Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2921c6-21bd-35cf-9146-4265e3cbabe7.roa
File: 3a2921c6-21bd-35cf-9146-4265e3cbabe7.roa (raw, json)
Hash identifier: SEd73CHT99FVLNO4iqMrzhL9nPSl8T6lQfqAPqpIdOI=
Subject key identifier: 12:3C:1E:52:F9:E0:79:8D:F2:EB:8E:3E:F2:A6:21:C2:44:A0:E9:EF
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D200A51F496FCF27B07240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2921c6-21bd-35cf-9146-4265e3cbabe7.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.14.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:00:a5:1f:49:6f:cf:27:b0:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=7a5fdd18-c114-4ffb-8785-d888ca0356f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:bb:c4:e9:b2:8b:c7:b8:06:68:5d:f2:f2:
07:64:08:a6:4c:1b:e7:9f:ef:2a:d0:d2:e3:1a:95:
74:1f:23:eb:81:cc:ca:4f:f8:ac:a6:9d:17:66:47:
cb:80:66:5e:15:7f:9f:6c:df:2d:cf:c1:e3:47:39:
20:06:31:d4:44:c2:62:9e:f3:df:81:2a:a9:94:98:
d8:d3:3c:c5:12:9c:5a:1c:ea:f7:99:55:84:cb:f8:
ab:4a:62:b6:79:85:89:f9:38:66:93:53:c8:df:57:
dd:ce:a7:41:11:9d:4b:f6:95:ad:69:48:6c:6f:28:
46:4c:2f:a5:16:fb:89:70:a6:dd:13:ce:70:56:91:
2b:73:d9:20:fe:5d:15:5d:5e:c3:29:1f:0d:62:0e:
44:c6:33:2f:40:42:2d:4a:cc:11:64:1a:97:2b:b1:
0d:8d:72:72:ba:e0:bd:4a:f1:c4:58:5e:06:f6:cd:
ba:17:1b:f5:41:05:bf:6d:24:e6:14:e6:28:fa:29:
8b:19:fd:54:95:ac:47:d2:7a:27:20:7e:eb:a2:4e:
ae:f3:2d:c8:d2:d8:1d:a5:85:20:7e:18:30:48:2b:
52:5a:bd:dd:7a:57:87:f0:35:77:ce:37:ac:a2:24:
19:27:f8:bf:e0:8b:38:6d:32:a9:12:f9:1e:df:51:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:1E:52:F9:E0:79:8D:F2:EB:8E:3E:F2:A6:21:C2:44:A0:E9:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2921c6-21bd-35cf-9146-4265e3cbabe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.14.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ec:2c:3b:3d:ca:ba:7b:1b:a9:53:de:6a:52:21:98:14:42:
69:a6:f9:b0:40:7f:f9:39:d3:08:75:52:4c:12:a6:cf:01:e0:
88:71:5c:ad:6c:fd:11:9d:4d:43:48:0a:d4:68:d2:0b:2a:d6:
cd:82:06:e1:03:b6:d7:67:7d:45:fe:44:27:93:91:98:be:b8:
41:ed:8c:da:44:0a:e5:e6:3b:29:cf:9f:fe:9d:2d:3c:90:d6:
ba:83:0b:fe:11:f3:76:e8:24:6a:91:59:e9:a7:64:b0:ce:54:
f2:89:42:a9:5f:74:d4:0a:4a:00:22:c8:ce:67:6e:03:c8:ae:
a4:15:7d:07:d9:d5:ed:2e:c7:da:89:21:58:41:6f:2c:55:6f:
cb:a6:34:ae:4e:d7:58:19:2b:30:ad:7e:9e:a9:3b:7f:6d:11:
4a:11:f6:6c:d8:ee:c5:96:25:68:a8:05:8d:ce:6c:3b:de:21:
fe:96:f3:5f:e6:4b:fb:5c:81:4a:9b:6a:60:d0:29:06:77:c6:
e3:a1:15:f6:61:75:4d:0a:cf:43:5e:33:c7:c8:1d:6d:86:61:
fc:88:2d:bd:38:fd:80:46:91:e7:f5:11:b5:da:c6:7b:f6:1d:
1c:54:34:bc:2e:e7:23:54:25:ad:a7:35:cc:49:5e:e2:27:ae:
dd:b3:3e:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gClH0lvzyewckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
N2E1ZmRkMTgtYzExNC00ZmZiLTg3ODUtZDg4OGNhMDM1NmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidi7xOmyi8e4Bmhd8vIHZAimTBvnn+8q0NLj
GpV0HyPrgczKT/ispp0XZkfLgGZeFX+fbN8tz8HjRzkgBjHURMJinvPfgSqplJjY
0zzFEpxaHOr3mVWEy/irSmK2eYWJ+Thmk1PI31fdzqdBEZ1L9pWtaUhsbyhGTC+l
FvuJcKbdE85wVpErc9kg/l0VXV7DKR8NYg5ExjMvQEItSswRZBqXK7ENjXJyuuC9
SvHEWF4G9s26Fxv1QQW/bSTmFOYo+imLGf1UlaxH0nonIH7rok6u8y3I0tgdpYUg
fhgwSCtSWr3deleH8DV3zjesoiQZJ/i/4Is4bTKpEvke31FiAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBI8HlL54HmN8uuOPvKmIcJEoOnvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2EyOTIxYzYtMjFiZC0z
NWNmLTkxNDYtNDI2NWUzY2JhYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARw7eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHsLDs9yrp7G6lT3mpSIZgUQmmm+bBAf/k50wh1UkwSps8B4IhxXK1s
/RGdTUNICtRo0gsq1s2CBuEDttdnfUX+RCeTkZi+uEHtjNpECuXmOynPn/6dLTyQ
1rqDC/4R83boJGqRWemnZLDOVPKJQqlfdNQKSgAiyM5nbgPIrqQVfQfZ1e0ux9qJ
IVhBbyxVb8umNK5O11gZKzCtfp6pO39tEUoR9mzY7sWWJWioBY3ObDveIf6W81/m
S/tcgUqbamDQKQZ3xuOhFfZhdU0Kz0NeM8fIHW2GYfyILb04/YBGkef1EbXaxnv2
HRxUNLwu5yNUJa2nNcxJXuInrt2zPt4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:15:51 2025 by rpki-client