Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa
File: 6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa (raw, json)
Hash identifier: X0SSYCkFqzlFtywHu2pbXrN0OuEn/+MxJmhjP9wdiVk=
Subject key identifier: 0B:98:0C:63:02:84:72:12:1B:6A:D5:B6:2D:AF:A5:07:BF:7A:C9:79
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF567BAD5CE988BE24F3A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.129.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:67:ba:d5:ce:98:8b:e2:4f:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=9d58d51b-557b-4998-99d3-28b6fff3fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:f6:9f:2c:8d:ef:ba:f1:be:5a:fe:00:9f:
89:36:d6:db:46:a1:a5:0d:36:c3:d5:46:36:0a:5b:
21:3d:38:05:50:67:de:6b:ea:5d:cd:11:37:43:ce:
11:e5:95:ca:16:9e:6e:bd:45:44:a2:3a:50:de:d0:
b8:5f:d2:bc:a7:39:e5:ba:9d:7c:b4:1e:3f:7d:b5:
eb:70:cc:98:f4:ed:4a:6d:f5:ed:c5:00:44:bb:a8:
64:9d:c7:34:8d:9c:f3:9b:a5:16:96:65:e9:54:19:
18:9c:f6:2b:50:66:c3:4f:5f:e0:45:b0:86:0f:73:
24:e6:18:3c:80:cd:ef:3a:54:46:1a:ca:91:ef:d1:
26:50:a4:8a:64:27:67:5a:34:c4:37:b1:bd:24:5c:
01:0d:1c:31:22:df:22:9c:96:1a:4d:2c:0e:85:9a:
42:0d:f5:36:b0:0b:68:f6:fd:28:a8:98:df:b2:45:
75:ed:3e:e3:8c:8c:56:f5:2d:f4:34:5e:56:9f:4e:
85:e4:12:1c:fd:72:23:70:16:96:5c:37:f3:2c:c6:
c2:c7:53:e3:9f:cc:3f:5e:83:7b:90:3a:87:35:fc:
fa:da:58:22:47:a5:0a:6a:d3:ec:0e:e1:1e:48:97:
79:ae:06:43:3e:29:1e:56:b8:96:d1:a1:64:95:4a:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:0C:63:02:84:72:12:1B:6A:D5:B6:2D:AF:A5:07:BF:7A:C9:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:08:15:95:bb:26:e8:98:d5:13:00:4c:63:0d:04:93:6f:dc:
22:24:76:1a:31:0d:25:09:eb:06:3a:89:87:79:cd:66:70:e1:
39:1f:c4:ce:82:d1:da:77:03:04:12:08:58:d6:d1:b4:01:0e:
f4:44:29:d6:f3:52:b9:00:13:e6:98:84:90:ca:e9:49:19:88:
97:cd:3b:6c:e4:ad:fb:a3:74:c1:1d:5b:4a:99:34:1b:0c:8f:
92:30:60:4d:6f:ff:8a:b4:1b:da:7d:ca:b4:65:56:83:b5:62:
13:71:74:14:0e:bd:55:73:9e:8b:0b:7b:51:78:cc:81:0e:3d:
3b:97:f3:5b:fb:14:79:30:53:3f:a6:b6:80:5a:1e:11:75:02:
48:59:84:a8:8e:dc:02:2f:3a:48:45:c2:9b:cf:74:1d:2d:35:
77:4a:cd:73:cc:95:c3:bd:fa:7e:fc:35:0e:8b:c6:57:9e:cb:
53:1f:a9:23:91:df:19:fb:7f:ac:60:3b:19:f5:a4:bc:59:bb:
a7:bb:36:9d:b5:53:99:72:d9:bb:80:18:9d:4b:41:e5:ff:16:
d6:2b:31:fb:c3:fc:0a:fe:88:15:82:61:17:c1:f6:93:7c:1c:
42:1f:f2:36:71:c1:f4:db:6b:0f:c0:ea:55:85:96:97:a6:be:
75:94:27:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgr9We61c6Yi+JPOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OWQ1OGQ1MWItNTU3Yi00OTk4LTk5ZDMtMjhiNmZmZjNmY2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBn2nyyN77rxvlr+AJ+JNtbbRqGlDTbD1UY2
ClshPTgFUGfea+pdzRE3Q84R5ZXKFp5uvUVEojpQ3tC4X9K8pznlup18tB4/fbXr
cMyY9O1KbfXtxQBEu6hkncc0jZzzm6UWlmXpVBkYnPYrUGbDT1/gRbCGD3Mk5hg8
gM3vOlRGGsqR79EmUKSKZCdnWjTEN7G9JFwBDRwxIt8inJYaTSwOhZpCDfU2sAto
9v0oqJjfskV17T7jjIxW9S30NF5Wn06F5BIc/XIjcBaWXDfzLMbCx1Pjn8w/XoN7
kDqHNfz62lgiR6UKatPsDuEeSJd5rgZDPikeVriW0aFklUpc6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAuYDGMChHISG2rVti2vpQe/esl5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmUyNmQ2YTUtODMyZi0z
ODllLTg1NDAtNWI4NDZkYzdlOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMQgVlbsm6JjVEwBMYw0Ek2/cIiR2GjENJQnrBjqJh3nNZnDhOR/EzoLR
2ncDBBIIWNbRtAEO9EQp1vNSuQAT5piEkMrpSRmIl807bOSt+6N0wR1bSpk0GwyP
kjBgTW//irQb2n3KtGVWg7ViE3F0FA69VXOeiwt7UXjMgQ49O5fzW/sUeTBTP6a2
gFoeEXUCSFmEqI7cAi86SEXCm890HS01d0rNc8yVw736fvw1DovGV57LUx+pI5Hf
Gft/rGA7GfWkvFm7p7s2nbVTmXLZu4AYnUtB5f8W1isx+8P8Cv6IFYJhF8H2k3wc
Qh/yNnHB9NtrD8DqVYWWl6a+dZQnrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:29:48 2025 by rpki-client