Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a681c7c3-73e8-31b9-8d74-601890eccb0c.roa
File: a681c7c3-73e8-31b9-8d74-601890eccb0c.roa (raw, json)
Hash identifier: oEP54IkYa/PigRHkNrZe+W3nrMXcDexfG7jwtHYp5/8=
Subject key identifier: 4C:7A:CF:FF:A3:DF:03:94:EA:9F:4D:3C:B1:57:86:E7:F0:B1:3D:3A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF55E86D72F103344DCB640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a681c7c3-73e8-31b9-8d74-601890eccb0c.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.98.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5e:86:d7:2f:10:33:44:dc:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=b3128bd6-63aa-46b7-993a-fba64b720d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:8f:3a:30:cb:d8:bd:a5:1e:30:7b:92:ed:
f3:7c:18:bf:65:c7:85:b1:f1:e7:04:67:bc:07:93:
a3:08:94:2c:d2:ff:05:b7:e2:ba:38:43:d5:ee:2c:
e8:9d:11:1e:27:0e:78:6a:6f:b6:19:5c:14:0b:ba:
72:94:91:e0:74:4f:cf:7e:b8:6b:46:4e:1c:d0:58:
e8:bc:6c:bf:c6:00:8c:0b:02:3c:e7:bc:c1:e0:23:
ce:3c:11:9e:ee:45:48:96:ed:5c:fe:06:96:c9:82:
de:38:39:ed:e2:0c:74:64:64:f7:66:70:80:e8:8c:
12:86:1e:da:81:f6:f0:bf:1e:ad:82:dc:e2:5b:d0:
9e:e5:52:77:ec:a8:6c:fd:8c:52:b1:72:14:3e:3f:
e8:a6:64:51:51:49:95:5e:ec:86:af:26:9e:15:46:
85:4b:2f:44:2e:25:11:41:91:be:ca:3d:fe:36:ab:
56:55:81:71:a7:56:c8:f2:5e:a9:bb:63:95:52:ab:
d7:c2:d5:03:07:3e:6f:d0:d7:60:7e:b7:1b:0b:40:
0e:41:eb:4f:19:d4:53:ca:de:e4:02:74:b6:f1:c2:
36:d4:14:7a:b5:ce:d1:7f:dd:b0:45:71:5f:dc:72:
b4:d5:6f:49:79:ea:78:24:c1:2e:01:7f:8a:4d:d0:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:CF:FF:A3:DF:03:94:EA:9F:4D:3C:B1:57:86:E7:F0:B1:3D:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a681c7c3-73e8-31b9-8d74-601890eccb0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.98.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:70:22:e1:98:f4:91:85:9b:df:c6:ca:f3:d2:8e:cb:a7:15:
2e:98:96:32:10:3f:6e:b9:07:51:1d:41:2e:42:8c:5c:6a:a5:
78:2c:9e:2e:a4:79:76:9d:8d:c1:61:e7:c5:d2:70:e3:3d:cc:
46:d6:4a:df:d3:c5:56:78:99:ed:4f:11:3c:a1:1f:b5:77:02:
5d:05:fb:5b:30:cf:93:0f:63:64:93:94:cd:40:21:81:c2:56:
24:3d:57:09:5d:fa:70:3a:2d:c9:6d:08:f9:1f:fb:9e:e2:64:
2b:2a:56:12:4b:d7:0e:47:ac:20:60:37:31:1b:ea:af:45:6a:
c7:fe:c5:64:44:65:82:75:ec:6f:c7:1b:d8:74:b5:ad:3b:5e:
f1:44:38:1b:ae:41:09:0c:89:8b:49:43:64:8f:e3:2d:37:87:
19:dd:39:b4:ee:b6:4e:69:e3:da:a0:9c:4d:fb:8d:dc:e5:ef:
3f:b8:67:4b:6b:1c:4a:d2:ed:5b:8a:22:cf:56:48:c7:e8:ba:
d3:bc:4d:5f:da:76:df:fd:04:e7:51:07:77:d6:f1:f5:12:91:
d8:21:72:31:75:d7:f5:46:17:b7:b1:3c:41:e2:be:20:17:e5:
50:6b:c5:2a:08:a7:96:0d:46:9f:c4:db:e8:55:92:9e:23:6e:
b7:b9:bc:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9V6G1y8QM0TctkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjMxMjhiZDYtNjNhYS00NmI3LTk5M2EtZmJhNjRiNzIwZDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRmPOjDL2L2lHjB7ku3zfBi/ZceFsfHnBGe8
B5OjCJQs0v8Ft+K6OEPV7izonREeJw54am+2GVwUC7pylJHgdE/PfrhrRk4c0Fjo
vGy/xgCMCwI857zB4CPOPBGe7kVIlu1c/gaWyYLeODnt4gx0ZGT3ZnCA6IwShh7a
gfbwvx6tgtziW9Ce5VJ37Khs/YxSsXIUPj/opmRRUUmVXuyGryaeFUaFSy9ELiUR
QZG+yj3+NqtWVYFxp1bI8l6pu2OVUqvXwtUDBz5v0NdgfrcbC0AOQetPGdRTyt7k
AnS28cI21BR6tc7Rf92wRXFf3HK01W9Jeep4JMEuAX+KTdB5iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEx6z/+j3wOU6p9NPLFXhufwsT06MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTY4MWM3YzMtNzNlOC0z
MWI5LThkNzQtNjAxODkwZWNjYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSmIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5wIuGY9JGFm9/GyvPSjsunFS6YljIQP265B1EdQS5CjFxqpXgsni6k
eXadjcFh58XScOM9zEbWSt/TxVZ4me1PETyhH7V3Al0F+1swz5MPY2STlM1AIYHC
ViQ9Vwld+nA6LcltCPkf+57iZCsqVhJL1w5HrCBgNzEb6q9Fasf+xWREZYJ17G/H
G9h0ta07XvFEOBuuQQkMiYtJQ2SP4y03hxndObTutk5p49qgnE37jdzl7z+4Z0tr
HErS7VuKIs9WSMfoutO8TV/adt/9BOdRB3fW8fUSkdghcjF11/VGF7exPEHiviAX
5VBrxSoIp5YNRp/E2+hVkp4jbre5vFo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:31 2025 by rpki-client