Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa
File: f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa (raw, json)
Hash identifier: t9EjVSjV1AmKfKSaTQiA0eGOfPeljhG2+VRP9pPw02E=
Subject key identifier: 72:B8:51:94:62:30:9C:70:65:71:DF:94:55:38:1E:4B:42:AD:7B:AE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1A2218DB6B6A6D59AE100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 40772
IP address blocks: 68.189.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a2:21:8d:b6:b6:a6:d5:9a:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=37268dc6-7909-441f-b333-1fc632745145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:f8:6a:a3:77:00:74:6f:b5:90:1d:6a:73:
b2:7c:34:f0:ba:47:2c:7f:06:01:a0:74:1d:91:db:
b6:9a:14:2b:8e:6b:b7:9b:38:60:37:eb:ae:46:81:
f3:8f:ea:50:5b:86:3c:3d:53:b7:47:9e:37:1c:2f:
4e:6e:7e:85:ea:32:60:b5:07:cb:73:98:36:67:7f:
de:e9:8d:39:94:82:b9:8a:60:a9:f8:55:7f:ed:02:
d0:0e:7b:4f:3f:16:68:58:91:2c:0f:c5:65:59:07:
28:aa:36:fe:c2:ac:49:8e:db:d1:91:b9:31:1a:3d:
2f:e0:e7:59:4f:03:81:b2:7a:ea:3c:2d:2b:17:cd:
dd:b8:c6:a6:62:b4:24:b7:e9:9e:0a:db:9c:f3:a4:
46:ad:f6:04:f3:c3:68:fa:25:3e:33:5e:47:27:2b:
ad:35:79:bd:65:74:b4:d1:2f:7d:26:6e:bb:2b:54:
aa:32:52:73:9b:8a:a7:cc:f2:bc:36:de:a4:4e:ab:
9e:1d:01:9a:2f:8f:80:cf:a2:81:1e:a4:43:1a:e1:
22:27:62:4e:dc:dd:2d:4f:b4:64:de:ad:06:6d:98:
bd:79:b1:d1:4b:92:ca:bd:b0:63:90:d5:35:ff:7b:
b3:df:9d:81:97:26:40:1b:d6:54:85:90:0d:89:07:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B8:51:94:62:30:9C:70:65:71:DF:94:55:38:1E:4B:42:AD:7B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.189.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9a:27:b5:67:39:b1:bd:a9:5e:83:29:17:10:68:d3:5c:08:
2f:48:c9:5f:d6:48:bb:43:20:a0:61:7c:0c:46:81:ce:d9:23:
16:ef:08:a4:70:b8:30:95:8c:29:ff:ae:e5:11:4d:d1:f1:47:
95:03:f6:a7:39:7d:11:fc:a1:eb:b9:dc:25:d3:a4:d6:50:2d:
6b:d0:58:bc:f2:6d:2f:df:3b:d4:f8:1d:28:c3:0f:52:0b:03:
47:92:33:45:61:2d:eb:a5:99:4e:4a:f0:1f:7f:37:ef:ef:dd:
67:87:71:52:29:78:5e:3c:00:30:87:e0:4c:da:3d:24:2f:e0:
c5:d9:2a:91:dd:f8:c3:2c:39:60:49:c3:be:08:c9:68:da:cf:
ad:21:18:b4:bb:2d:d5:da:37:ab:52:1f:e5:b4:22:be:50:92:
50:89:a8:1e:28:d7:af:fa:93:b7:98:a0:1c:8f:6b:ed:53:f8:
cf:36:e1:34:ec:c9:90:f5:19:72:ce:17:ad:27:25:6f:e7:62:
55:53:06:df:be:f4:a2:70:19:3d:44:9b:13:7d:7b:a1:16:fd:
a4:1b:bf:5d:a6:f3:40:9e:ba:aa:26:74:b3:64:84:2e:ca:89:
8e:39:e6:1b:e8:18:c0:d4:f1:c6:19:92:2b:fd:f8:23:4b:20:
8a:5f:d3:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aIhjba2ptWa4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzcyNjhkYzYtNzkwOS00NDFmLWIzMzMtMWZjNjMyNzQ1MTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIr4aqN3AHRvtZAdanOyfDTwukcsfwYBoHQd
kdu2mhQrjmu3mzhgN+uuRoHzj+pQW4Y8PVO3R543HC9Obn6F6jJgtQfLc5g2Z3/e
6Y05lIK5imCp+FV/7QLQDntPPxZoWJEsD8VlWQcoqjb+wqxJjtvRkbkxGj0v4OdZ
TwOBsnrqPC0rF83duMamYrQkt+meCtuc86RGrfYE88No+iU+M15HJyutNXm9ZXS0
0S99Jm67K1SqMlJzm4qnzPK8Nt6kTqueHQGaL4+Az6KBHqRDGuEiJ2JO3N0tT7Rk
3q0GbZi9ebHRS5LKvbBjkNU1/3uz352BlyZAG9ZUhZANiQeAsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHK4UZRiMJxwZXHflFU4HktCrXuuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjk5Zjc5NzQtNWQwYi0z
YzAzLWE3NjMtZTVkNGVmNDQ3ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARL0dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6aJ7VnObG9qV6DKRcQaNNcCC9IyV/WSLtDIKBhfAxGgc7ZIxbvCKRw
uDCVjCn/ruURTdHxR5UD9qc5fRH8oeu53CXTpNZQLWvQWLzybS/fO9T4HSjDD1IL
A0eSM0VhLeulmU5K8B9/N+/v3WeHcVIpeF48ADCH4EzaPSQv4MXZKpHd+MMsOWBJ
w74IyWjaz60hGLS7LdXaN6tSH+W0Ir5QklCJqB4o16/6k7eYoByPa+1T+M824TTs
yZD1GXLOF60nJW/nYlVTBt++9KJwGT1EmxN9e6EW/aQbv12m80CeuqomdLNkhC7K
iY455hvoGMDU8cYZkiv9+CNLIIpf07I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:43 2025 by rpki-client