Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa
File: 605b6655-2258-3e2f-b8e2-21d1b4590afe.roa (raw, json)
Hash identifier: G7oYALfmAjIfOO87P9clx1FZyA2qk90pO6OjZ0ACj6U=
Subject key identifier: 6B:6F:AD:12:EC:23:7D:42:2D:BC:75:95:80:E6:EF:03:2C:6F:43:EF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA116B2E2C5828486ECE1980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 577
IP address blocks: 70.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:11:6b:2e:2c:58:28:48:6e:ce:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=f4ffb379-05c5-41de-8166-5c9f81ece17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ad:5f:4a:62:44:51:f2:cf:8c:ab:a4:4d:d0:
4e:f8:0a:c3:fb:95:13:ab:34:a1:1c:95:86:a8:e1:
f8:02:0b:b3:2f:77:0a:5a:05:ac:a5:16:69:74:22:
a9:64:67:8c:13:24:67:d9:70:46:65:a9:7d:45:0b:
f6:b3:21:d5:97:2d:4d:a6:7f:fb:83:9b:a3:18:9e:
02:19:1e:ba:81:4f:c4:93:ed:9c:14:8b:b3:3e:c7:
58:18:0d:0e:d4:27:b4:bc:9d:13:a7:69:fa:8d:0c:
60:34:dd:db:47:b2:ba:7f:e5:63:59:12:e1:26:79:
07:2c:6a:62:a7:2e:7f:e4:24:e7:df:9c:a9:c4:91:
87:b7:13:a8:76:9c:e8:12:5b:a2:d0:5e:39:76:6a:
11:46:66:f0:97:b6:7f:61:74:5b:aa:db:dc:34:22:
0e:48:51:4f:bc:95:6a:95:d1:4e:2a:d5:ef:fd:60:
3b:d2:e3:ed:13:1f:29:ef:fb:26:f2:20:d5:ea:da:
bf:1e:6e:08:cd:b8:4e:04:5e:ec:1a:0e:d1:aa:21:
4d:c3:4e:72:c0:8d:98:13:90:5e:22:0f:ff:94:9f:
68:c5:f9:54:0c:10:01:7f:de:0d:c2:11:90:ac:bb:
28:a8:59:3a:59:30:be:63:10:73:53:0c:e2:39:5d:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6F:AD:12:EC:23:7D:42:2D:BC:75:95:80:E6:EF:03:2C:6F:43:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1e:a4:7d:3b:1c:a5:c0:c2:ca:d9:7e:e3:4e:8b:32:c0:c7:
57:06:13:eb:c8:b0:d8:fe:a7:b4:cb:46:a6:70:1f:b5:1a:76:
64:60:84:57:0e:13:cd:8a:97:44:2d:f4:86:fa:66:b5:73:02:
de:92:4e:04:0a:06:3c:33:12:c0:65:7a:89:b1:8a:a8:41:31:
35:b6:bb:6a:db:0b:58:27:f0:c9:40:55:89:b9:cb:7a:0f:2f:
50:93:8b:0e:69:f4:c9:2d:38:48:60:23:8c:a1:66:3a:42:c5:
03:b7:20:a8:f0:0d:c5:91:e2:f3:6c:a6:02:95:b5:d8:60:31:
a5:80:5d:89:e8:fe:2b:15:0c:f2:1a:1e:0d:bd:d8:c3:23:6c:
e0:f8:95:ec:4e:8c:86:3f:56:0c:b6:cd:86:67:98:3d:19:88:
80:98:f6:27:af:a7:51:59:ef:c8:32:13:fc:9d:e8:45:ed:60:
94:bc:cd:5a:16:46:2a:08:bc:68:c0:4f:f6:6d:c7:10:c3:c3:
3d:fd:b6:ba:53:c0:4a:dc:eb:08:0b:06:d8:58:74:bb:c7:2f:
75:18:15:ea:95:92:c6:dd:29:29:3c:94:02:90:4c:4a:a7:3b:
e7:8c:05:fd:40:e6:db:85:80:82:8d:05:f1:19:fb:14:8d:a7:
bb:c0:52:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEKqEWsuLFgoSG7OGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjRmZmIzNzktMDVjNS00MWRlLTgxNjYtNWM5ZjgxZWNlMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga1fSmJEUfLPjKukTdBO+ArD+5UTqzShHJWG
qOH4AguzL3cKWgWspRZpdCKpZGeMEyRn2XBGZal9RQv2syHVly1Npn/7g5ujGJ4C
GR66gU/Ek+2cFIuzPsdYGA0O1Ce0vJ0Tp2n6jQxgNN3bR7K6f+VjWRLhJnkHLGpi
py5/5CTn35ypxJGHtxOodpzoElui0F45dmoRRmbwl7Z/YXRbqtvcNCIOSFFPvJVq
ldFOKtXv/WA70uPtEx8p7/sm8iDV6tq/Hm4IzbhOBF7sGg7RqiFNw05ywI2YE5Be
Ig//lJ9oxflUDBABf94NwhGQrLsoqFk6WTC+YxBzUwziOV2RzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGtvrRLsI31CLbx1lYDm7wMsb0PvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjA1YjY2NTUtMjI1OC0z
ZTJmLWI4ZTItMjFkMWI0NTkwYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARhwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADh6kfTscpcDCytl+406LMsDHVwYT68iw2P6ntMtGpnAftRp2ZGCEVw4T
zYqXRC30hvpmtXMC3pJOBAoGPDMSwGV6ibGKqEExNba7atsLWCfwyUBVibnLeg8v
UJOLDmn0yS04SGAjjKFmOkLFA7cgqPANxZHi82ymApW12GAxpYBdiej+KxUM8hoe
Db3YwyNs4PiV7E6Mhj9WDLbNhmeYPRmIgJj2J6+nUVnvyDIT/J3oRe1glLzNWhZG
Kgi8aMBP9m3HEMPDPf22ulPAStzrCAsG2Fh0u8cvdRgV6pWSxt0pKTyUApBMSqc7
54wF/UDm24WAgo0F8Rn7FI2nu8BS4A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:17 2025 by rpki-client