnAgR1WyTVOyzcyENwI0kDIi
EAerOEFjAoGai97/JkA/o51gmarDnhMOvWkvSncyFz7iR4N8/N0iOKe3s8BXUH8N
bHn5izUlG4tFKOBcO/bx+b9THVYIxSuVZG8XK77xR8NBPUkTdDY3KDBoUHEJgl3q
PBLklFSIyP/zeI+hHV1m6wBqeQBE5y+9ndXTNMBU1mzaA1ULkBz36UWmejdfGS7T
Zxoajia8EUDnwr/+DZlKrMWKF6fyDA7xlzPTL5y8GmkAkgfy0QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHwPDCrSK6smug4VgeFBmqbx7sGvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZmI3
YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4OTY3NmY5NjAvMTc0ODQ2Y2ItMGY2Ny0z
MjVjLWI4MTctZDUzOGExN2UzYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2ZiN2E4ODEtN2FiNC00ODFiLWE5
YjItMjI3ODk2NzZmOTYwL2NmYjdhODgxLTdhYjQtNDgxYi1hOWIyLTIyNzg5Njc2
Zjk2MC5jcmwwHwYDVR0jBBgwFoAUtyGQ/tvYUhduJflU6uOSeTMalVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZmI3YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4
OTY3NmY5NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ9uJAwQA
Q9uLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFBRe3cOlcdGLD/EE66vo1lDvGYt9sCurjle1v3BIU5WsVLf
yOB40RbAER7As7q5aeuuKHhFSMHAKGN/hdE1Wd42ugxi2rL3F1Bhab0H7DpUBtBO
FG8yn8aHr3ku/QUY0/tuo99Iz78Oe3L92t3r2jg7WO/KFwuWwVNmeEDjzrMYAOih
aEVQGIImXIuLY74RYb6qhLTfyBVmt5FIUSInpVy6jmrU4qEcPyx5IUepQlGjospJ
fDoqQw1ydB9s6pUVrWgJ+3lZjZG7/LuaDmHfDnc/qXJ0CTJwkjVaa1duDiYNpkLZ
Z+djBS80CW3mj3qLZY7Hk8t3c1p2n5eV4tJoBBw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:37 2025 by rpki-client