Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce9a397a-d5d8-3914-90c3-d0464593c43e.roa
File: ce9a397a-d5d8-3914-90c3-d0464593c43e.roa (raw, json)
Hash identifier: kWeVwZWiGwvCEpuS/+WfSquR3Y4vFWMno5p0zUxue7M=
Subject key identifier: 3D:C7:DA:B5:72:58:B4:FB:F5:A2:53:2E:78:F2:15:88:BF:B8:20:EE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F052F8A0AEC87C79E88600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce9a397a-d5d8-3914-90c3-d0464593c43e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 100.0.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:52:f8:a0:ae:c8:7c:79:e8:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=45feb778-635a-4ae2-a7b0-a829a7b48f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:06:85:00:91:b9:98:62:ec:5c:49:74:22:
3e:b6:2e:e2:81:e0:27:8d:18:66:4d:c8:db:32:42:
04:1e:48:c3:61:d2:e0:9e:36:f2:22:9c:12:d5:d8:
ee:75:06:dd:72:83:d2:c8:1a:7c:47:ea:f6:d3:36:
78:02:d7:10:ed:d1:8f:87:aa:49:b9:00:40:66:35:
48:9f:4d:fe:d1:ff:c5:b1:7e:b9:b1:c3:7b:22:ae:
a7:a6:8a:03:02:1b:1c:69:a3:ae:f3:92:be:1a:11:
f5:a8:7d:14:f0:26:a8:70:ac:46:a4:8b:6c:d4:9d:
99:4f:3d:97:75:45:37:21:fd:5f:8d:98:0d:ea:3d:
27:a3:7a:39:1c:d3:98:64:03:b2:e3:19:00:c8:86:
9f:f2:ee:3d:ed:dc:09:10:b9:ba:64:85:8e:69:d7:
67:3b:13:9e:1a:2f:f1:6e:99:07:e2:d2:a9:83:f3:
19:01:16:92:7e:cf:e8:ee:37:ef:9b:78:20:07:be:
c3:ad:c9:6d:76:71:47:a1:9a:e9:54:29:1a:22:99:
53:e7:e7:a2:fe:16:98:53:c5:03:3e:1e:35:b9:8c:
36:70:60:1f:4b:6e:ec:78:8a:a6:f4:b4:51:cd:32:
e7:4f:76:1f:10:af:ee:1c:a2:34:7b:02:81:65:20:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:DA:B5:72:58:B4:FB:F5:A2:53:2E:78:F2:15:88:BF:B8:20:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce9a397a-d5d8-3914-90c3-d0464593c43e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:57:b9:34:40:39:f9:1e:a1:55:24:33:9f:b4:bd:c9:1c:50:
45:3e:57:9b:bb:83:b2:cd:02:b7:7a:7a:f5:11:2d:b0:2f:b9:
57:12:94:84:a5:3c:6f:f5:d4:a7:90:4d:0f:98:1b:d1:b8:22:
6c:1e:8d:6f:4d:4d:a1:e5:dc:f5:9c:7a:61:76:c9:86:00:09:
1b:1f:03:ab:d7:fd:4f:10:ed:18:ac:29:e0:18:8e:71:75:8c:
c0:c4:47:80:96:d2:ad:b0:c0:b7:95:66:ce:83:cf:b3:10:3e:
3f:dd:39:fc:b3:6f:a1:2b:36:f7:48:a2:d5:cf:db:12:ec:73:
b0:d5:ee:ef:79:86:31:9f:40:a6:6d:6a:77:fa:79:1f:88:0c:
c5:27:d7:e4:2a:81:23:1d:a3:ce:13:2e:91:c1:db:4e:37:36:
a4:d9:f5:5f:4b:09:97:16:c3:5f:2d:2f:c6:14:45:e7:30:02:
a5:96:d5:e9:e1:59:df:45:84:1e:25:db:f9:c5:a3:0a:d0:dc:
f0:f6:34:d8:3b:c1:88:6a:86:03:94:53:28:bc:70:d7:03:68:
8e:d6:ec:38:7a:3a:ce:f4:50:c5:f7:2e:d6:23:c1:2a:7f:39:
b2:95:f5:a0:39:ec:51:ec:58:fe:5b:3d:71:1a:00:cb:52:5f:
e4:a0:fd:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgy8FL4oK7IfHnohgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDVmZWI3NzgtNjM1YS00YWUyLWE3YjAtYTgyOWE3YjQ4ZjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48AGhQCRuZhi7FxJdCI+ti7igeAnjRhmTcjb
MkIEHkjDYdLgnjbyIpwS1djudQbdcoPSyBp8R+r20zZ4AtcQ7dGPh6pJuQBAZjVI
n03+0f/FsX65scN7Iq6npooDAhscaaOu85K+GhH1qH0U8CaocKxGpIts1J2ZTz2X
dUU3If1fjZgN6j0no3o5HNOYZAOy4xkAyIaf8u497dwJELm6ZIWOaddnOxOeGi/x
bpkH4tKpg/MZARaSfs/o7jfvm3ggB77DrcltdnFHoZrpVCkaIplT5+ei/haYU8UD
Ph41uYw2cGAfS27seIqm9LRRzTLnT3YfEK/uHKI0ewKBZSB8OQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD3H2rVyWLT79aJTLnjyFYi/uCDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2U5YTM5N2EtZDVkOC0z
OTE0LTkwYzMtZDA0NjQ1OTNjNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWle5NEA5+R6hVSQzn7S9yRxQRT5Xm7uDss0Ct3p69REtsC+5VxKUhKU8
b/XUp5BND5gb0bgibB6Nb01NoeXc9Zx6YXbJhgAJGx8Dq9f9TxDtGKwp4BiOcXWM
wMRHgJbSrbDAt5VmzoPPsxA+P905/LNvoSs290ii1c/bEuxzsNXu73mGMZ9Apm1q
d/p5H4gMxSfX5CqBIx2jzhMukcHbTjc2pNn1X0sJlxbDXy0vxhRF5zACpZbV6eFZ
30WEHiXb+cWjCtDc8PY02DvBiGqGA5RTKLxw1wNojtbsOHo6zvRQxfcu1iPBKn85
spX1oDnsUexY/ls9cRoAy1Jf5KD9gA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:29:51 2025 by rpki-client