Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa
File: 6a0b5109-d3a3-3225-9201-51db0328d9da.roa (raw, json)
Hash identifier: jyNsED5+xTHHbK+jpu6HgLKhy9ViVmGg5TUa0p0KekY=
Subject key identifier: 86:C9:B1:B8:BA:93:8B:BA:E2:A8:EB:B6:C9:84:23:E7:FF:E9:29:5B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9AFAECFAD802D33D0380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9a:fa:ec:fa:d8:02:d3:3d:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=029eb3a6-e735-4f3b-9742-d66feaf6b2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:f5:27:c9:26:23:26:b8:b5:97:7c:01:a4:
d4:ac:e3:03:4f:0e:c6:58:bd:fd:87:52:88:b8:98:
8a:0d:93:05:17:eb:9e:64:80:e4:d3:98:1f:f7:ad:
da:2f:54:24:b2:38:06:e6:71:f9:0a:3f:cf:aa:3a:
be:5c:6a:b3:4f:2f:cb:e4:8f:c8:a4:07:9e:38:a1:
d0:0c:e0:1b:f0:c9:4a:85:d0:15:9e:45:4f:11:78:
7d:63:d3:e9:34:1a:6a:e4:18:27:d6:c9:8f:37:02:
1d:fa:3d:ae:fb:47:03:3d:0b:d6:df:28:72:62:51:
68:51:8f:5c:28:fd:37:29:80:c0:fa:83:02:af:d1:
17:1a:9d:9d:45:79:c3:e3:59:2e:d6:ad:d5:aa:99:
57:60:68:1b:4c:13:fd:07:b2:45:20:ce:6b:64:fe:
e1:be:dd:64:f7:46:46:1a:ac:90:70:3d:94:36:c0:
f7:49:e2:a7:c4:92:80:3c:c6:68:42:ad:11:24:ad:
ed:5d:9e:a7:d8:ae:dd:3b:a0:af:ca:99:f5:24:d8:
65:35:6a:0d:52:23:e9:7d:70:33:e6:c4:bc:00:de:
b0:d5:cb:7c:e4:b3:df:4e:11:78:55:83:9e:04:cf:
61:0d:aa:3d:22:69:d6:03:99:7f:b4:3c:b9:15:b1:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:B1:B8:BA:93:8B:BA:E2:A8:EB:B6:C9:84:23:E7:FF:E9:29:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a0b5109-d3a3-3225-9201-51db0328d9da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e4:73:bc:08:5b:79:c5:2a:cc:4a:39:78:f7:ee:57:3f:d1:
f5:59:36:67:40:e7:5f:94:2b:32:79:34:75:88:39:0c:34:c3:
e9:a2:51:cb:bb:d9:ff:81:f5:80:dc:c3:3e:ec:53:d3:3f:af:
b5:d9:a7:24:7b:c1:88:95:a0:96:fe:ce:ec:06:f4:9c:38:25:
4c:ad:c6:4f:c3:d4:7c:c8:92:92:2a:99:79:5f:8e:7b:1c:90:
cc:00:fc:5e:42:36:21:29:52:cd:66:f7:75:29:cc:d1:2a:3c:
ad:b5:8c:b7:2a:f2:d5:4c:99:4a:e0:05:65:64:13:66:3e:ee:
55:f8:cc:d4:0a:31:67:57:5a:9b:26:45:3e:78:8d:e3:33:bf:
df:77:d8:7c:b1:d0:86:b6:7b:2d:31:0a:ac:a1:fe:cb:58:85:
dd:81:e3:26:5f:28:bd:88:33:52:ef:05:74:6b:d7:c3:34:20:
93:09:32:7c:4e:09:97:72:e8:05:9d:b4:72:97:af:91:58:5a:
6f:f9:e9:e3:9e:49:64:16:3a:72:ee:b3:b9:6c:3b:a0:b9:69:
fb:80:28:66:2d:58:af:9c:01:4a:5c:dc:ff:8a:26:9c:04:b2:
26:aa:81:45:56:8b:8b:6c:a0:1c:58:90:8f:15:16:02:b3:0a:
41:4f:5d:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpr67PrYAtM9A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MDI5ZWIzYTYtZTczNS00ZjNiLTk3NDItZDY2ZmVhZjZiMmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOT1J8kmIya4tZd8AaTUrOMDTw7GWL39h1KI
uJiKDZMFF+ueZIDk05gf963aL1QksjgG5nH5Cj/Pqjq+XGqzTy/L5I/IpAeeOKHQ
DOAb8MlKhdAVnkVPEXh9Y9PpNBpq5Bgn1smPNwId+j2u+0cDPQvW3yhyYlFoUY9c
KP03KYDA+oMCr9EXGp2dRXnD41ku1q3VqplXYGgbTBP9B7JFIM5rZP7hvt1k90ZG
GqyQcD2UNsD3SeKnxJKAPMZoQq0RJK3tXZ6n2K7dO6Cvypn1JNhlNWoNUiPpfXAz
5sS8AN6w1ct85LPfThF4VYOeBM9hDao9ImnWA5l/tDy5FbFLNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbJsbi6k4u64qjrtsmEI+f/6SlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmEwYjUxMDktZDNhMy0z
MjI1LTkyMDEtNTFkYjAzMjhkOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATkc7wIW3nFKsxKOXj37lc/0fVZNmdA51+UKzJ5NHWIOQw0w+miUcu7
2f+B9YDcwz7sU9M/r7XZpyR7wYiVoJb+zuwG9Jw4JUytxk/D1HzIkpIqmXlfjnsc
kMwA/F5CNiEpUs1m93UpzNEqPK21jLcq8tVMmUrgBWVkE2Y+7lX4zNQKMWdXWpsm
RT54jeMzv9932Hyx0Ia2ey0xCqyh/stYhd2B4yZfKL2IM1LvBXRr18M0IJMJMnxO
CZdy6AWdtHKXr5FYWm/56eOeSWQWOnLus7lsO6C5afuAKGYtWK+cAUpc3P+KJpwE
siaqgUVWi4tsoBxYkI8VFgKzCkFPXfA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:26:39 2025 by rpki-client