Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa
File: 0372aea9-be0b-3757-96b4-a238d1512e50.roa (raw, json)
Hash identifier: kMGygNXd4grt6bctITVu/X/yBUcBrW+ZgVpahdspcmY=
Subject key identifier: 3A:0A:5C:9C:29:89:04:0A:B6:3E:E3:00:D2:EB:FD:0A:75:82:FD:7F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F0534CA99A5C804A794F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.34.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:53:4c:a9:9a:5c:80:4a:79:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bd3d2e56-1a1c-4eef-b34b-62507ccd8047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:44:e2:f7:39:17:8b:df:d5:b3:65:bb:12:
87:d5:3c:e8:69:c7:c7:23:cd:6d:b9:64:3e:55:ea:
f7:45:28:94:38:b7:4d:27:7d:89:ea:eb:95:a1:63:
62:cc:9a:2c:31:5d:56:ac:06:f6:6e:5b:bb:15:5d:
2e:d3:80:25:83:c0:fb:da:6f:7f:de:07:07:9f:29:
1f:0e:96:46:94:fb:0d:22:26:97:45:7e:1e:18:26:
04:32:01:b9:56:92:2b:38:e4:12:c6:7c:51:6f:96:
11:bf:6d:f9:6b:f2:fb:f4:26:22:d4:14:e0:2f:86:
5d:37:6c:a8:33:f9:02:79:c3:5e:d4:1c:ed:25:11:
76:3f:35:1c:40:c3:40:8a:b5:dc:cc:a7:d3:95:53:
23:3d:88:84:66:a2:9e:9c:64:b6:57:39:ac:bf:b6:
dd:8f:5e:dc:32:66:f9:eb:ba:51:29:a7:13:c6:3c:
54:48:02:aa:e0:2e:a1:d6:7d:62:bc:07:35:7d:28:
d3:20:47:be:f7:3c:85:b1:c7:79:81:45:06:5d:ce:
e9:f4:de:9a:a7:e7:bb:fa:b4:27:c7:7f:0e:3b:fb:
b3:8f:97:96:ed:d6:32:37:70:4e:bf:c5:d8:67:f2:
2d:f4:0f:58:44:b3:36:07:a1:bd:f7:2d:d1:c5:80:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:5C:9C:29:89:04:0A:B6:3E:E3:00:D2:EB:FD:0A:75:82:FD:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.34.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:db:3c:3e:e2:39:a2:56:34:dc:20:4b:03:30:b8:35:3d:d5:
1c:e4:e1:ce:31:fe:7e:5a:73:cc:5e:9f:34:23:da:3d:fc:5a:
7b:1e:50:66:6b:84:2c:59:e6:67:e6:d5:67:39:9e:93:9b:9b:
b3:52:cc:9c:4e:9e:16:05:69:cb:76:f3:9e:e7:fc:f2:d1:ea:
e1:9a:47:7f:2c:32:c7:b2:57:c4:6f:8e:4f:d7:66:a0:c4:6a:
07:4a:9d:28:ab:ab:7b:db:fe:8c:6b:14:59:6d:33:a5:da:ff:
65:54:ab:75:46:d5:9d:af:ac:86:cb:e7:9a:0f:55:31:96:5d:
bb:76:b4:4a:dd:76:26:a2:a4:c3:cf:38:a6:b0:cc:4f:d3:08:
0e:72:da:cb:37:a6:22:22:e4:8a:15:1b:0e:d6:21:3e:01:bf:
60:8c:cc:b1:d6:95:f7:a5:28:47:47:33:e1:8e:20:74:6a:5d:
bf:84:e9:de:ed:f1:28:ca:4c:56:53:7d:7b:a5:99:66:19:57:
d3:a6:be:b6:2a:42:55:3a:4c:b5:bf:20:41:e9:0f:70:79:40:
a7:cd:75:4a:d2:dd:9f:40:47:96:d6:c4:f6:ef:53:5a:b8:2c:
ea:8c:1b:e0:6b:02:9c:de:4b:59:94:a0:30:69:25:5b:1a:8b:
6a:94:a4:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8FNMqZpcgEp5T4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YmQzZDJlNTYtMWExYy00ZWVmLWIzNGItNjI1MDdjY2Q4MDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9E4vc5F4vf1bNluxKH1TzoacfHI81tuWQ+
Ver3RSiUOLdNJ32J6uuVoWNizJosMV1WrAb2blu7FV0u04Alg8D72m9/3gcHnykf
DpZGlPsNIiaXRX4eGCYEMgG5VpIrOOQSxnxRb5YRv235a/L79CYi1BTgL4ZdN2yo
M/kCecNe1BztJRF2PzUcQMNAirXczKfTlVMjPYiEZqKenGS2Vzmsv7bdj17cMmb5
67pRKacTxjxUSAKq4C6h1n1ivAc1fSjTIEe+9zyFscd5gUUGXc7p9N6ap+e7+rQn
x38OO/uzj5eW7dYyN3BOv8XYZ/It9A9YRLM2B6G99y3RxYBK4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoKXJwpiQQKtj7jANLr/Qp1gv1/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDM3MmFlYTktYmUwYi0z
NzU3LTk2YjQtYTIzOGQxNTEyZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbCIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnbPD7iOaJWNNwgSwMwuDU91Rzk4c4x/n5ac8xenzQj2j38WnseUGZr
hCxZ5mfm1Wc5npObm7NSzJxOnhYFact2857n/PLR6uGaR38sMseyV8Rvjk/XZqDE
agdKnSirq3vb/oxrFFltM6Xa/2VUq3VG1Z2vrIbL55oPVTGWXbt2tErddiaipMPP
OKawzE/TCA5y2ss3piIi5IoVGw7WIT4Bv2CMzLHWlfelKEdHM+GOIHRqXb+E6d7t
8SjKTFZTfXulmWYZV9OmvrYqQlU6TLW/IEHpD3B5QKfNdUrS3Z9AR5bWxPbvU1q4
LOqMG+BrApzeS1mUoDBpJVsai2qUpBQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:30 2025 by rpki-client