Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70c47cc3-6a67-3a8e-9ddb-fb37a42a68a3.roa
File: 70c47cc3-6a67-3a8e-9ddb-fb37a42a68a3.roa (raw, json)
Hash identifier: oniWeTRY8+HBuTDKhlV0ZGdz1ueHV7Q7Vc5nOW88bZM=
Subject key identifier: 9E:28:23:28:C0:3C:8A:EE:F0:21:DE:8D:77:1F:0E:ED:23:75:11:91
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D17DCD47A73ED00065A280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70c47cc3-6a67-3a8e-9ddb-fb37a42a68a3.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.8.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:7d:cd:47:a7:3e:d0:00:65:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=14846b9c-20c4-41d5-a6e9-62e12851a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:c3:54:2e:92:dd:a2:ff:00:84:d7:00:88:
c5:ef:dd:fb:16:0a:15:a3:1f:ee:4d:7a:4e:18:18:
1c:73:4f:28:62:b0:2d:db:54:e7:ce:a1:b8:ea:7d:
31:4f:72:c1:1c:36:30:12:a4:0c:44:83:77:77:23:
c5:df:43:78:5b:91:d8:c0:7b:04:d7:e0:bb:3a:93:
72:9a:1f:eb:36:d1:b6:a0:b7:fb:f2:0b:56:5e:4c:
6d:9d:83:d0:98:91:b6:84:01:76:3b:b8:21:85:e1:
5f:d5:dc:a2:22:65:5c:a3:bc:6c:c6:80:b1:73:ea:
97:1b:71:0a:3d:2f:e6:49:51:dd:c4:67:1b:ce:ab:
02:2c:5e:98:d7:0b:88:27:27:3b:59:1c:8e:61:ee:
8e:c8:15:b6:49:2e:d6:31:6f:33:f3:b4:d7:e3:07:
ab:37:0d:b5:72:d3:a6:c2:e1:d7:28:a5:a4:37:2e:
d1:71:c0:2d:96:9c:d6:c5:04:7b:dd:a5:a4:3b:c4:
da:90:eb:17:6a:15:13:34:de:42:c0:92:1c:f3:54:
31:07:a8:6a:39:45:6d:6a:d9:95:a9:5f:9a:c6:9c:
ea:fb:3a:8c:01:7e:78:d5:22:85:6d:50:51:a8:f9:
33:c6:cf:8a:42:5d:87:a9:8f:9f:22:30:81:1d:f8:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:23:28:C0:3C:8A:EE:F0:21:DE:8D:77:1F:0E:ED:23:75:11:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70c47cc3-6a67-3a8e-9ddb-fb37a42a68a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.8.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:03:c5:7e:02:04:65:dc:11:a1:84:1b:e9:59:ba:b2:89:63:
a4:fb:25:55:d3:3d:59:12:1a:15:93:34:b5:b9:6e:a0:e2:58:
d6:8d:b6:54:99:ce:90:06:a8:a2:13:25:0c:b2:fe:c0:bf:9d:
23:12:97:a8:13:b6:f1:a2:db:b3:48:a4:6d:c2:29:ef:62:17:
ed:c0:f6:99:c6:f5:42:93:67:77:87:99:8d:05:82:bb:b2:7a:
92:7b:f2:db:e8:2f:cd:c2:e9:f4:54:81:5e:9e:b6:3b:ae:f7:
dd:1f:b4:06:41:10:b8:7c:95:f6:34:82:de:bf:20:55:a6:0b:
88:40:ad:53:6b:67:7d:92:2b:fd:42:2e:1a:b6:da:41:14:8b:
c6:46:4e:d6:4d:49:08:1a:b2:dd:97:84:6b:bd:17:f0:c1:ed:
ce:cf:d9:59:1d:e2:7d:e5:1f:88:1c:76:16:33:ae:0a:24:b2:
9e:ed:1c:e0:18:ca:fe:24:0c:cd:f5:1e:b2:79:fa:12:28:bb:
48:b7:6c:27:3d:6b:0c:c3:6a:94:c6:b8:e5:fc:05:b7:89:ef:
c5:df:e5:cb:a2:d2:cf:b8:c1:ed:c5:17:ea:c2:9e:94:bc:57:
51:b1:04:93:2c:ab:e7:27:d1:9d:7e:91:f3:31:24:da:48:4c:
ea:3a:23:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0X3NR6c+0ABlooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTQ4NDZiOWMtMjBjNC00MWQ1LWE2ZTktNjJlMTI4NTFhNTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKHDVC6S3aL/AITXAIjF7937FgoVox/uTXpO
GBgcc08oYrAt21TnzqG46n0xT3LBHDYwEqQMRIN3dyPF30N4W5HYwHsE1+C7OpNy
mh/rNtG2oLf78gtWXkxtnYPQmJG2hAF2O7ghheFf1dyiImVco7xsxoCxc+qXG3EK
PS/mSVHdxGcbzqsCLF6Y1wuIJyc7WRyOYe6OyBW2SS7WMW8z87TX4werNw21ctOm
wuHXKKWkNy7RccAtlpzWxQR73aWkO8TakOsXahUTNN5CwJIc81QxB6hqOUVtatmV
qV+axpzq+zqMAX541SKFbVBRqPkzxs+KQl2HqY+fIjCBHfjKLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4oIyjAPIru8CHejXcfDu0jdRGRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzBjNDdjYzMtNmE2Ny0z
YThlLTlkZGItZmIzN2E0MmE2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRwiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMwDxX4CBGXcEaGEG+lZurKJY6T7JVXTPVkSGhWTNLW5bqDiWNaNtlSZ
zpAGqKITJQyy/sC/nSMSl6gTtvGi27NIpG3CKe9iF+3A9pnG9UKTZ3eHmY0Fgruy
epJ78tvoL83C6fRUgV6etjuu990ftAZBELh8lfY0gt6/IFWmC4hArVNrZ32SK/1C
Lhq22kEUi8ZGTtZNSQgast2XhGu9F/DB7c7P2Vkd4n3lH4gcdhYzrgoksp7tHOAY
yv4kDM31HrJ5+hIou0i3bCc9awzDapTGuOX8BbeJ78Xf5cui0s+4we3FF+rCnpS8
V1GxBJMsq+cn0Z1+kfMxJNpITOo6I60=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:31 2025 by rpki-client