Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
File: 240473bb-16f3-3b73-b60e-9b8cba8004f0.roa (raw, json)
Hash identifier: BQyrdNa3mtw9qhTiX8okSGt8mVuuuyWlCMscVv36FOY=
Subject key identifier: D1:D0:65:12:FD:82:FB:9C:23:CD:D4:DB:E8:96:91:7E:F6:4A:55:AF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04B6F42E98D04899F6DB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 173.68.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4b:6f:42:e9:8d:04:89:9f:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=7675a059-648c-44cb-be32-dbd819d3888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:ef:68:30:32:4b:16:76:79:6e:8e:c7:f2:
01:85:5e:e0:27:b5:4c:6f:87:c7:d9:a0:f8:4a:0e:
33:80:1d:83:02:0c:28:86:82:fe:fe:72:df:2f:d2:
b4:4f:39:82:99:de:17:99:d7:bc:98:ef:ac:ca:e5:
04:bc:aa:5e:67:12:5a:56:3c:3d:45:8d:d4:4c:e7:
f1:6b:e3:26:9a:93:b7:6f:38:f0:58:70:72:e2:a5:
8d:9f:f2:b8:28:a5:54:32:a7:41:e1:3d:ce:59:c2:
ec:7d:fa:58:83:3f:95:dc:73:01:80:f3:54:d9:02:
0e:52:93:5a:5a:d8:89:ac:5a:ab:35:07:71:3a:f5:
53:0d:af:95:a7:48:76:68:f9:56:07:b0:7e:5f:51:
59:f9:b7:db:95:fe:cd:cf:7e:23:cd:2c:e9:c4:aa:
40:b8:a2:13:fb:b1:ed:a7:85:31:26:cb:f5:9b:6b:
9c:55:0a:51:7a:b9:7b:89:72:9b:bc:79:bb:d1:85:
a5:62:0c:ac:3e:43:d1:97:e0:bd:4e:be:c7:be:6d:
89:de:e6:75:d7:31:4d:80:09:5f:22:4e:26:04:14:
27:2d:ec:17:e2:49:75:8a:c6:fd:91:6a:09:49:7c:
be:0a:ed:59:e1:7a:5e:1b:60:0d:78:de:4c:ce:3e:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D0:65:12:FD:82:FB:9C:23:CD:D4:DB:E8:96:91:7E:F6:4A:55:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ca:a6:cf:ee:29:f4:bb:40:c1:ba:8d:b9:86:27:7e:6f:79:
38:b6:2a:9b:8c:bf:a1:8b:53:0d:1c:b9:86:df:2c:8c:8d:01:
1e:c0:b8:f7:f5:01:bb:84:61:6e:56:4e:18:35:4f:99:4b:29:
8a:9e:2d:69:62:8d:f3:56:89:98:e5:fc:fb:27:e0:a0:f6:76:
dc:6e:0a:56:1a:c8:d9:b9:a2:f9:29:f3:de:29:80:a1:b6:33:
10:b3:e8:e2:90:41:e3:83:74:07:31:d7:ed:f2:b4:7a:47:d0:
26:13:9e:6d:d2:11:d2:e6:18:bb:04:3d:46:be:37:db:b8:2c:
c5:88:29:2c:b8:88:95:00:04:35:06:ab:7e:4c:89:ba:fc:2f:
d0:47:5f:e6:c0:9b:c8:e2:60:fc:33:ec:9f:a8:7c:de:fc:f9:
ea:f8:39:c2:5a:f4:f5:77:2d:f9:38:d5:97:6e:8a:a3:0f:48:
71:a5:84:e8:c0:fe:35:1c:a7:70:7c:2b:b4:96:ff:d1:5a:cb:
db:36:ce:70:da:6e:57:4c:d5:14:46:8e:fa:ff:d4:e5:a2:e6:
84:aa:f9:ce:52:fe:d1:a2:fe:19:62:56:9d:dd:76:d0:be:f4:
8b:be:f5:6a:8d:f2:b0:df:a3:fb:39:4a:cb:99:ae:be:17:8d:
01:c2:08:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgy8EtvQumNBImfbbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzY3NWEwNTktNjQ4Yy00NGNiLWJlMzItZGJkODE5ZDM4ODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5/vaDAySxZ2eW6Ox/IBhV7gJ7VMb4fH2aD4
Sg4zgB2DAgwohoL+/nLfL9K0TzmCmd4Xmde8mO+syuUEvKpeZxJaVjw9RY3UTOfx
a+MmmpO3bzjwWHBy4qWNn/K4KKVUMqdB4T3OWcLsffpYgz+V3HMBgPNU2QIOUpNa
WtiJrFqrNQdxOvVTDa+Vp0h2aPlWB7B+X1FZ+bfblf7Nz34jzSzpxKpAuKIT+7Ht
p4UxJsv1m2ucVQpRerl7iXKbvHm70YWlYgysPkPRl+C9Tr7Hvm2J3uZ11zFNgAlf
Ik4mBBQnLewX4kl1isb9kWoJSXy+Cu1Z4XpeG2ANeN5Mzj7/CwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNHQZRL9gvucI83U2+iWkX72SlWvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQwNDczYmItMTZmMy0z
YjczLWI2MGUtOWI4Y2JhODAwNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArUQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfMqmz+4p9LtAwbqNuYYnfm95OLYqm4y/oYtTDRy5ht8sjI0BHsC49/UB
u4RhblZOGDVPmUspip4taWKN81aJmOX8+yfgoPZ23G4KVhrI2bmi+Snz3imAobYz
ELPo4pBB44N0BzHX7fK0ekfQJhOebdIR0uYYuwQ9Rr4327gsxYgpLLiIlQAENQar
fkyJuvwv0Edf5sCbyOJg/DPsn6h83vz56vg5wlr09Xct+TjVl26Kow9IcaWE6MD+
NRyncHwrtJb/0VrL2zbOcNpuV0zVFEaO+v/U5aLmhKr5zlL+0aL+GWJWnd120L70
i771ao3ysN+j+zlKy5muvheNAcIIbw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:49 2025 by rpki-client