Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
File: f49fd56f-b68a-3afa-a0b4-076325835c0e.roa (raw, json)
Hash identifier: oYgy3RCL/Ys4dwksD9TMYtw7RwLt3pebB6fnypjL07w=
Subject key identifier: 58:C4:36:5B:62:73:C7:43:98:DB:D2:A4:4C:70:2D:01:F3:95:E2:2B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848239558A6E358351C684CB000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 65.44.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:58:a6:e3:58:35:1c:68:4c:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=f5200542-e13a-4c1d-a797-8dbae5f6c608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:e9:d7:93:d6:08:ce:7f:c3:83:e9:5e:e6:
d1:f1:7c:34:80:9b:9e:bf:83:d5:9d:ab:b9:3e:e5:
a4:f6:63:5c:a6:35:a0:6e:32:73:f4:e6:fb:d4:9a:
8c:af:0e:8a:ab:2c:02:d0:2f:9d:13:c2:32:b7:15:
77:aa:2c:79:98:b5:f9:7b:8c:d0:e5:ae:3f:03:f7:
60:0c:73:b1:8c:dc:58:2c:d7:3a:a2:36:79:49:ae:
d5:65:9e:be:ca:06:b2:7d:e4:ea:ed:8f:09:39:3c:
24:b5:bb:0f:14:6b:da:55:32:9f:80:51:f2:8c:57:
dd:57:6b:d0:df:b8:e8:c7:70:94:ec:be:b3:79:b6:
8d:24:e3:a7:72:ce:a5:56:7a:f0:c2:ed:c8:57:a8:
67:56:59:43:a9:84:e6:1c:53:d7:85:b0:3b:11:74:
1c:10:0c:57:14:7f:55:7f:6a:4d:e9:11:21:f6:94:
f2:23:d4:65:84:35:88:5c:cb:ff:2b:bb:da:6e:2d:
c6:ca:bd:ed:60:6c:b9:49:68:a5:f6:5e:0c:13:c1:
5c:84:26:6f:47:e0:2e:9f:bb:bd:05:a8:75:aa:96:
4a:50:c4:46:9f:7f:0c:c7:6a:65:74:e3:22:72:8c:
d6:0a:b7:61:e0:95:67:93:25:eb:f1:bd:10:1c:75:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:36:5B:62:73:C7:43:98:DB:D2:A4:4C:70:2D:01:F3:95:E2:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
65.44.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ec:13:3c:94:17:e1:f3:79:8e:c1:6c:64:3f:27:84:81:61:
b6:08:9c:47:4d:df:1d:30:b8:eb:f9:14:9f:38:e3:25:11:0e:
64:fe:d4:78:08:27:38:7b:e9:67:27:77:f9:b7:bb:75:f7:16:
65:da:fe:a4:c0:5e:76:39:52:f2:da:71:28:41:17:37:d5:ee:
0a:58:6e:66:0e:25:3a:bc:f3:06:b1:8e:87:d1:d2:f1:fd:cc:
f8:5a:5a:9c:7d:5e:c5:1b:a7:1a:27:ca:3f:62:ba:27:16:f0:
75:12:3e:af:cf:f1:a9:c2:88:77:54:df:50:db:8b:08:b8:21:
87:b0:de:75:ab:5e:cc:b0:3a:0c:fc:45:ec:4a:98:4e:ed:af:
a3:c7:9f:88:84:af:88:60:41:7a:15:a0:24:ac:b8:77:3a:cd:
c7:59:19:73:6b:6d:ce:5f:11:f9:6b:ce:f4:5d:a0:63:72:36:
dc:77:eb:d6:33:4d:c8:05:a8:09:a5:c1:2f:52:44:ce:9c:07:
b3:cc:ef:4a:d2:99:21:a7:90:2a:ad:04:15:2d:8e:d4:9b:73:
77:61:19:e7:ee:20:a0:ae:9e:ea:2b:f7:21:ff:ad:73:56:11:
fb:e2:11:7f:aa:ea:9b:51:22:5a:92:e5:7f:24:c4:fd:71:b1:
f3:16:71:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlVim41g1HGhMsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
ZjUyMDA1NDItZTEzYS00YzFkLWE3OTctOGRiYWU1ZjZjNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3rp15PWCM5/w4PpXubR8Xw0gJuev4PVnau5
PuWk9mNcpjWgbjJz9Ob71JqMrw6KqywC0C+dE8IytxV3qix5mLX5e4zQ5a4/A/dg
DHOxjNxYLNc6ojZ5Sa7VZZ6+ygayfeTq7Y8JOTwktbsPFGvaVTKfgFHyjFfdV2vQ
37jox3CU7L6zebaNJOOncs6lVnrwwu3IV6hnVllDqYTmHFPXhbA7EXQcEAxXFH9V
f2pN6REh9pTyI9RlhDWIXMv/K7vabi3Gyr3tYGy5SWil9l4ME8FchCZvR+Aun7u9
Bah1qpZKUMRGn38Mx2pldOMicozWCrdh4JVnkyXr8b0QHHV4WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjENltic8dDmNvSpExwLQHzleIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjQ5ZmQ1NmYtYjY4YS0z
YWZhLWEwYjQtMDc2MzI1ODM1YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSyrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPsEzyUF+HzeY7BbGQ/J4SBYbYInEdN3x0wuOv5FJ844yURDmT+1HgI
Jzh76Wcnd/m3u3X3FmXa/qTAXnY5UvLacShBFzfV7gpYbmYOJTq88waxjofR0vH9
zPhaWpx9XsUbpxonyj9iuicW8HUSPq/P8anCiHdU31Dbiwi4IYew3nWrXsywOgz8
RexKmE7tr6PHn4iEr4hgQXoVoCSsuHc6zcdZGXNrbc5fEflrzvRdoGNyNtx369Yz
TcgFqAmlwS9SRM6cB7PM70rSmSGnkCqtBBUtjtSbc3dhGefuIKCunuor9yH/rXNW
EfviEX+q6ptRIlqS5X8kxP1xsfMWcd8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:08:17 2025 by rpki-client