Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa
File: 3e8428da-4bb0-3004-a4f0-036494ab9343.roa (raw, json)
Hash identifier: uY2tqsORtLi4iXqnCe/OvicaWKmmJOwrEqvFIXWDH+E=
Subject key identifier: 10:F4:E7:7E:63:7C:35:86:49:E8:30:AA:93:C9:5A:61:F6:36:7B:2E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56F1EC59151A830956C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.236.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6f:1e:c5:91:51:a8:30:95:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=32a60d7b-eaab-4ab0-9c05-836040eb39a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:0f:7c:fa:a3:d4:a8:66:20:39:48:98:3d:
49:5b:f8:89:10:e6:e1:e9:ab:f2:dc:88:4f:22:88:
47:a7:64:a7:46:dd:c6:c5:a3:df:ae:fa:c8:ce:60:
e2:78:01:f2:ab:77:ea:f9:22:6d:20:0a:a6:63:e8:
44:66:ba:cf:cd:d1:a7:f0:f3:85:41:05:cd:a9:48:
c4:48:a6:88:0c:e1:36:c7:fb:a3:3d:ca:2c:46:98:
6e:94:7c:d3:ab:42:ce:4e:89:34:66:8b:96:cb:46:
92:8a:fc:4f:2f:c5:10:db:42:70:42:98:c9:88:8b:
0f:2e:0f:9d:11:7a:73:14:50:00:4f:d6:c7:f7:03:
66:4e:54:78:42:85:cf:41:26:dc:bb:99:bb:44:54:
41:54:02:30:4b:b9:c4:49:ab:37:0d:e1:71:64:8f:
f9:d9:04:f9:5b:5d:2b:2c:eb:ee:f7:d7:8e:a4:bd:
55:f6:b8:7f:60:17:ba:ff:c2:86:21:6b:c4:0a:e9:
58:83:98:4f:b9:b4:b6:05:34:33:42:f5:4e:c5:e5:
e2:1d:82:cf:36:4b:2e:e1:a7:d6:39:68:c1:ad:ef:
b5:71:aa:1e:9b:70:80:97:f5:6c:be:66:47:5f:55:
cd:34:6a:e7:92:ab:c9:a7:33:79:f9:1a:f7:03:7c:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:E7:7E:63:7C:35:86:49:E8:30:AA:93:C9:5A:61:F6:36:7B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e8428da-4bb0-3004-a4f0-036494ab9343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.236.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:07:61:65:7b:d7:55:71:88:7d:13:8f:3c:44:50:3f:0a:c8:
98:7a:e1:7b:de:18:a4:15:32:84:5a:15:0c:4e:bf:43:74:d5:
b6:ab:9a:1d:66:70:79:43:5b:e9:18:24:6f:d7:3d:34:8c:9c:
56:8f:6e:11:71:a0:a8:21:86:ec:1b:d5:e8:e2:ef:eb:d6:0f:
20:d3:bd:1f:68:c9:a5:34:16:56:40:37:b6:59:5b:a9:61:5b:
f5:73:ca:67:c2:6c:c5:6c:e3:2e:55:70:cf:4f:d9:fc:9e:87:
ee:1d:0f:25:48:a9:ea:2d:6f:fc:3b:4f:8b:d1:27:e0:8e:46:
e4:08:3a:e1:29:c8:d9:89:24:44:79:63:e4:93:88:7f:e9:58:
b9:5d:dd:f4:a5:7a:61:a8:e0:0e:74:39:33:ca:37:ab:99:0c:
b5:f8:fb:4b:26:97:90:5f:f8:9c:55:7b:fa:74:e9:88:9a:3b:
fc:5b:84:8f:8d:dc:fa:a2:08:83:90:88:f1:ce:1a:cf:dc:be:
51:cf:1c:66:ec:8c:0a:96:59:5d:9e:b0:b2:46:e8:55:08:ac:
18:f6:57:48:9e:17:14:a7:02:be:dc:bf:8b:61:5e:63:00:a3:
b9:e3:c8:9b:0e:a8:24:d1:46:c3:ff:3b:ac:4d:0a:15:96:73:
dd:0c:49:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9W8exZFRqDCVbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MzJhNjBkN2ItZWFhYi00YWIwLTljMDUtODM2MDQwZWIzOWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSYPfPqj1KhmIDlImD1JW/iJEObh6avy3IhP
IohHp2SnRt3GxaPfrvrIzmDieAHyq3fq+SJtIAqmY+hEZrrPzdGn8POFQQXNqUjE
SKaIDOE2x/ujPcosRphulHzTq0LOTok0ZouWy0aSivxPL8UQ20JwQpjJiIsPLg+d
EXpzFFAAT9bH9wNmTlR4QoXPQSbcu5m7RFRBVAIwS7nESas3DeFxZI/52QT5W10r
LOvu99eOpL1V9rh/YBe6/8KGIWvECulYg5hPubS2BTQzQvVOxeXiHYLPNksu4afW
OWjBre+1caoem3CAl/VsvmZHX1XNNGrnkqvJpzN5+Rr3A3wjrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBD0535jfDWGSegwqpPJWmH2NnsuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U4NDI4ZGEtNGJiMC0z
MDA0LWE0ZjAtMDM2NDk0YWI5MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYOyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcHYWV711VxiH0TjzxEUD8KyJh64XveGKQVMoRaFQxOv0N01barmh1m
cHlDW+kYJG/XPTSMnFaPbhFxoKghhuwb1eji7+vWDyDTvR9oyaU0FlZAN7ZZW6lh
W/VzymfCbMVs4y5VcM9P2fyeh+4dDyVIqeotb/w7T4vRJ+CORuQIOuEpyNmJJER5
Y+STiH/pWLld3fSlemGo4A50OTPKN6uZDLX4+0sml5Bf+JxVe/p06YiaO/xbhI+N
3PqiCIOQiPHOGs/cvlHPHGbsjAqWWV2esLJG6FUIrBj2V0ieFxSnAr7cv4thXmMA
o7njyJsOqCTRRsP/O6xNChWWc90MSYM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:47 2025 by rpki-client