Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
File: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (raw, json)
Hash identifier: uv+kRAjCdqr2p2vz+8/XA9+OeUxMupTQL+NdWTMKLzI=
Subject key identifier: 49:23:88:23:3A:FC:0A:06:CB:D4:50:37:9A:73:47:8A:1E:95:0B:74
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F432858487B85B6C9F1C14D87A917EB80
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 8018
IP address blocks: 172.82.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b6:c9:f1:c1:4d:87:a9:17:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=ae33727d-a74c-4c4f-b36f-d6272b36b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:81:69:62:fa:d8:ce:10:e3:a3:a1:9a:55:
22:6a:5f:5d:3a:65:19:42:d3:e2:a7:95:8c:18:12:
13:c4:fe:67:c9:d8:9e:7f:24:42:c3:d5:e1:25:6c:
a8:6a:a5:c0:23:c1:78:67:14:0c:40:2c:1e:37:df:
cd:13:e0:2a:d3:1a:5a:e2:25:dd:34:d6:0d:1a:f3:
cd:98:6e:5b:4a:07:10:cf:aa:b2:0d:cc:59:94:d5:
b5:f2:4e:a0:dc:4f:e4:bc:91:b9:7e:d6:66:37:23:
81:06:0b:4a:bd:43:15:f0:dc:5b:43:6f:74:9e:e7:
de:bd:0a:41:86:47:20:2e:33:b0:13:b4:c2:88:6a:
11:38:4d:4c:a5:ab:1b:27:8b:1a:ad:11:a2:67:4a:
07:32:f3:ff:4d:5f:db:e1:78:83:d5:80:2f:8a:f4:
52:70:d5:a7:d0:17:6b:e7:06:75:bb:b4:ae:8f:7b:
2b:f1:2a:c2:d1:44:64:d5:6f:4d:e6:22:a7:fe:36:
bf:13:43:fb:84:95:83:03:b7:54:93:a4:b2:2f:75:
e5:d4:4d:f9:82:1d:8d:5b:12:b4:92:f5:96:26:e1:
83:99:4f:02:42:59:72:1b:1b:be:97:e3:aa:e1:e4:
1f:5a:cd:1c:e2:f1:b3:44:03:df:72:86:4f:40:71:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:88:23:3A:FC:0A:06:CB:D4:50:37:9A:73:47:8A:1E:95:0B:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:e2:09:c5:4f:53:27:fa:cf:e5:a3:4e:38:4a:34:5f:8a:77:
cc:1c:0c:71:c5:9b:0f:4a:91:61:5c:d5:69:86:e6:2e:c4:5d:
37:38:ff:e7:39:3f:9c:38:08:a1:25:5b:34:91:e7:9c:c2:16:
01:cc:bd:bd:1b:b3:c9:b6:df:af:55:60:7e:9a:8f:22:a5:81:
2c:61:5c:d9:88:f8:55:79:94:91:e3:09:ef:16:8e:db:f1:25:
5a:d2:03:45:ba:78:fe:1c:63:3a:aa:b8:b9:f8:cb:be:1e:c5:
88:9c:8d:0d:dc:8c:a8:e4:4e:88:2e:08:e3:3a:09:df:49:9f:
8e:f7:7a:29:02:8f:95:ad:07:ad:9d:07:96:d5:f0:4e:c3:aa:
48:25:0d:4b:17:ff:df:94:d1:21:d0:a4:f7:de:10:92:9a:ea:
1e:eb:81:eb:e6:98:16:89:5d:08:bc:39:80:d7:35:10:b6:0c:
e5:e3:12:a2:c9:67:db:ae:2a:d1:f4:1b:8a:1a:be:67:ce:ef:
15:a6:04:e8:c5:96:4d:67:da:1a:bf:d5:bb:e7:05:6b:0c:93:
a8:c3:a7:4a:40:20:a6:e7:f0:8c:5c:ce:31:6d:56:77:9d:d7:
be:d9:1c:d7:5c:6b:a1:37:59:ec:54:45:c6:8f:a3:3e:09:f0:
b1:a5:b9:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbbJ8cFNh6kX64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3
OTFlMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
YWUzMzcyN2QtYTc0Yy00YzRmLWIzNmYtZDYyNzJiMzZiMTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL+BaWL62M4Q46OhmlUial9dOmUZQtPip5WM
GBITxP5nydiefyRCw9XhJWyoaqXAI8F4ZxQMQCweN9/NE+Aq0xpa4iXdNNYNGvPN
mG5bSgcQz6qyDcxZlNW18k6g3E/kvJG5ftZmNyOBBgtKvUMV8NxbQ290nufevQpB
hkcgLjOwE7TCiGoROE1MpasbJ4sarRGiZ0oHMvP/TV/b4XiD1YAvivRScNWn0Bdr
5wZ1u7Suj3sr8SrC0URk1W9N5iKn/ja/E0P7hJWDA7dUk6SyL3Xl1E35gh2NWxK0
kvWWJuGDmU8CQllyGxu+l+Oq4eQfWs0c4vGzRAPfcoZPQHGV2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkjiCM6/AoGy9RQN5pzR4oelQt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm
MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvYjlhZGFiYzItZmMwOC0z
OWQ0LWFhY2EtNTg0YWFlZjc3YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5
M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1
NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1
MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbiCcVPUyf6z+WjTjhKNF+Kd8wcDHHFmw9KkWFc1WmG5i7EXTc4/+c5
P5w4CKElWzSR55zCFgHMvb0bs8m2369VYH6ajyKlgSxhXNmI+FV5lJHjCe8Wjtvx
JVrSA0W6eP4cYzqquLn4y74exYicjQ3cjKjkToguCOM6Cd9Jn473eikCj5WtB62d
B5bV8E7DqkglDUsX/9+U0SHQpPfeEJKa6h7rgevmmBaJXQi8OYDXNRC2DOXjEqLJ
Z9uuKtH0G4oavmfO7xWmBOjFlk1n2hq/1bvnBWsMk6jDp0pAIKbn8IxczjFtVned
177ZHNdca6E3WexURcaPoz4J8LGluQw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:33 2025 by rpki-client