Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0843127c-ce76-3285-909e-9012afe01881.roa
File: 0843127c-ce76-3285-909e-9012afe01881.roa (raw, json)
Hash identifier: YHrzXB5LohDePsnoE7ELmGIqhMkWBmMJR03FMQR6OpQ=
Subject key identifier: 26:DA:2E:1A:34:66:C2:25:AD:D5:FD:67:46:D0:B6:6A:F8:41:55:10
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F0523C89A78EFE65362500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0843127c-ce76-3285-909e-9012afe01881.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 96.244.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:52:3c:89:a7:8e:fe:65:36:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=cbb9e2da-407a-467f-9ff5-adc8c69485b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:92:d0:47:03:2e:70:87:76:69:53:21:c3:
31:4c:fb:8c:06:b8:8c:7e:1c:ec:80:7d:cc:1f:89:
7e:a3:b0:3f:b7:66:46:9f:65:f0:2c:bd:3b:1d:4a:
01:5f:87:5a:db:8e:84:fc:44:ee:c9:e7:9d:94:21:
71:3f:43:fe:0e:25:f3:41:91:98:35:70:6a:3a:61:
60:35:53:cc:e7:20:d7:73:c9:eb:c6:2d:92:91:94:
27:e2:e9:29:bf:37:88:16:a0:7f:09:ac:54:72:ad:
26:6b:6a:c7:ca:e7:54:27:a5:13:8e:ff:18:30:5f:
c5:06:73:d1:39:49:a6:2b:2b:53:0d:63:03:69:03:
3c:92:ee:59:4a:2f:72:7e:bd:f0:d9:cc:55:d7:73:
5d:bf:3a:7d:cd:4b:7c:ad:5f:69:5c:44:d5:5b:60:
d9:d2:0f:a5:81:26:0c:08:b0:dc:4c:76:2a:fe:0b:
00:63:df:81:92:eb:02:12:10:fc:79:5c:d3:94:89:
a5:84:ca:43:e8:ef:74:94:c5:9b:90:52:97:df:35:
b0:40:fb:b4:33:2b:2d:c7:24:a0:dc:9a:af:d0:64:
c8:e9:d8:5e:70:5d:ee:27:f8:a9:f6:c8:aa:ef:02:
01:1a:a0:2f:25:45:89:b4:87:95:45:57:7b:b4:bc:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:2E:1A:34:66:C2:25:AD:D5:FD:67:46:D0:B6:6A:F8:41:55:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0843127c-ce76-3285-909e-9012afe01881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.244.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:fd:3c:6d:ec:91:aa:ce:83:46:31:b3:58:58:05:92:60:89:
f2:ae:7f:fa:bf:93:79:81:b6:d4:3a:89:96:05:8f:ef:0d:c5:
8a:ab:df:45:a7:24:7c:19:04:d0:ba:af:10:d5:97:9a:11:22:
2d:5e:e1:a1:66:43:9b:9e:17:a3:f0:63:44:e1:af:3c:5a:51:
c4:2d:4f:10:f1:78:ae:ab:a3:86:5d:d9:eb:a9:bd:70:1c:ce:
9f:76:0f:97:ed:57:24:7c:8f:27:15:5c:ad:4a:7e:d9:9f:e1:
6a:3a:93:d7:4c:be:b3:72:90:f9:d7:d1:25:b0:fa:12:22:04:
97:bb:b7:83:44:5a:d1:f6:d2:b5:7a:b4:7a:d6:35:24:4c:4b:
09:e9:64:03:fe:95:ce:3a:97:f4:8d:9a:4b:59:46:7b:b4:c4:
bb:2e:77:c3:9b:e3:23:41:54:eb:78:d5:f4:bf:1f:a8:47:83:
c2:18:df:cb:1d:e4:94:16:a7:b8:02:37:8b:d1:22:6c:c0:70:
f8:d6:8d:64:4e:42:59:f9:fb:c9:50:56:6f:53:a0:4e:21:df:
94:ab:5c:25:b9:7a:69:dd:92:55:14:16:54:c9:83:66:2c:1d:
3c:01:60:a9:6a:fd:8f:61:10:0e:eb:be:a1:8e:b8:8a:69:8a:
35:72:55:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgy8FI8iaeO/mU2JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
Y2JiOWUyZGEtNDA3YS00NjdmLTlmZjUtYWRjOGM2OTQ4NWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3+S0EcDLnCHdmlTIcMxTPuMBriMfhzsgH3M
H4l+o7A/t2ZGn2XwLL07HUoBX4da246E/ETuyeedlCFxP0P+DiXzQZGYNXBqOmFg
NVPM5yDXc8nrxi2SkZQn4ukpvzeIFqB/CaxUcq0ma2rHyudUJ6UTjv8YMF/FBnPR
OUmmKytTDWMDaQM8ku5ZSi9yfr3w2cxV13Ndvzp9zUt8rV9pXETVW2DZ0g+lgSYM
CLDcTHYq/gsAY9+BkusCEhD8eVzTlImlhMpD6O90lMWbkFKX3zWwQPu0MystxySg
3Jqv0GTI6dhecF3uJ/ip9siq7wIBGqAvJUWJtIeVRVd7tLxVPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCbaLho0ZsIlrdX9Z0bQtmr4QVUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDg0MzEyN2MtY2U3Ni0z
Mjg1LTkwOWUtOTAxMmFmZTAxODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYPQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg/08beyRqs6DRjGzWFgFkmCJ8q5/+r+TeYG21DqJlgWP7w3FiqvfRack
fBkE0LqvENWXmhEiLV7hoWZDm54Xo/BjROGvPFpRxC1PEPF4rqujhl3Z66m9cBzO
n3YPl+1XJHyPJxVcrUp+2Z/hajqT10y+s3KQ+dfRJbD6EiIEl7u3g0Ra0fbStXq0
etY1JExLCelkA/6VzjqX9I2aS1lGe7TEuy53w5vjI0FU63jV9L8fqEeDwhjfyx3k
lBanuAI3i9EibMBw+NaNZE5CWfn7yVBWb1OgTiHflKtcJbl6ad2SVRQWVMmDZiwd
PAFgqWr9j2EQDuu+oY64immKNXJVhA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:53:19 2025 by rpki-client