Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa
File: ce7d9151-48ea-3700-86d4-4107fa295ed9.roa (raw, json)
Hash identifier: H9HYvw+c6jBvTBQ78NkccLw1jiOtFdBRbph2+/dqedQ=
Subject key identifier: 52:86:76:19:01:15:25:B4:07:06:D7:11:0F:F2:57:E0:A9:59:65:40
Certificate issuer: /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial: 010D0C9F4328584882809F0B680D40668756F380
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 23470
IP address blocks: 172.82.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9f:0b:68:0d:40:66:87:56:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=6bf2e934-9a52-4d1c-93ce-028a5ac13fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:f4:da:08:06:77:44:1d:5d:9e:2f:82:51:
40:08:32:c6:64:2b:21:53:8a:c6:7a:13:e0:93:c5:
47:06:c0:d4:61:b7:2a:dc:10:ad:48:f8:b7:32:40:
be:3c:85:15:11:ac:60:ce:07:3c:b2:1a:79:66:0d:
71:48:5d:5e:97:96:bd:64:c9:66:c2:65:00:f1:4b:
fa:60:01:76:fa:c7:d6:f2:2c:0d:a8:e0:ea:2c:de:
0f:32:e1:8b:76:69:2d:cd:0e:1a:52:b6:15:60:ea:
71:30:03:5b:06:4b:c9:1e:99:72:aa:b9:3a:e6:be:
97:21:e5:08:e8:00:5d:92:28:1a:02:ed:62:28:29:
f2:65:80:0e:4a:de:0d:42:53:d9:1e:21:f1:ab:39:
49:20:9c:d4:ac:69:44:40:8e:33:5b:0f:50:d7:cd:
23:8c:c1:56:93:79:c1:13:c0:5b:62:a0:09:58:3d:
72:05:59:cb:42:8f:82:5a:ce:42:03:bd:01:7c:a9:
f2:3b:aa:56:51:a2:79:05:5b:d0:3d:60:10:a6:1c:
c2:0e:01:62:c5:77:3e:76:1a:14:69:92:f9:6b:23:
3d:1d:ab:91:a4:0b:c4:aa:c5:13:3e:aa:78:dc:44:
dc:4c:e6:9b:ca:1b:c7:35:22:af:e9:64:2f:2e:bf:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:76:19:01:15:25:B4:07:06:D7:11:0F:F2:57:E0:A9:59:65:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
X509v3 Authority Key Identifier:
keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:0b:32:bd:6e:82:a2:8b:36:a2:ec:e1:a2:cd:84:70:f5:69:
23:db:c2:7b:d3:4e:d4:a5:ad:86:eb:ac:e2:f9:2f:82:37:83:
10:f2:4e:13:e4:c4:6d:5c:73:09:af:82:a1:ef:d5:4f:e6:b3:
ac:eb:d6:43:1a:c5:04:e7:d8:66:b3:cc:cb:11:43:43:1a:7a:
3a:04:76:4e:62:14:8f:d3:af:01:00:17:c8:c1:91:97:b6:c5:
38:93:fd:4f:fc:a1:b1:29:6a:7d:fb:e7:ab:7a:8c:16:18:27:
26:c3:2f:f4:64:34:72:71:2a:21:53:63:01:48:9d:17:df:87:
c4:82:a9:7d:ad:71:9c:c6:b7:d4:b2:61:a2:cd:59:08:ce:fc:
0a:69:10:1f:b8:f5:a1:4f:e5:b9:41:30:66:7b:8d:da:85:77:
30:5e:33:e9:d7:fb:f9:78:b9:c9:0e:38:cd:29:67:5f:2b:17:
b0:b5:d8:f0:8a:58:b3:2d:5a:1b:52:d3:e1:1e:12:fe:5f:56:
28:dd:12:a9:c6:56:62:1a:a7:7d:81:73:1f:cb:f7:7a:a3:66:
11:f2:40:2f:67:f1:96:48:ec:28:aa:be:18:ed:27:01:a2:0b:
76:3b:d2:b5:ae:a6:93:97:ab:1f:50:42:fa:a5:30:96:b1:01:
98:e1:41:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJ8LaA1AZodW84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiYmI2MWYtZmMxNy00ZDk2LWI5YzMtODg0MGJjZGQ0
MWMyMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmJmMmU5MzQtOWE1Mi00ZDFjLTkzY2UtMDI4YTVhYzEzZmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaD02ggGd0QdXZ4vglFACDLGZCshU4rGehPg
k8VHBsDUYbcq3BCtSPi3MkC+PIUVEaxgzgc8shp5Zg1xSF1el5a9ZMlmwmUA8Uv6
YAF2+sfW8iwNqODqLN4PMuGLdmktzQ4aUrYVYOpxMANbBkvJHplyqrk65r6XIeUI
6ABdkigaAu1iKCnyZYAOSt4NQlPZHiHxqzlJIJzUrGlEQI4zWw9Q180jjMFWk3nB
E8BbYqAJWD1yBVnLQo+CWs5CA70BfKnyO6pWUaJ5BVvQPWAQphzCDgFixXc+dhoU
aZL5ayM9HauRpAvEqsUTPqp43ETcTOabyhvHNSKv6WQvLr+JxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKGdhkBFSW0BwbXEQ/yV+CpWWVAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YmJi
YjYxZi1mYzE3LTRkOTYtYjljMy04ODQwYmNkZDQxYzIvY2U3ZDkxNTEtNDhlYS0z
NzAwLTg2ZDQtNDEwN2ZhMjk1ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGJiYmI2MWYtZmMxNy00ZDk2LWI5
YzMtODg0MGJjZGQ0MWMyLzRiYmJiNjFmLWZjMTctNGQ5Ni1iOWMzLTg4NDBiY2Rk
NDFjMi5jcmwwHwYDVR0jBBgwFoAUYA/TZQdk//P1Rg4iJtc7WhIoGOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YmJiYjYxZi1mYzE3LTRkOTYtYjljMy04ODQw
YmNkZDQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgLMr1ugqKLNqLs4aLNhHD1aSPbwnvTTtSlrYbrrOL5L4I3gxDyThPk
xG1ccwmvgqHv1U/ms6zr1kMaxQTn2GazzMsRQ0MaejoEdk5iFI/TrwEAF8jBkZe2
xTiT/U/8obEpan3756t6jBYYJybDL/RkNHJxKiFTYwFInRffh8SCqX2tcZzGt9Sy
YaLNWQjO/AppEB+49aFP5blBMGZ7jdqFdzBeM+nX+/l4uckOOM0pZ18rF7C12PCK
WLMtWhtS0+EeEv5fVijdEqnGVmIap32Bcx/L93qjZhHyQC9n8ZZI7CiqvhjtJwGi
C3Y70rWuppOXqx9QQvqlMJaxAZjhQaI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:39 2025 by rpki-client