Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa
File: 4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa (raw, json)
Hash identifier: aeehbHTxeHTJvYxOglqmiHp6Bd3/yd1pb2mpbqMilJU=
Subject key identifier: F6:EA:C3:65:7E:2B:48:6A:04:0D:6E:8A:EF:FD:31:BC:23:32:F3:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F046D5D21E240C2C2DD500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.22.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:46:d5:d2:1e:24:0c:2c:2d:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4b32aae3-c728-4768-b643-157719b22d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:4d:53:d6:77:11:52:61:79:46:2b:a0:21:
46:5c:43:db:e9:3d:c2:44:a3:70:ed:5a:8a:83:cf:
8f:92:21:00:a1:d9:8c:58:1d:ec:b8:20:d4:fa:47:
46:78:b4:c4:ff:db:d4:08:23:e7:48:e1:e8:36:49:
45:fd:fb:b2:9d:e8:06:8b:49:9f:3b:92:f4:9f:ed:
d5:4a:46:3d:9b:d1:62:0d:ef:a6:1c:2f:c3:a3:50:
3c:81:23:44:b0:96:7f:20:ac:4e:69:aa:21:e7:50:
00:af:4c:71:51:67:3f:7b:99:fc:69:24:9c:00:47:
49:62:2b:5e:a8:02:f3:25:f0:2b:9c:1e:9c:77:5d:
aa:29:45:da:9b:0c:b0:09:43:47:83:74:11:62:26:
46:33:91:2c:53:9a:07:69:5e:68:5e:42:11:2c:9b:
f0:66:59:f2:1e:fe:3a:2a:43:a3:00:73:7f:66:bd:
9d:13:07:12:6f:85:32:e7:d1:39:39:e2:d7:13:4b:
fb:dd:a8:5c:4d:43:0f:ea:94:2a:ad:ef:e0:41:90:
df:2e:9a:cf:cb:f0:9c:22:6a:d2:50:51:23:c1:f5:
b8:6f:5c:ce:03:0a:c5:98:14:be:2b:b2:f0:40:5d:
52:38:0f:3a:3e:24:ee:74:07:e6:30:94:04:74:39:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:C3:65:7E:2B:48:6A:04:0D:6E:8A:EF:FD:31:BC:23:32:F3:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.22.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:98:43:a9:6e:45:9e:8b:4c:f7:2b:a4:73:1a:15:3e:4b:1a:
63:e4:b5:27:8a:ca:fb:59:c1:4b:5e:c4:8c:6e:68:98:ac:e1:
22:b9:8e:0a:45:18:4f:eb:f7:22:12:24:c9:34:6a:51:fd:bc:
ec:9c:89:2d:99:80:8a:36:a1:63:89:4d:2a:ba:48:64:70:f1:
93:2a:99:b5:a2:49:e0:d9:9d:7b:b3:79:a6:d7:af:56:65:dd:
0b:4a:33:6c:a4:74:67:2c:f3:8a:24:97:5b:0a:f5:6e:4f:36:
4d:33:f2:a3:5f:1b:9e:63:e5:f3:46:f2:46:63:7b:98:14:cd:
8b:68:66:0a:51:7e:a5:1d:06:34:ed:bb:fb:40:03:77:4e:28:
ea:c9:45:42:f5:94:9f:ab:2e:cf:31:0d:dc:b8:8a:04:a1:3d:
0e:40:e8:23:27:75:4e:f7:41:af:87:62:f8:44:ee:0a:12:95:
5f:0c:b2:43:5f:68:6f:ca:ad:ee:61:d1:35:7e:36:8e:de:1c:
f7:c9:de:78:cc:74:30:7d:ef:b7:42:0b:b5:5f:a6:37:81:61:
61:12:63:45:17:d2:8b:10:9c:08:1d:a7:79:f5:2f:2d:3f:92:
37:05:67:41:71:14:ce:13:9f:dd:48:d5:79:e3:b9:18:96:70:
16:94:4a:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8EbV0h4kDCwt1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGIzMmFhZTMtYzcyOC00NzY4LWI2NDMtMTU3NzE5YjIyZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw5NU9Z3EVJheUYroCFGXEPb6T3CRKNw7VqK
g8+PkiEAodmMWB3suCDU+kdGeLTE/9vUCCPnSOHoNklF/fuynegGi0mfO5L0n+3V
SkY9m9FiDe+mHC/Do1A8gSNEsJZ/IKxOaaoh51AAr0xxUWc/e5n8aSScAEdJYite
qALzJfArnB6cd12qKUXamwywCUNHg3QRYiZGM5EsU5oHaV5oXkIRLJvwZlnyHv46
KkOjAHN/Zr2dEwcSb4Uy59E5OeLXE0v73ahcTUMP6pQqre/gQZDfLprPy/CcImrS
UFEjwfW4b1zOAwrFmBS+K7LwQF1SOA86PiTudAfmMJQEdDk4gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbqw2V+K0hqBA1uiu/9MbwjMvO5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk1NTI0MWMtM2Y3ZC0z
ZTYxLTk0YjMtMGZiZjA1YjkyZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiYQ6luRZ6LTPcrpHMaFT5LGmPktSeKyvtZwUtexIxuaJis4SK5jgpF
GE/r9yISJMk0alH9vOyciS2ZgIo2oWOJTSq6SGRw8ZMqmbWiSeDZnXuzeabXr1Zl
3QtKM2ykdGcs84okl1sK9W5PNk0z8qNfG55j5fNG8kZje5gUzYtoZgpRfqUdBjTt
u/tAA3dOKOrJRUL1lJ+rLs8xDdy4igShPQ5A6CMndU73Qa+HYvhE7goSlV8MskNf
aG/Kre5h0TV+No7eHPfJ3njMdDB977dCC7VfpjeBYWESY0UX0osQnAgdp3n1Ly0/
kjcFZ0FxFM4Tn91I1XnjuRiWcBaUSjI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:00 2025 by rpki-client