Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa
File: d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa (raw, json)
Hash identifier: jE0W5VUpa4c888vWb0K9jPyrS3SxZ4bR2GSJWQMcr6M=
Subject key identifier: 7D:7F:25:06:59:1D:B4:24:B5:1D:60:85:A6:4B:37:66:40:2F:3A:48
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4783F6DBECE46EAEC960
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 151.201.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:47:83:f6:db:ec:e4:6e:ae:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=437a0067-9773-49b0-9a26-df229c5914cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:5c:b7:0f:1d:c2:44:0d:8b:80:95:63:f6:
78:59:d8:b7:5e:06:40:13:73:57:3c:bd:bf:44:04:
e9:28:98:f5:6c:7c:8d:f5:b8:de:06:05:5d:fe:81:
2f:ab:fb:3d:ac:09:20:ef:37:5d:6c:56:17:ec:2d:
8f:15:ec:6f:fb:e3:f5:01:fa:56:3c:58:f5:0b:c3:
02:10:88:7b:f4:7f:6d:d0:eb:6e:a1:35:ee:df:e3:
3d:92:d6:ac:73:39:02:44:07:7e:8c:94:49:24:ff:
9a:ea:db:ed:0c:ee:a2:72:da:22:79:3b:05:15:4f:
fb:ea:fa:c1:75:4b:98:49:98:87:1c:f9:2b:4e:df:
b1:3b:aa:86:6d:e2:35:0b:09:4c:ba:be:d5:60:0b:
ef:3d:a8:30:06:29:88:eb:7c:ed:be:53:5e:dc:34:
bd:e4:c2:9c:7e:f9:67:7c:70:c5:ab:91:aa:46:e6:
eb:6e:c3:6b:7c:95:9d:32:57:11:9e:47:af:84:ec:
be:1b:14:95:df:5d:90:08:a8:1e:8e:80:ef:a3:aa:
a1:73:78:1c:74:b0:d3:80:0f:d1:4d:51:b1:95:df:
c8:7f:6a:6f:db:26:fa:d3:ca:2e:38:3c:da:f8:75:
4d:9e:db:22:4b:e8:39:4c:76:34:bb:c1:51:64:23:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:25:06:59:1D:B4:24:B5:1D:60:85:A6:4B:37:66:40:2F:3A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0562bb3-3dc2-3d91-9549-a23db0c2c140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
151.201.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:ca:1d:4a:e3:09:19:31:98:b5:be:73:4d:64:5d:c7:c3:bb:
04:19:d2:29:d9:14:6a:17:38:7f:15:d1:8d:a4:fa:49:e0:3e:
99:46:75:b1:76:a5:64:93:43:9c:e7:28:8f:e9:8d:27:3d:25:
b4:a7:10:60:04:c8:ff:52:2f:b9:6d:78:b2:b1:90:1c:c0:8d:
ea:c7:1e:57:e5:12:20:59:00:93:fc:58:72:84:79:f3:e9:9f:
fe:10:e2:8d:b0:c9:c9:0b:93:7e:df:55:9f:9c:59:86:5a:8d:
9b:c1:dd:a4:6a:79:a6:ad:61:f3:7b:42:29:be:18:c0:a7:fe:
31:9b:4d:cd:13:60:da:7a:7d:a3:f5:6f:df:ca:aa:ef:0f:3c:
b3:d4:aa:e8:b8:4c:0c:bf:f6:99:fa:bc:39:e1:d0:0e:0c:d8:
c0:20:db:84:2d:b6:96:f4:73:1d:59:ad:d4:b3:a7:39:6d:a6:
fa:97:77:50:3f:15:86:95:db:83:b1:be:34:70:0a:92:7c:38:
57:0d:6c:7d:6c:d3:af:77:cc:24:9b:a2:cf:ad:b1:9c:13:6c:
cf:19:88:f7:64:ad:2b:ba:c3:65:dc:bb:10:65:41:9e:f8:34:
e5:4c:80:90:b7:76:c8:33:db:38:c5:7b:8f:fd:ab:94:2e:dc:
81:17:09:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860eD9tvs5G6uyWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NDM3YTAwNjctOTc3My00OWIwLTlhMjYtZGYyMjljNTkxNGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/dctw8dwkQNi4CVY/Z4Wdi3XgZAE3NXPL2/
RATpKJj1bHyN9bjeBgVd/oEvq/s9rAkg7zddbFYX7C2PFexv++P1AfpWPFj1C8MC
EIh79H9t0OtuoTXu3+M9ktasczkCRAd+jJRJJP+a6tvtDO6ictoieTsFFU/76vrB
dUuYSZiHHPkrTt+xO6qGbeI1CwlMur7VYAvvPagwBimI63ztvlNe3DS95MKcfvln
fHDFq5GqRubrbsNrfJWdMlcRnkevhOy+GxSV312QCKgejoDvo6qhc3gcdLDTgA/R
TVGxld/If2pv2yb608ouODza+HVNntsiS+g5THY0u8FRZCNEcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1/JQZZHbQktR1ghaZLN2ZALzpIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDA1NjJiYjMtM2RjMi0z
ZDkxLTk1NDktYTIzZGIwYzJjMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHl8kAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLKHUrjCRkxmLW+c01kXcfDuwQZ0inZFGoXOH8V0Y2k+kngPplGdbF2
pWSTQ5znKI/pjSc9JbSnEGAEyP9SL7lteLKxkBzAjerHHlflEiBZAJP8WHKEefPp
n/4Q4o2wyckLk37fVZ+cWYZajZvB3aRqeaatYfN7Qim+GMCn/jGbTc0TYNp6faP1
b9/Kqu8PPLPUqui4TAy/9pn6vDnh0A4M2MAg24Qttpb0cx1ZrdSzpzltpvqXd1A/
FYaV24OxvjRwCpJ8OFcNbH1s0693zCSbos+tsZwTbM8ZiPdkrSu6w2XcuxBlQZ74
NOVMgJC3dsgz2zjFe4/9q5Qu3IEXCYw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:01:50 2025 by rpki-client