Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa
File: 94e2edd7-7018-3b97-91eb-41ab44f1f438.roa (raw, json)
Hash identifier: qbdXjq1x4kDY68hRwG63EcEReb5Y6rQpKQB2Ph+ZSq4=
Subject key identifier: 28:A8:A4:EF:7E:74:62:63:7B:77:2C:B5:CD:C9:9F:14:F6:45:9D:10
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB446EAFE2724861160180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.238.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:44:6e:af:e2:72:48:61:16:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5dfd1a6d-44b8-4269-b0f1-33095d30cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:44:32:9c:39:36:a6:14:16:ec:a7:da:84:
7f:d4:bd:6d:c9:04:fd:50:07:2c:13:03:79:82:d0:
e6:00:25:5d:2b:70:f5:43:22:11:ac:30:06:06:39:
f7:98:d5:6c:27:46:6f:d4:c1:14:7c:42:8e:bc:88:
c2:38:cb:98:f7:90:99:db:2f:dc:ea:34:20:59:c0:
e3:8a:69:5b:16:f3:21:84:05:59:b4:61:9d:2d:db:
cb:40:92:3d:14:44:66:2f:c2:47:c7:6f:ef:bd:0d:
09:dc:e7:17:48:c0:2e:21:0e:0b:37:99:a1:c0:ac:
bf:bc:16:5e:49:22:4d:c7:2c:12:01:d8:5e:d7:4b:
fd:0c:83:45:c2:a1:04:3f:64:6a:6c:ef:a0:cf:58:
15:d6:8a:e9:e4:6a:93:ad:2c:dc:1c:bc:d3:41:9a:
92:3d:06:00:22:2d:e7:3b:bc:0f:8d:0b:49:bf:3e:
fb:fd:7a:fd:7f:14:b1:32:a5:0f:8d:77:ef:cc:e7:
3a:85:7e:33:0c:6f:39:a7:24:38:85:a0:58:9a:33:
2d:1e:da:bb:ee:74:1b:fc:ea:5f:4a:29:fc:68:1f:
10:50:d1:cb:58:db:07:27:07:b6:25:95:a5:7b:65:
94:68:cf:81:61:b8:d8:39:8a:a7:6c:31:a2:37:85:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:A4:EF:7E:74:62:63:7B:77:2C:B5:CD:C9:9F:14:F6:45:9D:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:84:1a:3e:89:60:b3:e0:78:65:45:ee:af:0f:03:53:9d:85:
ff:52:a8:f4:23:c4:98:1f:1c:f2:9f:ff:f2:d3:7b:3a:6e:40:
64:35:f5:7c:7d:c6:92:58:fd:d5:74:20:cd:51:d1:a3:dd:08:
e9:51:7b:e5:4c:85:ab:87:5e:ae:19:ee:ed:a3:9b:de:0f:b4:
27:61:96:33:34:b9:a1:4c:0c:09:a2:8d:25:02:50:db:e6:cf:
8b:c9:42:ab:0e:c9:c0:c3:98:86:33:0d:5c:c8:7a:06:61:f6:
8a:74:57:9f:88:97:79:29:06:6f:07:a9:5d:0f:5c:fa:98:f6:
d8:5d:67:7e:93:17:fb:e0:c6:90:e3:05:1e:a2:40:fa:21:ed:
3a:b7:5b:96:aa:0a:22:94:1e:6a:a4:fb:4e:46:3b:cd:86:75:
6e:b7:a8:2d:c7:29:b3:f4:73:9e:bd:a5:08:41:fb:88:3e:93:
e6:38:c1:cd:e3:45:db:fb:ea:b7:e5:17:48:66:22:ab:e7:d2:
1a:96:e3:bd:a7:4d:d2:95:6d:42:f2:e0:f8:2d:0c:2e:73:8d:
24:3f:19:81:e0:eb:ae:9c:20:40:3e:af:1e:ca:58:1d:ea:dd:
39:dc:33:5f:f2:80:38:80:92:fa:83:79:30:c6:0f:61:8e:d8:
bf:b3:96:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860Rur+JySGEWAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NWRmZDFhNmQtNDRiOC00MjY5LWIwZjEtMzMwOTVkMzBjZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1EMpw5NqYUFuyn2oR/1L1tyQT9UAcsEwN5
gtDmACVdK3D1QyIRrDAGBjn3mNVsJ0Zv1MEUfEKOvIjCOMuY95CZ2y/c6jQgWcDj
imlbFvMhhAVZtGGdLdvLQJI9FERmL8JHx2/vvQ0J3OcXSMAuIQ4LN5mhwKy/vBZe
SSJNxywSAdhe10v9DINFwqEEP2RqbO+gz1gV1orp5GqTrSzcHLzTQZqSPQYAIi3n
O7wPjQtJvz77/Xr9fxSxMqUPjXfvzOc6hX4zDG85pyQ4haBYmjMtHtq77nQb/Opf
Sin8aB8QUNHLWNsHJwe2JZWle2WUaM+BYbjYOYqnbDGiN4XnZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCiopO9+dGJje3cstc3JnxT2RZ0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTRlMmVkZDctNzAxOC0z
Yjk3LTkxZWItNDFhYjQ0ZjFmNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuEGj6JYLPgeGVF7q8PA1Odhf9SqPQjxJgfHPKf//LTezpuQGQ19Xx9
xpJY/dV0IM1R0aPdCOlRe+VMhauHXq4Z7u2jm94PtCdhljM0uaFMDAmijSUCUNvm
z4vJQqsOycDDmIYzDVzIegZh9op0V5+Il3kpBm8HqV0PXPqY9thdZ36TF/vgxpDj
BR6iQPoh7Tq3W5aqCiKUHmqk+05GO82GdW63qC3HKbP0c569pQhB+4g+k+Y4wc3j
Rdv76rflF0hmIqvn0hqW472nTdKVbULy4PgtDC5zjSQ/GYHg666cIEA+rx7KWB3q
3TncM1/ygDiAkvqDeTDGD2GO2L+zlqk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:58 2025 by rpki-client