Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04327819-8adc-3c99-a552-db6a69d347b7.roa
File: 04327819-8adc-3c99-a552-db6a69d347b7.roa (raw, json)
Hash identifier: FMhsQiMjaPp1ybKRbt+Qg1p3U01NTBqVhCljN9yFV7k=
Subject key identifier: C7:E9:9D:5F:61:78:63:91:9C:4E:EE:48:4D:F3:4D:2A:99:67:79:82
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04EBB5165F83F0579AD60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04327819-8adc-3c99-a552-db6a69d347b7.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 96.233.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4e:bb:51:65:f8:3f:05:79:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9d55c164-f9f2-4895-8845-f6cbfed1dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:79:ca:6e:35:03:a9:25:75:12:d9:60:9c:
26:5b:04:cb:76:e8:57:06:a2:a9:57:af:f0:7b:1f:
bd:92:d5:74:a4:92:43:2b:15:be:c1:f8:ff:76:bb:
d0:7c:41:03:9d:ea:4e:21:01:4a:16:17:86:cb:af:
de:09:0d:89:70:6e:c1:fa:cb:f2:56:c5:cc:fc:7f:
1a:3c:10:f1:94:fb:7e:06:d8:b6:3f:01:2a:2f:24:
82:31:50:be:b2:95:22:f7:38:b5:b8:c0:b1:e3:70:
42:3d:08:c9:35:73:dc:5f:19:78:91:78:5c:ab:39:
94:57:31:7f:20:9a:22:ec:d9:63:0c:84:60:d8:da:
7c:04:5a:9c:f5:9a:cf:86:8f:6b:44:5d:f3:23:67:
e8:4f:1c:02:c5:c9:6b:5b:87:21:d7:80:52:53:e0:
22:08:31:be:69:6b:3c:d0:6d:ec:91:75:75:19:e4:
50:74:af:e3:39:b4:90:3e:b4:37:3d:9d:6f:75:7e:
c5:02:bd:33:a3:67:18:1e:56:f4:72:24:ba:56:8f:
d7:03:cf:a5:fc:12:cb:61:8a:a9:82:19:78:35:9e:
0f:9c:9c:59:79:4f:70:95:30:e6:51:c5:32:1b:da:
32:72:c7:cd:aa:1d:7a:6a:72:47:a9:0b:9d:41:3d:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:9D:5F:61:78:63:91:9C:4E:EE:48:4D:F3:4D:2A:99:67:79:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04327819-8adc-3c99-a552-db6a69d347b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.233.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:01:49:8d:43:65:6f:74:f6:66:1b:43:4c:bd:a0:d5:d7:a4:
7b:79:5d:7e:a2:f2:76:bc:ac:6f:ea:02:78:01:6c:91:56:bd:
77:c6:a9:99:8d:b7:ca:16:3b:b3:25:bd:ed:67:b2:9f:8e:3c:
f2:c0:c1:e9:c1:8e:f3:54:df:66:a0:d1:b2:12:cb:ad:a3:36:
24:ce:ae:ce:e6:c3:dc:dc:13:8d:a4:82:f9:0f:2d:cc:0e:a0:
63:b5:0d:36:e1:c1:07:dc:10:de:d2:0c:18:11:98:42:f3:41:
d3:a9:eb:c6:5c:88:b9:f0:6d:cd:2c:6e:98:24:98:a7:9e:b2:
7a:38:56:59:ea:f3:65:db:fd:e3:3d:a2:e2:07:99:1e:c7:d5:
65:a4:9c:1f:11:9a:e1:53:1a:57:46:20:34:6d:61:b2:10:45:
d8:13:51:b6:80:05:e2:72:f4:02:52:e4:95:1a:43:b8:7a:44:
88:1d:3a:9e:dd:90:9c:95:5c:99:ff:1e:40:15:bf:fc:44:b5:
f8:2c:bb:96:fd:72:32:af:4e:d5:cc:c4:50:b6:24:f8:1e:2f:
3c:41:1b:87:f6:52:96:2e:ff:8e:cb:6f:14:d2:fc:7c:27:2b:
48:d5:7a:92:34:3a:9e:a6:26:4d:ed:50:a2:87:1a:37:f5:9f:
15:be:fa:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8E67UWX4PwV5rWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWQ1NWMxNjQtZjlmMi00ODk1LTg4NDUtZjZjYmZlZDFkY2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCt5ym41A6kldRLZYJwmWwTLduhXBqKpV6/w
ex+9ktV0pJJDKxW+wfj/drvQfEEDnepOIQFKFheGy6/eCQ2JcG7B+svyVsXM/H8a
PBDxlPt+Bti2PwEqLySCMVC+spUi9zi1uMCx43BCPQjJNXPcXxl4kXhcqzmUVzF/
IJoi7NljDIRg2Np8BFqc9ZrPho9rRF3zI2foTxwCxclrW4ch14BSU+AiCDG+aWs8
0G3skXV1GeRQdK/jObSQPrQ3PZ1vdX7FAr0zo2cYHlb0ciS6Vo/XA8+l/BLLYYqp
ghl4NZ4PnJxZeU9wlTDmUcUyG9oycsfNqh16anJHqQudQT0rnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfpnV9heGORnE7uSE3zTSqZZ3mCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQzMjc4MTktOGFkYy0z
Yzk5LWE1NTItZGI2YTY5ZDM0N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYOmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkBSY1DZW909mYbQ0y9oNXXpHt5XX6i8na8rG/qAngBbJFWvXfGqZmN
t8oWO7Mlve1nsp+OPPLAwenBjvNU32ag0bISy62jNiTOrs7mw9zcE42kgvkPLcwO
oGO1DTbhwQfcEN7SDBgRmELzQdOp68ZciLnwbc0sbpgkmKeesno4Vlnq82Xb/eM9
ouIHmR7H1WWknB8RmuFTGldGIDRtYbIQRdgTUbaABeJy9AJS5JUaQ7h6RIgdOp7d
kJyVXJn/HkAVv/xEtfgsu5b9cjKvTtXMxFC2JPgeLzxBG4f2UpYu/47LbxTS/Hwn
K0jVepI0Op6mJk3tUKKHGjf1nxW++u0=
-----END CERTIFICATE-----
Generated at Wed May 7 21:48:10 2025 by rpki-client