Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa
File: c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa (raw, json)
Hash identifier: H/DenrRvQCDwVoLfFXtZ+VQK9fhP9k6k/7ezEDJJ/eU=
Subject key identifier: 7E:57:C5:2F:9F:DC:48:F6:B6:40:31:4F:AD:A3:D9:FC:1D:A1:50:6E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04CBFEEA57ACE7F260100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 96.240.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4c:bf:ee:a5:7a:ce:7f:26:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=5cbaa9c8-5ffe-4c45-9d80-fcaeb019bbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:6e:26:19:e9:56:76:0f:72:9f:20:f8:88:
c0:2c:52:3b:26:e3:e2:4d:68:d3:b6:f1:b9:89:4b:
88:78:bf:ca:74:45:20:da:04:73:cd:ac:29:1f:9b:
f4:0d:a6:c4:2a:82:f3:22:1e:1b:6e:62:c3:e7:55:
fe:0c:05:17:f2:41:61:53:a3:27:c9:11:41:01:d1:
1d:85:a4:23:1d:f3:54:5e:73:51:c3:10:7b:64:39:
22:be:2f:ae:70:33:12:9c:0e:83:34:73:f6:2a:75:
26:df:15:99:49:e0:1b:14:89:f8:a8:fd:58:25:d9:
bf:95:e3:09:1b:67:94:3c:7f:e7:4e:6a:7b:4c:9a:
76:8a:be:1e:ff:62:fa:8a:a5:b3:69:fc:e4:15:39:
fb:17:ac:83:c1:5b:a1:1a:f0:2b:d4:75:48:6d:45:
e5:78:22:de:63:6d:35:7d:9f:7f:4a:52:83:11:62:
83:bd:1d:13:be:c5:7a:47:28:1a:a2:0a:59:3f:be:
95:2b:c6:dc:45:df:1d:32:5b:3e:31:79:2c:6e:34:
43:bb:26:7d:e7:40:24:bd:fb:4b:5f:25:76:14:c2:
45:76:79:e2:2d:73:ec:f8:a8:ff:1d:ca:df:13:80:
41:76:da:2d:c7:cf:b9:ff:6a:0d:a1:22:94:bc:25:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:C5:2F:9F:DC:48:F6:B6:40:31:4F:AD:A3:D9:FC:1D:A1:50:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f7:a1:55:a3:d1:c6:00:54:17:23:9a:8f:11:c6:33:8e:fa:
4b:2f:f7:a8:ba:61:5a:4d:ff:a0:d4:69:4e:a5:c3:10:8b:e5:
4a:9f:b9:c1:86:83:e0:f2:c8:78:9e:94:e7:5d:be:40:4d:e7:
cc:51:c8:80:32:9d:21:0b:14:21:88:0a:80:ac:cf:5c:33:b7:
06:0e:56:70:6e:07:86:ce:db:c2:73:c6:0e:23:9e:d1:50:37:
e2:0f:d4:11:1b:5f:b4:c7:6d:dc:21:1c:e2:0f:f3:12:54:17:
f7:3e:42:fa:eb:38:80:09:4f:2d:0e:79:39:e0:a6:53:43:b0:
45:cd:d9:d1:e9:92:24:0b:76:97:b3:d0:61:85:2d:63:76:a8:
f3:23:c8:2c:ad:d1:07:af:22:86:06:cb:48:d8:d7:b3:54:30:
1b:9c:64:54:8d:e4:08:eb:82:e1:7a:62:be:bd:18:1e:25:29:
a0:5e:b8:19:86:04:67:29:f3:a0:dd:4f:e7:2e:8a:8b:46:ee:
1a:a7:3e:2a:91:34:ef:ae:13:81:68:2a:5d:99:f0:73:df:d6:
18:0b:7d:82:4b:69:b0:82:6b:1c:d2:be:4c:44:ef:8e:1c:36:
ce:54:de:ab:9f:74:e5:7c:41:f9:c8:b2:18:ef:09:01:7d:35:
d5:ad:db:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Ey/7qV6zn8mAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NWNiYWE5YzgtNWZmZS00YzQ1LTlkODAtZmNhZWIwMTliYmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgRuJhnpVnYPcp8g+IjALFI7JuPiTWjTtvG5
iUuIeL/KdEUg2gRzzawpH5v0DabEKoLzIh4bbmLD51X+DAUX8kFhU6MnyRFBAdEd
haQjHfNUXnNRwxB7ZDkivi+ucDMSnA6DNHP2KnUm3xWZSeAbFIn4qP1YJdm/leMJ
G2eUPH/nTmp7TJp2ir4e/2L6iqWzafzkFTn7F6yDwVuhGvAr1HVIbUXleCLeY201
fZ9/SlKDEWKDvR0TvsV6RygaogpZP76VK8bcRd8dMls+MXksbjRDuyZ950AkvftL
XyV2FMJFdnniLXPs+Kj/HcrfE4BBdtotx8+5/2oNoSKUvCXTXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5XxS+f3Ej2tkAxT62j2fwdoVBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhmMDZjMTItMmJlNy0z
ZTg5LTkxYmItMzg1MGIyYWMwMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFz3oVWj0cYAVBcjmo8RxjOO+ksv96i6YVpN/6DUaU6lwxCL5UqfucGG
g+DyyHielOddvkBN58xRyIAynSELFCGICoCsz1wztwYOVnBuB4bO28Jzxg4jntFQ
N+IP1BEbX7THbdwhHOIP8xJUF/c+QvrrOIAJTy0OeTngplNDsEXN2dHpkiQLdpez
0GGFLWN2qPMjyCyt0QevIoYGy0jY17NUMBucZFSN5AjrguF6Yr69GB4lKaBeuBmG
BGcp86DdT+cuiotG7hqnPiqRNO+uE4FoKl2Z8HPf1hgLfYJLabCCaxzSvkxE744c
Ns5U3qufdOV8QfnIshjvCQF9NdWt2wo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:51 2025 by rpki-client