Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6ab4e-b587-3eaf-8bdc-4f1ef38fb5dd.roa
File: 4cd6ab4e-b587-3eaf-8bdc-4f1ef38fb5dd.roa (raw, json)
Hash identifier: Ml+xClUWytGOpknA8ovAl/IjWI6kcFnUb1e/uyBPXoY=
Subject key identifier: 9E:97:35:1B:64:4D:67:7B:5B:9F:20:D7:CA:08:1C:08:E7:84:62:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B5DBC6AB14FDF5DC9D800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6ab4e-b587-3eaf-8bdc-4f1ef38fb5dd.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.197.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5d:bc:6a:b1:4f:df:5d:c9:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=0e3c8d3c-0fa5-4db9-9056-5e47ceb4ed54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:e5:d1:0a:42:4f:65:ff:7a:6a:c4:66:e3:
bd:fd:d1:49:d4:ee:1a:b6:ae:8a:f2:24:91:70:a9:
7a:07:2d:9b:ed:f0:19:90:5a:61:11:2c:e4:b2:67:
ca:ee:00:d7:c0:1b:72:79:ef:dd:36:15:e1:e3:fb:
64:6b:58:19:b3:de:6e:37:c7:1e:f1:c2:f0:85:2d:
2d:2f:5f:ac:e8:0e:5d:62:e3:cf:d1:ce:0b:8f:aa:
59:22:f4:0f:a0:ce:5b:c2:4d:ee:e5:ad:bb:9d:30:
d2:9e:fe:6e:0e:1f:17:f8:2a:64:33:45:23:0a:75:
30:80:55:b6:ec:eb:34:24:53:d9:71:49:e9:ff:fb:
f2:d7:57:bf:6b:de:e9:18:29:2f:c8:3c:09:a4:d4:
b7:07:8f:4d:b1:b4:94:79:cd:f0:94:37:64:23:2f:
fc:79:2a:78:21:21:df:cc:c9:97:6e:93:e7:56:26:
af:0f:92:b7:92:14:93:58:3f:08:b5:8c:e6:23:1e:
c6:c4:5b:99:49:e2:56:62:35:34:ca:63:c7:ea:02:
e6:db:69:3c:ef:70:e3:f1:a0:2e:91:18:0c:41:bd:
07:07:75:33:22:df:6e:07:c1:5a:dd:64:d2:0e:16:
72:7e:42:f5:28:ff:8f:25:84:9f:03:8b:49:e6:36:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:35:1B:64:4D:67:7B:5B:9F:20:D7:CA:08:1C:08:E7:84:62:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6ab4e-b587-3eaf-8bdc-4f1ef38fb5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.197.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:86:32:85:38:54:d2:0c:9d:31:df:e4:12:e8:f5:7b:f5:fc:
eb:fc:4f:22:28:1b:28:81:ad:7b:03:7c:73:02:a8:31:5e:5a:
6c:a1:a1:14:0d:a8:dc:57:67:ac:43:c5:2b:b3:c3:17:c0:bb:
bf:8e:47:7f:63:9f:be:2c:3b:89:b9:71:0b:a6:c6:e7:f5:aa:
f7:e2:bf:04:43:9f:20:78:93:0f:e2:b9:fe:02:09:f5:5e:09:
cf:d0:bf:d0:9c:c6:39:60:3f:0c:dc:3e:97:6c:3b:08:42:bb:
94:32:dd:01:03:4b:74:dd:13:74:8d:36:30:94:6f:1d:a9:40:
8a:f4:a9:83:70:bf:27:29:c8:dd:8f:fa:2d:57:e5:5e:77:6f:
64:92:43:a5:19:e6:35:31:08:f6:50:62:cc:23:bf:08:24:01:
4a:04:c4:f9:58:ce:15:0a:8d:31:72:a2:33:1c:86:58:e7:94:
a1:37:87:de:df:29:5d:9d:04:c3:61:51:61:c8:a0:63:bc:44:
3a:cf:3e:01:50:90:23:d8:cb:20:bd:f6:09:e0:d2:95:d6:23:
06:16:6f:dc:ca:61:cb:b3:de:47:3c:ee:15:b6:e3:d9:cf:c8:
c9:9c:6e:fe:4d:a4:42:59:33:74:03:5e:bf:51:0b:5f:36:0f:
08:fd:94:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS128arFP313J2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
MGUzYzhkM2MtMGZhNS00ZGI5LTkwNTYtNWU0N2NlYjRlZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvajl0QpCT2X/emrEZuO9/dFJ1O4atq6K8iSR
cKl6By2b7fAZkFphESzksmfK7gDXwBtyee/dNhXh4/tka1gZs95uN8ce8cLwhS0t
L1+s6A5dYuPP0c4Lj6pZIvQPoM5bwk3u5a27nTDSnv5uDh8X+CpkM0UjCnUwgFW2
7Os0JFPZcUnp//vy11e/a97pGCkvyDwJpNS3B49NsbSUec3wlDdkIy/8eSp4ISHf
zMmXbpPnViavD5K3khSTWD8ItYzmIx7GxFuZSeJWYjU0ymPH6gLm22k873Dj8aAu
kRgMQb0HB3UzIt9uB8Fa3WTSDhZyfkL1KP+PJYSfA4tJ5jbGTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6XNRtkTWd7W58g18oIHAjnhGJrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGNkNmFiNGUtYjU4Ny0z
ZWFmLThiZGMtNGYxZWYzOGZiNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS8UoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGGMoU4VNIMnTHf5BLo9Xv1/Ov8TyIoGyiBrXsDfHMCqDFeWmyhoRQN
qNxXZ6xDxSuzwxfAu7+OR39jn74sO4m5cQumxuf1qvfivwRDnyB4kw/iuf4CCfVe
Cc/Qv9CcxjlgPwzcPpdsOwhCu5Qy3QEDS3TdE3SNNjCUbx2pQIr0qYNwvycpyN2P
+i1X5V53b2SSQ6UZ5jUxCPZQYswjvwgkAUoExPlYzhUKjTFyojMchljnlKE3h97f
KV2dBMNhUWHIoGO8RDrPPgFQkCPYyyC99gng0pXWIwYWb9zKYcuz3kc87hW249nP
yMmcbv5NpEJZM3QDXr9RC182Dwj9lEE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:59 2025 by rpki-client