Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101149f1-0899-375e-a8b3-a0ac32db0476.roa
File: 101149f1-0899-375e-a8b3-a0ac32db0476.roa (raw, json)
Hash identifier: FMRdOQMo+rc8JJ2BogvgXEEmX4XJpsHzmcjvwDc6cyk=
Subject key identifier: DC:34:1F:EC:BE:47:19:B9:FD:AC:74:49:C6:C7:38:E0:07:D7:DB:34
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F043AB6C99773387C75380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101149f1-0899-375e-a8b3-a0ac32db0476.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 71.245.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:43:ab:6c:99:77:33:87:c7:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b2c13dd4-a37c-41f4-be43-c1f9a84f295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:25:2d:0b:c3:95:01:f7:57:28:bf:56:ce:
e9:60:0d:9e:58:04:d6:e1:25:77:64:dd:37:b3:b0:
26:e0:41:53:52:78:03:b5:86:a6:0d:d8:f4:9e:51:
47:48:c0:bb:b2:0f:5e:e0:b4:ea:f3:15:1c:98:3b:
13:2b:62:d5:75:2a:b3:d2:9d:2b:cd:b8:bc:67:87:
a1:a7:19:d3:6b:89:c9:fd:a9:00:42:3a:b4:fa:61:
e2:97:d1:10:d2:df:29:3d:57:96:5f:f3:f0:2e:53:
ec:c5:3d:ba:d6:97:41:a9:2c:56:7b:95:69:7d:61:
5c:e0:4c:89:42:fe:35:be:cd:f8:eb:5e:2d:9f:ae:
18:f9:d5:9d:e0:a1:8d:dd:ab:51:aa:4a:55:df:39:
4f:e7:4c:54:16:92:d4:b7:12:1e:16:63:fd:6a:b1:
13:da:a9:a8:b4:80:04:91:a4:e8:69:5a:cc:21:17:
59:19:b9:29:bd:e5:25:b7:0b:3e:9e:6f:89:8b:f2:
e8:c7:53:e4:be:21:3d:17:a5:f0:fa:40:d6:96:49:
07:38:77:6d:3c:25:01:02:be:af:eb:11:77:f5:86:
2e:14:ed:cc:c0:99:30:d6:08:1e:f3:b8:98:4c:0b:
d8:f9:a6:fe:c0:fe:c6:1e:d9:a1:42:a6:05:8c:47:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:1F:EC:BE:47:19:B9:FD:AC:74:49:C6:C7:38:E0:07:D7:DB:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101149f1-0899-375e-a8b3-a0ac32db0476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.245.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:dd:ed:75:6b:85:2c:04:aa:b3:da:d6:d0:d3:52:23:88:3a:
13:81:95:0a:d3:b4:6b:e3:e6:4b:d1:06:d4:25:a3:37:4d:8b:
a9:c6:d9:49:04:6e:36:05:07:72:31:3c:ff:b1:d4:63:2a:94:
27:e1:2b:18:c6:6d:de:70:33:30:53:f7:d9:fb:85:15:3a:90:
fe:b8:96:58:d8:73:4a:36:6a:e0:bb:02:9a:2e:8d:41:4f:e7:
fb:ff:10:2b:f3:07:e9:d9:9d:36:29:ed:fc:70:39:16:d7:fb:
22:9b:36:27:94:6c:89:ef:8e:6e:7d:d8:17:15:cc:12:32:ac:
29:e5:18:29:54:fb:26:5d:88:b8:92:11:01:c3:2e:0c:83:3c:
cb:03:c0:38:44:64:d3:0a:93:bd:ee:96:56:2b:66:c1:d9:34:
07:0d:c5:e4:e5:09:5b:57:71:97:8a:c5:84:c2:ba:e4:fe:83:
b6:f9:cf:c7:4a:b8:41:04:59:af:5c:13:70:b8:43:aa:b3:b9:
cb:ce:20:e5:0d:3f:0b:0f:d1:38:ce:63:28:1e:ef:ea:9f:75:
e6:cc:20:df:c2:f6:d4:ca:a6:64:d9:74:ea:1e:2a:a5:ec:dd:
71:cf:3a:2d:71:65:e8:5e:71:cd:b5:81:d5:63:cc:09:e1:2c:
0b:ea:f1:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8EOrbJl3M4fHU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjJjMTNkZDQtYTM3Yy00MWY0LWJlNDMtYzFmOWE4NGYyOTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPslLQvDlQH3Vyi/Vs7pYA2eWATW4SV3ZN03
s7Am4EFTUngDtYamDdj0nlFHSMC7sg9e4LTq8xUcmDsTK2LVdSqz0p0rzbi8Z4eh
pxnTa4nJ/akAQjq0+mHil9EQ0t8pPVeWX/PwLlPsxT261pdBqSxWe5VpfWFc4EyJ
Qv41vs34614tn64Y+dWd4KGN3atRqkpV3zlP50xUFpLUtxIeFmP9arET2qmotIAE
kaToaVrMIRdZGbkpveUltws+nm+Ji/Lox1PkviE9F6Xw+kDWlkkHOHdtPCUBAr6v
6xF39YYuFO3MwJkw1gge87iYTAvY+ab+wP7GHtmhQqYFjEc+WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNw0H+y+Rxm5/ax0ScbHOOAH19s0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTAxMTQ5ZjEtMDg5OS0z
NzVlLWE4YjMtYTBhYzMyZGIwNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjd7XVrhSwEqrPa1tDTUiOIOhOBlQrTtGvj5kvRBtQlozdNi6nG2UkE
bjYFB3IxPP+x1GMqlCfhKxjGbd5wMzBT99n7hRU6kP64lljYc0o2auC7ApoujUFP
5/v/ECvzB+nZnTYp7fxwORbX+yKbNieUbInvjm592BcVzBIyrCnlGClU+yZdiLiS
EQHDLgyDPMsDwDhEZNMKk73ullYrZsHZNAcNxeTlCVtXcZeKxYTCuuT+g7b5z8dK
uEEEWa9cE3C4Q6qzucvOIOUNPwsP0TjOYyge7+qfdebMIN/C9tTKpmTZdOoeKqXs
3XHPOi1xZehecc21gdVjzAnhLAvq8aM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:47 2025 by rpki-client