Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
File: df502e9b-f90e-3a84-8ea6-9d557d426070.roa (raw, json)
Hash identifier: 0rIvDQJy8trnPc1oe3F9/xHvaSqTRFtNUE3UAHySTPY=
Subject key identifier: 28:1C:58:23:EC:91:49:0D:C7:C7:9F:50:BE:47:28:2E:13:FE:D4:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696089C24B8D1ABA5A52D880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 174.8.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:89:c2:4b:8d:1a:ba:5a:52:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=128400f7-2921-43b0-89bf-cac6c4d43071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:56:59:a1:c0:63:bd:b1:34:05:aa:71:72:
59:0e:40:ce:82:16:20:15:88:da:b9:97:f0:f0:a6:
1f:91:bd:00:75:a5:06:ba:05:40:f8:fa:2e:73:bb:
9e:ee:15:c8:cc:59:3f:ba:7b:4a:6d:88:d5:6a:af:
92:5c:40:06:3e:0d:c5:49:91:4f:e5:e5:fd:01:68:
0c:29:c0:ad:13:f7:63:08:da:d4:32:b1:08:57:d2:
70:0f:ca:ca:ed:35:f7:8f:7f:ee:ff:c3:6a:55:85:
b7:e9:ca:06:f7:90:a5:15:2d:e5:ae:d1:93:4e:ad:
7a:a2:89:11:33:be:82:ed:f2:89:ba:3f:66:3d:70:
0f:a0:f2:df:3e:b9:4e:a6:65:68:ea:2f:89:45:be:
41:12:69:a0:12:b5:d0:f0:dd:86:98:d3:ca:a6:28:
37:b3:d2:57:5e:6d:46:c2:0e:55:62:dc:1c:bd:fc:
35:c5:bd:77:80:4d:ae:b6:3d:a1:42:49:7e:f2:fe:
75:8b:9f:66:cf:2e:fa:22:48:71:1c:e9:7b:6c:39:
7d:7c:79:f9:0c:2d:20:cf:3b:6c:d5:ca:e2:c9:15:
58:d9:d8:1c:0c:9d:81:47:be:ae:d8:c0:cb:0d:35:
97:e2:15:8e:50:bc:b1:86:27:a7:0f:b4:42:5a:fc:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:58:23:EC:91:49:0D:C7:C7:9F:50:BE:47:28:2E:13:FE:D4:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.8.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:db:43:3e:d3:1f:21:19:30:b5:e3:e1:f1:28:95:81:51:e7:
be:20:26:51:3f:cd:bf:fc:b0:d2:95:17:93:85:2b:95:39:89:
3f:fd:aa:45:f8:85:d8:ea:98:be:50:5e:34:ee:b2:7b:45:55:
68:df:91:89:5f:80:c6:5f:f3:56:93:ef:14:30:30:ad:2e:f3:
0c:0f:0e:76:8f:f6:ec:9b:f4:e7:0c:3e:2d:2a:67:8b:b4:bb:
cf:9e:7c:6c:b9:f0:ac:85:c6:63:d6:48:a2:23:f6:75:48:2f:
8b:0c:a6:8a:c5:ce:9e:14:d6:a8:25:7a:0d:f1:ca:0b:14:fb:
24:5b:86:61:a7:4c:ea:22:46:e7:cb:0b:62:2b:83:14:ad:7f:
ac:42:f9:db:f3:21:88:aa:25:df:3c:e9:bf:6f:1e:79:70:72:
f1:29:fe:f4:ca:8e:62:8c:d1:87:8e:20:4d:3a:0e:15:be:da:
37:90:20:bb:c5:a3:c9:98:51:54:a4:b8:77:f4:5b:b7:35:81:
d3:8d:79:5d:6b:34:a1:16:24:79:ae:33:d3:11:6b:e8:36:be:
64:e2:19:1c:28:1f:e2:61:53:a4:a3:8f:48:5a:1a:7d:89:55:
a9:67:21:3e:0b:c8:81:23:e3:9c:9a:29:40:d2:88:33:16:15:
99:83:12:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhpYInCS40aulpS2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MTI4NDAwZjctMjkyMS00M2IwLTg5YmYtY2FjNmM0ZDQzMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdWWaHAY72xNAWqcXJZDkDOghYgFYjauZfw
8KYfkb0AdaUGugVA+Pouc7ue7hXIzFk/untKbYjVaq+SXEAGPg3FSZFP5eX9AWgM
KcCtE/djCNrUMrEIV9JwD8rK7TX3j3/u/8NqVYW36coG95ClFS3lrtGTTq16ookR
M76C7fKJuj9mPXAPoPLfPrlOpmVo6i+JRb5BEmmgErXQ8N2GmNPKpig3s9JXXm1G
wg5VYtwcvfw1xb13gE2utj2hQkl+8v51i59mzy76IkhxHOl7bDl9fHn5DC0gzzts
1criyRVY2dgcDJ2BR76u2MDLDTWX4hWOULyxhienD7RCWvw8HwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCgcWCPskUkNx8efUL5HKC4T/tSZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGY1MDJlOWItZjkwZS0z
YTg0LThlYTYtOWQ1NTdkNDI2MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDrggwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqNtDPtMfIRkwtePh8SiVgVHnviAmUT/Nv/yw0pUXk4UrlTmJP/2qRfiF
2OqYvlBeNO6ye0VVaN+RiV+Axl/zVpPvFDAwrS7zDA8Odo/27Jv05ww+LSpni7S7
z558bLnwrIXGY9ZIoiP2dUgviwymisXOnhTWqCV6DfHKCxT7JFuGYadM6iJG58sL
YiuDFK1/rEL52/MhiKol3zzpv28eeXBy8Sn+9MqOYozRh44gTToOFb7aN5Agu8Wj
yZhRVKS4d/RbtzWB0415XWs0oRYkea4z0xFr6Da+ZOIZHCgf4mFTpKOPSFoafYlV
qWchPgvIgSPjnJopQNKIMxYVmYMSDw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:00 2025 by rpki-client