Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa
File: 6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa (raw, json)
Hash identifier: bRr0A3m6EVuKC5ln+sMq+22Ncs5ReCjaWM6ABRzsJHg=
Subject key identifier: FF:CC:9C:6F:5F:E2:F0:B6:2B:8E:56:B8:85:9F:93:15:33:F5:69:94
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F050FC222B92E59C956F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.22.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:50:fc:22:2b:92:e5:9c:95:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4ac19257-1119-440e-a519-d85bdb76ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:9e:ea:6d:6b:5f:22:e6:a0:99:d2:9d:3b:
58:bf:01:86:04:20:17:f5:05:dc:d3:61:5b:8e:ef:
fb:f0:a0:7b:9b:61:b2:65:4f:69:22:6e:a0:84:a5:
f9:40:14:16:4d:d0:80:9d:81:ad:a8:ff:be:41:7a:
6c:d2:8d:80:50:f4:6b:5c:8a:45:39:b5:82:22:83:
41:70:fa:c9:5f:45:25:63:4a:23:06:19:ac:23:2c:
a3:b4:bc:33:ce:ac:95:57:31:bf:a5:a8:72:9f:74:
37:06:4a:f0:29:05:b0:b8:3b:90:16:0e:7b:e2:57:
7e:9f:0a:cf:12:ba:cc:22:0e:8e:c8:a8:5f:c6:0e:
39:92:ab:f1:02:1c:8a:dd:c9:2f:10:0d:ed:36:aa:
11:ac:bb:ad:3b:03:eb:08:19:b2:cd:5e:10:f4:b0:
13:a2:29:d5:ff:0a:7a:a8:2e:5c:f7:04:02:8c:cf:
c1:0c:df:15:be:9d:e6:ff:45:1a:aa:60:fe:88:76:
8d:d8:85:53:50:2f:6d:2d:e5:2b:8a:06:22:86:b6:
46:81:38:3f:9e:91:03:be:a9:7a:f9:60:ef:17:0f:
56:02:16:80:df:02:81:14:13:0e:82:81:18:ff:5a:
0d:50:17:74:41:0d:ee:56:21:28:5b:74:e6:89:91:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:9C:6F:5F:E2:F0:B6:2B:8E:56:B8:85:9F:93:15:33:F5:69:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.22.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:97:e3:45:fc:9c:ce:bb:10:19:a5:b1:68:e6:d0:d4:b6:8d:
4e:3f:e1:71:00:9a:ad:48:cc:0b:f6:49:33:ab:e5:21:64:7a:
f3:2a:1c:02:f6:46:62:98:73:7b:7f:fa:44:51:07:58:1f:62:
5c:a5:bb:89:61:c7:4f:12:46:06:35:21:62:35:3b:8f:c8:e7:
48:b1:74:03:b5:5a:8b:c0:3b:0d:19:58:74:52:08:46:3c:f8:
49:1a:0f:cd:7b:77:3e:27:c0:f2:ce:0f:d0:26:1c:f5:74:b7:
47:be:01:9e:e0:5c:bb:bc:a5:0d:f7:c7:57:ea:22:a2:d8:a8:
29:3b:e4:9a:43:df:93:94:8e:b0:6d:b9:d2:eb:4c:c5:df:b7:
c3:92:df:ad:90:ef:7c:23:25:5b:c2:c1:6f:8d:1c:d2:12:a3:
11:1e:8a:ad:93:12:23:86:4f:25:c4:1e:aa:49:80:90:f9:70:
1a:f9:6c:a2:ca:86:26:a9:46:75:92:28:d4:66:34:b3:d4:5c:
73:16:7e:d3:9c:b0:ae:4a:29:aa:22:27:b1:3b:6d:cb:d3:2c:
0b:f5:4e:16:1f:8f:bc:dc:04:e7:6c:c0:c1:14:fb:c6:b0:15:
1c:e7:ab:3f:87:22:7b:b5:79:02:6b:bc:4d:4b:04:cc:90:e0:
04:f9:5d:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8FD8IiuS5ZyVb0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGFjMTkyNTctMTExOS00NDBlLWE1MTktZDg1YmRiNzZlYmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmKe6m1rXyLmoJnSnTtYvwGGBCAX9QXc02Fb
ju/78KB7m2GyZU9pIm6ghKX5QBQWTdCAnYGtqP++QXps0o2AUPRrXIpFObWCIoNB
cPrJX0UlY0ojBhmsIyyjtLwzzqyVVzG/pahyn3Q3BkrwKQWwuDuQFg574ld+nwrP
ErrMIg6OyKhfxg45kqvxAhyK3ckvEA3tNqoRrLutOwPrCBmyzV4Q9LAToinV/wp6
qC5c9wQCjM/BDN8Vvp3m/0UaqmD+iHaN2IVTUC9tLeUrigYihrZGgTg/npEDvql6
+WDvFw9WAhaA3wKBFBMOgoEY/1oNUBd0QQ3uViEoW3TmiZE+1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/MnG9f4vC2K45WuIWfkxUz9WmUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjg1N2ViYmQtMjAwMS0z
ZWJiLWI4YmItOWViMGYyMzMyYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuX40X8nM67EBmlsWjm0NS2jU4/4XEAmq1IzAv2STOr5SFkevMqHAL2
RmKYc3t/+kRRB1gfYlylu4lhx08SRgY1IWI1O4/I50ixdAO1WovAOw0ZWHRSCEY8
+EkaD817dz4nwPLOD9AmHPV0t0e+AZ7gXLu8pQ33x1fqIqLYqCk75JpD35OUjrBt
udLrTMXft8OS362Q73wjJVvCwW+NHNISoxEeiq2TEiOGTyXEHqpJgJD5cBr5bKLK
hiapRnWSKNRmNLPUXHMWftOcsK5KKaoiJ7E7bcvTLAv1ThYfj7zcBOdswMEU+8aw
FRznqz+HInu1eQJrvE1LBMyQ4AT5Xco=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:32 2025 by rpki-client