Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
File: 28ac0bee-45dc-3518-a38b-05a97ff4db29.roa (raw, json)
Hash identifier: mgKAjv0FhiF+qYXuicDqDSJe9Es+Ai35PfK+W1eZ/JE=
Subject key identifier: B1:B8:B7:75:AF:4B:AA:66:24:BC:A2:00:C7:D6:6F:7F:38:75:01:68
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF55FE13CC1EBD53EBE3900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.123.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5f:e1:3c:c1:eb:d5:3e:be:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=419fd57b-7f19-4528-aa9a-b6aad147de03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:42:aa:e0:ee:4f:8d:e3:45:34:03:ac:09:
fe:23:6c:70:79:69:0e:77:a7:51:42:0c:f6:e9:eb:
3a:b9:4f:f6:6d:a5:3e:e3:64:91:95:3c:7e:0f:fa:
a7:c8:f9:20:69:b0:9e:bd:1f:c6:e3:19:7f:98:90:
b5:79:e2:32:58:07:2b:af:98:8e:ba:c3:7f:cc:ed:
9c:c4:8b:92:df:39:76:aa:94:e1:1c:74:c7:88:7d:
c5:c3:78:d3:b6:97:62:b5:e1:c2:a9:73:dd:72:4a:
08:64:59:f2:1b:b0:da:d8:4c:be:b5:c0:6b:b1:a7:
a3:85:69:57:38:85:6b:73:85:53:0d:70:98:56:de:
98:da:cd:d8:47:3f:7a:55:47:9c:ec:9e:02:1a:a0:
06:45:28:26:03:88:e4:fc:85:99:47:20:26:dd:02:
7b:e3:fc:7f:13:9d:6e:be:f1:2a:5a:86:1b:fa:74:
4f:ae:10:58:ff:d4:1c:66:38:7c:6c:ab:1d:ff:7a:
a0:b3:de:f5:6e:1c:51:b8:5a:c7:91:30:88:db:15:
79:a7:14:98:63:dd:53:3e:cf:d9:6d:e3:52:c2:a5:
00:dc:70:f7:bc:b6:89:35:33:34:2f:ad:86:4d:f8:
6a:ee:04:25:1c:f9:83:9b:fd:14:b8:f1:4b:0c:5b:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B8:B7:75:AF:4B:AA:66:24:BC:A2:00:C7:D6:6F:7F:38:75:01:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28ac0bee-45dc-3518-a38b-05a97ff4db29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.123.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:48:80:dc:42:17:81:ac:b7:52:86:1c:96:b2:54:31:64:b6:
b3:94:f7:5e:27:94:a3:37:22:75:e4:f4:7b:17:4d:38:ad:17:
22:79:17:f1:d3:05:19:05:57:ee:59:34:c6:19:c4:44:80:23:
27:8f:52:50:8b:ec:05:3c:68:2c:89:db:ae:f1:c0:38:a6:aa:
69:8e:92:42:bd:97:52:5e:d1:0f:f8:7d:62:8d:ab:a9:fa:f7:
03:4d:f4:9a:51:a0:93:7b:a1:42:fe:25:55:87:3d:7b:a3:b1:
8e:53:7c:52:9f:84:b5:05:55:7b:fa:35:a0:b3:39:e5:aa:34:
85:a9:c4:64:20:d4:fe:1d:48:a9:38:09:dd:b8:8b:4e:d3:6a:
44:d2:c2:89:60:b7:38:ce:1a:ab:db:da:6b:e9:d8:6d:43:b1:
ad:a3:2e:11:54:2d:1c:36:29:0a:8f:56:17:18:55:a8:55:55:
24:57:00:db:0c:e7:cc:93:a9:8c:b0:7e:95:8e:47:17:bc:0e:
bb:be:9e:c1:21:8c:27:60:21:c0:7b:0f:cb:52:da:a9:b3:1e:
15:7e:71:92:72:8b:9d:bd:b0:72:3e:34:1d:9d:d8:d0:20:d6:
ab:73:b5:79:5c:2d:1e:e3:72:fb:93:98:23:2e:60:d6:df:6b:
ad:cc:ea:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9V/hPMHr1T6+OQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDE5ZmQ1N2ItN2YxOS00NTI4LWFhOWEtYjZhYWQxNDdkZTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYRCquDuT43jRTQDrAn+I2xweWkOd6dRQgz2
6es6uU/2baU+42SRlTx+D/qnyPkgabCevR/G4xl/mJC1eeIyWAcrr5iOusN/zO2c
xIuS3zl2qpThHHTHiH3Fw3jTtpditeHCqXPdckoIZFnyG7Da2Ey+tcBrsaejhWlX
OIVrc4VTDXCYVt6Y2s3YRz96VUec7J4CGqAGRSgmA4jk/IWZRyAm3QJ74/x/E51u
vvEqWoYb+nRPrhBY/9QcZjh8bKsd/3qgs971bhxRuFrHkTCI2xV5pxSYY91TPs/Z
beNSwqUA3HD3vLaJNTM0L62GTfhq7gQlHPmDm/0UuPFLDFsqnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLG4t3WvS6pmJLyiAMfWb384dQFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhhYzBiZWUtNDVkYy0z
NTE4LWEzOGItMDVhOTdmZjRkYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR3tAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFIgNxCF4Gst1KGHJayVDFktrOU914nlKM3InXk9HsXTTitFyJ5F/HT
BRkFV+5ZNMYZxESAIyePUlCL7AU8aCyJ267xwDimqmmOkkK9l1Je0Q/4fWKNq6n6
9wNN9JpRoJN7oUL+JVWHPXujsY5TfFKfhLUFVXv6NaCzOeWqNIWpxGQg1P4dSKk4
Cd24i07TakTSwolgtzjOGqvb2mvp2G1Dsa2jLhFULRw2KQqPVhcYVahVVSRXANsM
58yTqYywfpWORxe8Dru+nsEhjCdgIcB7D8tS2qmzHhV+cZJyi529sHI+NB2d2NAg
1qtztXlcLR7jcvuTmCMuYNbfa63M6rI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:10 2025 by rpki-client