Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa
File: 0572660c-7907-3fa4-b38a-51aed93af276.roa (raw, json)
Hash identifier: 7cnZtw2nKugLRrwXLgT5Urpn0ct4B+t0RfShbZs+B3E=
Subject key identifier: 91:D5:09:A7:A6:81:C1:FB:FE:32:C2:8D:57:1C:27:F9:95:2A:2F:AC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB8F6D7BF5BE494994A40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 208.76.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b8:f6:d7:bf:5b:e4:94:99:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c042783b-9e24-48ac-9dbc-5242498ff821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:95:bc:75:8d:8a:26:c4:21:47:3b:95:99:
31:d9:1a:2d:31:9f:37:ad:db:47:10:f6:39:29:d0:
1a:d8:64:d6:16:b2:f9:6f:52:28:b3:a2:3a:20:1b:
cc:f5:6c:0e:85:96:d3:5c:03:fe:dd:c4:b8:f7:7f:
c2:0d:5c:c6:ef:d6:59:6a:cf:d5:f2:f9:e2:73:68:
a9:96:da:f4:40:d5:96:1a:a1:19:6f:a2:3f:62:4f:
a8:3a:aa:ac:09:41:a8:61:0f:db:0d:3b:35:49:66:
b3:00:be:d9:3a:07:b2:00:33:35:a2:04:0f:cc:8a:
1f:70:11:a6:c9:69:17:fb:8e:d7:a1:65:aa:8c:76:
8d:d3:41:e8:40:07:f7:d7:ce:a8:82:3f:b7:46:df:
12:94:98:35:4b:32:72:ba:55:e0:f1:a7:d9:9e:12:
58:3f:7a:c4:e6:c9:2f:04:e4:99:54:70:24:4c:c9:
55:60:61:62:08:00:48:52:da:43:a5:23:49:6a:63:
fc:d4:dd:f2:db:15:a3:ec:1e:28:04:77:c6:ae:d6:
5d:9e:6f:22:ab:92:51:18:98:5b:cb:58:5b:a3:b6:
32:9e:ad:74:d0:38:d2:94:cf:10:94:06:c2:30:da:
59:41:41:00:3e:b5:8f:04:20:a6:e5:b6:07:60:85:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:09:A7:A6:81:C1:FB:FE:32:C2:8D:57:1C:27:F9:95:2A:2F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ab:2e:09:0e:03:fd:d4:12:f0:74:e2:eb:16:5c:f9:23:25:
fb:50:06:d8:c5:e0:37:67:9a:48:11:60:46:7d:41:c2:57:fa:
40:3a:3d:4a:f2:c0:30:19:72:8f:05:6c:2d:f0:45:2d:4a:c1:
b1:f7:63:f8:76:1d:b2:54:7e:a7:31:49:98:44:04:c4:2e:90:
e4:c2:cd:04:58:95:f7:d9:e2:b2:fa:90:b0:6a:7b:ff:8f:0a:
9d:ac:02:98:77:ef:0e:c3:7c:eb:19:f5:c8:db:4c:c4:fb:ad:
22:0f:51:de:0d:33:4a:b2:a9:b6:c7:a3:c6:8c:37:56:f2:6e:
af:13:e7:63:97:9b:dd:fb:7c:e2:65:8f:c8:4d:5e:bf:9d:1a:
22:d7:41:7c:20:d7:49:46:79:60:f4:bf:af:43:b4:cb:29:ec:
5a:f3:92:80:dc:50:3e:7c:6b:74:94:28:da:8b:b4:e1:6c:d5:
5e:6f:49:a7:41:7b:51:0e:85:e5:00:e9:9d:1f:ce:30:cf:18:
e8:f3:ba:3d:82:d4:6f:bc:b1:99:57:23:a2:1e:76:9b:53:e4:
34:d1:21:93:d0:34:63:b4:69:16:8e:95:8e:d4:2d:eb:41:9e:
a8:af:c6:bd:b0:02:fd:f5:93:6c:41:d8:10:b6:48:10:5a:44:
d7:70:d4:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrj2179b5JSZSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YzA0Mjc4M2ItOWUyNC00OGFjLTlkYmMtNTI0MjQ5OGZmODIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSyVvHWNiibEIUc7lZkx2RotMZ83rdtHEPY5
KdAa2GTWFrL5b1Ios6I6IBvM9WwOhZbTXAP+3cS493/CDVzG79ZZas/V8vnic2ip
ltr0QNWWGqEZb6I/Yk+oOqqsCUGoYQ/bDTs1SWazAL7ZOgeyADM1ogQPzIofcBGm
yWkX+47XoWWqjHaN00HoQAf3186ogj+3Rt8SlJg1SzJyulXg8afZnhJYP3rE5skv
BOSZVHAkTMlVYGFiCABIUtpDpSNJamP81N3y2xWj7B4oBHfGrtZdnm8iq5JRGJhb
y1hbo7Yynq100DjSlM8QlAbCMNpZQUEAPrWPBCCm5bYHYIWTLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHVCaemgcH7/jLCjVccJ/mVKi+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU3MjY2MGMtNzkwNy0z
ZmE0LWIzOGEtNTFhZWQ5M2FmMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAurLgkOA/3UEvB04usWXPkjJftQBtjF4DdnmkgRYEZ9QcJX+kA6PUry
wDAZco8FbC3wRS1KwbH3Y/h2HbJUfqcxSZhEBMQukOTCzQRYlffZ4rL6kLBqe/+P
Cp2sAph37w7DfOsZ9cjbTMT7rSIPUd4NM0qyqbbHo8aMN1bybq8T52OXm937fOJl
j8hNXr+dGiLXQXwg10lGeWD0v69DtMsp7FrzkoDcUD58a3SUKNqLtOFs1V5vSadB
e1EOheUA6Z0fzjDPGOjzuj2C1G+8sZlXI6IedptT5DTRIZPQNGO0aRaOlY7ULetB
nqivxr2wAv31k2xB2BC2SBBaRNdw1LQ=
-----END CERTIFICATE-----
Generated at Fri May 9 19:46:48 2025 by rpki-client