Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ff378d7-41b4-38a1-8a7f-95960528a375.roa
File: 8ff378d7-41b4-38a1-8a7f-95960528a375.roa (raw, json)
Hash identifier: gvjoPkhdTpPX5iM8Wygpj8/DRgXnRRnPTomVkI3Jzc0=
Subject key identifier: E0:60:F7:E3:87:56:3A:46:B4:71:AF:32:3E:9C:C7:3F:2D:80:61:32
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B412331BDE4D68DC88780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ff378d7-41b4-38a1-8a7f-95960528a375.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 71.14.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:41:23:31:bd:e4:d6:8d:c8:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4ac16b0e-3b3c-414a-9e66-8c6905120573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:4e:70:a8:cb:fa:60:1b:c4:2b:0b:c5:09:
58:b2:c2:c0:b3:1d:c9:a0:f9:12:0e:1b:52:9d:24:
e2:97:c6:d9:7a:87:fd:c1:50:e4:6a:fa:d2:a7:72:
a8:19:8b:55:d5:e1:48:96:bb:01:e2:14:61:f6:a0:
4a:8f:98:90:47:32:14:c9:ea:ea:e5:53:bb:dd:70:
c1:58:70:3f:e5:05:b6:5c:b1:6d:2e:5f:b3:69:64:
dd:0d:05:a9:c9:a9:b4:7b:ba:fa:fb:3d:29:9e:58:
ec:b5:0a:3e:fc:51:f5:52:07:ab:df:f0:3c:26:29:
1d:c8:e6:3e:70:8f:da:3c:5b:d8:f0:f8:6d:a9:44:
02:e4:a6:84:7b:4a:71:e9:22:9e:4e:18:e0:7f:61:
49:5f:c6:90:e5:92:1d:59:f0:37:72:fe:65:1d:b5:
c0:0d:47:e2:84:3f:2f:66:cc:8d:d1:d1:32:b0:ed:
6c:19:26:2a:83:f5:cc:0e:bd:fa:56:13:5e:e5:59:
f1:87:1c:60:0f:72:10:f0:ea:4d:5b:a1:e2:cf:7d:
83:c0:1c:2d:ee:a2:78:59:9c:21:20:55:dd:61:4b:
0e:d7:76:10:cc:5a:dd:48:3e:00:dd:ef:0c:90:83:
83:19:8a:81:04:1f:c5:1f:05:47:df:5a:bc:89:e6:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:60:F7:E3:87:56:3A:46:B4:71:AF:32:3E:9C:C7:3F:2D:80:61:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ff378d7-41b4-38a1-8a7f-95960528a375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.14.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:08:4f:95:21:24:44:58:e8:5a:fc:6b:c4:4f:4d:1e:af:33:
73:55:72:5f:0a:31:3f:92:bb:ca:45:c9:08:0b:82:21:27:79:
22:f0:11:fa:ea:08:be:44:c9:c7:79:e5:99:c5:53:f5:c9:63:
ef:f6:d7:39:b2:f7:af:2d:22:95:73:54:72:b9:4d:a0:fc:e9:
2a:20:3b:a7:90:75:67:7c:df:d5:23:9d:df:6d:62:ea:9b:c8:
09:79:e6:b3:e8:d1:48:e0:f8:6f:52:c6:32:ae:7a:49:0f:6c:
a9:a2:43:3e:25:33:0f:3d:6e:af:69:53:bf:1e:d6:ab:29:e2:
42:d8:4a:42:aa:fc:2b:a9:d7:50:b8:4d:28:dd:12:8f:2d:07:
05:38:e0:f4:64:fe:6d:7e:05:a5:e5:fa:b6:09:db:81:99:94:
8f:7a:5b:4a:23:24:02:9d:9b:65:4b:80:a2:9a:9c:0b:61:4d:
be:27:97:0b:06:a9:c0:a8:97:dc:26:7e:22:38:ae:6f:40:7a:
e1:fb:dd:00:b8:e6:fa:f7:36:ad:0a:66:ef:a1:a7:04:9b:5a:
4a:36:58:95:e3:05:2b:39:52:f4:71:57:cd:6a:18:ca:1b:b8:
1e:89:ac:8e:08:97:de:96:75:cb:70:50:7f:d4:c6:34:65:de:
6e:fa:1a:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe0EjMb3k1o3Ih4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NGFjMTZiMGUtM2IzYy00MTRhLTllNjYtOGM2OTA1MTIwNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AVOcKjL+mAbxCsLxQlYssLAsx3JoPkSDhtS
nSTil8bZeof9wVDkavrSp3KoGYtV1eFIlrsB4hRh9qBKj5iQRzIUyerq5VO73XDB
WHA/5QW2XLFtLl+zaWTdDQWpyam0e7r6+z0pnljstQo+/FH1Uger3/A8JikdyOY+
cI/aPFvY8PhtqUQC5KaEe0px6SKeThjgf2FJX8aQ5ZIdWfA3cv5lHbXADUfihD8v
ZsyN0dEysO1sGSYqg/XMDr36VhNe5VnxhxxgD3IQ8OpNW6Hiz32DwBwt7qJ4WZwh
IFXdYUsO13YQzFrdSD4A3e8MkIODGYqBBB/FHwVH31q8iebpyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBg9+OHVjpGtHGvMj6cxz8tgGEyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGZmMzc4ZDctNDFiNC0z
OGExLThhN2YtOTU5NjA1MjhhMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRw6sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMIT5UhJERY6Fr8a8RPTR6vM3NVcl8KMT+Su8pFyQgLgiEneSLwEfrq
CL5Eycd55ZnFU/XJY+/21zmy968tIpVzVHK5TaD86SogO6eQdWd839Ujnd9tYuqb
yAl55rPo0Ujg+G9SxjKuekkPbKmiQz4lMw89bq9pU78e1qsp4kLYSkKq/Cup11C4
TSjdEo8tBwU44PRk/m1+BaXl+rYJ24GZlI96W0ojJAKdm2VLgKKanAthTb4nlwsG
qcCol9wmfiI4rm9AeuH73QC45vr3Nq0KZu+hpwSbWko2WJXjBSs5UvRxV81qGMob
uB6JrI4Il96WdctwUH/UxjRl3m76GiU=
-----END CERTIFICATE-----
Generated at Sun May 11 02:43:17 2025 by rpki-client