Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa
File: d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa (raw, json)
Hash identifier: ZTgX4ivqd1bxtTKXAeArIjVDKhGMPbWXN5SPQreDLao=
Subject key identifier: EF:B7:B1:11:AD:26:91:22:39:17:17:4B:FA:67:71:AE:A7:33:13:47
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F05390F67611424E2E7400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.17.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:53:90:f6:76:11:42:4e:2e:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=946242c9-84d2-4498-901d-5e633d12ef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:e4:3d:74:d2:11:7c:9c:a0:30:6f:4a:75:
8e:ce:ee:eb:8d:12:d1:65:f6:c9:38:1d:bc:11:55:
b9:58:1c:36:63:b1:67:5b:3f:eb:e7:ed:e2:84:5f:
9a:e8:be:9b:13:98:a3:90:98:cc:11:ea:83:c0:2f:
36:9c:de:b0:d7:56:ef:cd:d1:8c:8a:99:b6:49:88:
03:b4:cf:28:f3:92:06:79:e6:fe:d7:99:7a:4f:e8:
23:42:3e:f7:35:b4:c7:20:29:3a:6d:d2:47:80:ca:
8b:b7:de:19:9c:11:64:63:39:ad:e4:5b:4c:c0:5c:
bd:4f:81:f3:f1:9d:b6:a9:67:59:24:49:13:91:8a:
9e:b1:ad:3f:03:46:79:9c:91:df:e1:db:0c:6b:3a:
df:54:3f:79:43:07:dc:4e:1e:a7:45:9d:af:01:70:
36:4c:97:09:0b:28:19:b0:cd:43:65:23:17:3b:50:
c3:36:d4:f1:f9:36:ab:91:5d:07:b3:97:5f:6c:98:
8f:a2:95:7d:47:7e:55:1b:a4:62:3d:1c:b1:f6:51:
ee:d4:69:d2:60:c7:54:ed:10:d1:bc:3b:a1:97:ec:
95:28:bb:b9:e2:42:90:e5:03:fa:ab:a0:cc:37:70:
4e:22:81:ab:57:c4:51:b9:ef:b1:e4:eb:b5:e5:87:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:B1:11:AD:26:91:22:39:17:17:4B:FA:67:71:AE:A7:33:13:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.17.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:7f:d5:05:25:b3:3b:c6:e3:97:71:23:16:6c:21:a6:41:4d:
67:51:4b:88:42:90:fd:e0:a4:3a:c2:90:b9:76:75:e1:7c:b1:
e0:55:4b:4c:bf:13:8f:dc:6e:80:60:5f:f3:a2:04:52:9c:00:
74:40:1f:9b:33:bd:28:18:ac:9d:df:b1:18:be:e1:9d:f4:5d:
7e:35:3c:e7:db:ba:3a:e9:dd:c2:87:a7:47:61:20:5b:be:24:
a7:a7:18:6e:4e:cd:da:6b:c1:82:55:de:d1:e0:fc:07:95:40:
06:f5:ba:62:38:e7:2f:16:5b:72:38:76:32:9f:47:92:69:c8:
a4:ce:b5:b0:a4:eb:a7:06:a4:8d:90:09:19:5b:0a:60:f9:0c:
89:46:0e:f1:12:1e:a4:ac:ae:98:44:47:ca:53:59:7f:01:ca:
0a:15:74:1b:9b:b4:2f:e8:22:0f:51:0a:7b:3a:5d:b8:73:e7:
39:9b:4a:9c:de:ab:47:eb:17:c4:bd:5f:23:2c:81:42:08:6a:
d4:1f:ca:af:64:b4:9b:3a:70:ec:44:f4:c2:d3:b3:1e:93:a0:
87:f5:0b:fd:c4:b4:9c:bd:87:94:f5:46:45:da:3d:c5:91:e7:
6d:72:ca:7e:03:01:cc:e0:48:fc:22:f4:52:8e:6a:3c:72:19:
64:fb:46:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8FOQ9nYRQk4udAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTQ2MjQyYzktODRkMi00NDk4LTkwMWQtNWU2MzNkMTJlZjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLkPXTSEXycoDBvSnWOzu7rjRLRZfbJOB28
EVW5WBw2Y7FnWz/r5+3ihF+a6L6bE5ijkJjMEeqDwC82nN6w11bvzdGMipm2SYgD
tM8o85IGeeb+15l6T+gjQj73NbTHICk6bdJHgMqLt94ZnBFkYzmt5FtMwFy9T4Hz
8Z22qWdZJEkTkYqesa0/A0Z5nJHf4dsMazrfVD95QwfcTh6nRZ2vAXA2TJcJCygZ
sM1DZSMXO1DDNtTx+TarkV0Hs5dfbJiPopV9R35VG6RiPRyx9lHu1GnSYMdU7RDR
vDuhl+yVKLu54kKQ5QP6q6DMN3BOIoGrV8RRue+x5Ou15YczWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+3sRGtJpEiORcXS/pnca6nMxNHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRmNGM0NTMtOWVkZi0z
ZmU3LWI1NmUtNjM0OGQ0ZGIxODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEl/1QUlszvG45dxIxZsIaZBTWdRS4hCkP3gpDrCkLl2deF8seBVS0y/
E4/cboBgX/OiBFKcAHRAH5szvSgYrJ3fsRi+4Z30XX41POfbujrp3cKHp0dhIFu+
JKenGG5OzdprwYJV3tHg/AeVQAb1umI45y8WW3I4djKfR5JpyKTOtbCk66cGpI2Q
CRlbCmD5DIlGDvESHqSsrphER8pTWX8BygoVdBubtC/oIg9RCns6Xbhz5zmbSpze
q0frF8S9XyMsgUIIatQfyq9ktJs6cOxE9MLTsx6ToIf1C/3EtJy9h5T1RkXaPcWR
521yyn4DAczgSPwi9FKOajxyGWT7RqQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:57 2025 by rpki-client