Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
File: 04b328e8-739b-3c12-82aa-7a968703666c.roa (raw, json)
Hash identifier: y1pKfYJvbERJz4w7dskx/KLhCRevhlp7xglmXe4Bk60=
Subject key identifier: 24:F1:A6:32:4F:F0:45:E4:1B:FC:EA:61:82:0D:1B:4B:C0:30:AA:B1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E86676E41134CDF2BE181D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.244.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:76:e4:11:34:cd:f2:be:18:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=6e8f3de9-74b5-4e57-9545-1ab35d453ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ad:c4:df:f6:68:54:06:f5:db:13:e6:a4:c4:
62:4d:c4:b8:57:85:8e:6a:ac:a8:1b:54:5b:e3:c5:
4b:98:24:d2:3c:c3:cb:2a:9b:c4:14:72:2b:1f:d7:
36:11:0c:76:e0:60:7e:00:12:50:1a:2e:7c:54:0d:
30:44:36:8d:40:7a:a8:63:cd:23:0e:30:d8:de:de:
38:f2:cb:40:8b:ff:66:8a:f7:3f:d7:a0:72:87:b2:
72:db:d8:f2:6c:54:d5:3b:37:bf:31:43:9a:a4:33:
37:da:90:c6:db:eb:05:5a:c0:cf:a0:68:89:1d:dd:
5c:33:4b:f5:00:bd:cb:77:5d:ca:f0:35:86:e8:45:
41:0d:d7:0a:ed:57:7f:ce:e3:1e:2a:ad:06:0b:ac:
02:72:2d:1f:ed:47:d3:2f:04:98:e2:5e:f2:e0:4b:
7b:87:51:9e:67:18:70:2f:31:da:e4:74:18:e1:ab:
90:5b:9b:fd:a2:94:1a:de:56:45:3e:b3:98:a0:6c:
2f:53:91:35:52:ab:be:f6:ee:3a:b5:a6:a4:12:e3:
d3:4c:18:5d:df:34:a7:34:31:9e:f0:37:20:a9:fe:
23:c8:21:59:b8:1c:ce:7e:eb:c1:0b:45:23:4c:c8:
f9:12:a3:dd:96:6c:b3:93:17:ec:64:7f:dc:ef:2e:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F1:A6:32:4F:F0:45:E4:1B:FC:EA:61:82:0D:1B:4B:C0:30:AA:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.244.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:7a:81:4b:9b:e1:69:75:94:84:43:42:7e:0b:b7:04:6f:06:
29:44:b0:fa:0f:e9:bf:fb:80:4d:3f:f8:0f:b7:4c:7c:27:77:
33:20:01:14:cc:d6:d7:fb:19:cf:ef:25:0b:2e:d7:5b:a0:af:
23:b5:fc:8b:fe:55:ad:57:df:21:19:0d:18:01:c7:9d:6c:33:
73:c0:05:0a:01:71:d4:71:f4:85:60:1d:34:3e:61:3c:fd:7d:
e1:80:97:8b:c2:e6:ed:f2:ac:f2:3d:6c:36:5b:9b:a5:c9:6a:
18:e7:87:ae:73:94:a6:c5:b0:18:97:c3:64:c4:94:14:a6:97:
66:2e:3c:7c:99:4b:d5:25:f1:fb:33:4b:0a:7d:ea:df:67:e7:
44:0e:e7:a1:bc:81:33:2a:85:88:f5:a5:91:f4:67:d6:2e:80:
fa:2b:8c:48:c4:3c:2c:bb:d9:5f:2a:97:25:d2:24:47:1f:82:
3e:c9:e4:b1:aa:2d:8e:23:51:29:c7:07:49:ab:f4:a0:93:24:
a2:3b:79:9e:a8:d8:a2:67:c5:81:5b:68:34:99:ed:22:9b:05:
0c:f3:5a:c0:63:c8:54:c1:ca:0b:ac:a0:5a:f1:40:d8:3b:14:
0a:01:16:af:fb:85:e6:5f:f7:c1:df:6f:82:85:1b:46:11:76:
84:27:7d:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnbkETTN8r4YHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
NmU4ZjNkZTktNzRiNS00ZTU3LTk1NDUtMWFiMzVkNDUzZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga3E3/ZoVAb12xPmpMRiTcS4V4WOaqyoG1Rb
48VLmCTSPMPLKpvEFHIrH9c2EQx24GB+ABJQGi58VA0wRDaNQHqoY80jDjDY3t44
8stAi/9mivc/16Byh7Jy29jybFTVOze/MUOapDM32pDG2+sFWsDPoGiJHd1cM0v1
AL3Ld13K8DWG6EVBDdcK7Vd/zuMeKq0GC6wCci0f7UfTLwSY4l7y4Et7h1GeZxhw
LzHa5HQY4auQW5v9opQa3lZFPrOYoGwvU5E1Uqu+9u46taakEuPTTBhd3zSnNDGe
8Dcgqf4jyCFZuBzOfuvBC0UjTMj5EqPdlmyzkxfsZH/c7y7ZTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTxpjJP8EXkG/zqYYING0vAMKqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDRiMzI4ZTgtNzM5Yi0z
YzEyLTgyYWEtN2E5Njg3MDM2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAER6gUub4Wl1lIRDQn4LtwRvBilEsPoP6b/7gE0/+A+3THwndzMgARTM
1tf7Gc/vJQsu11ugryO1/Iv+Va1X3yEZDRgBx51sM3PABQoBcdRx9IVgHTQ+YTz9
feGAl4vC5u3yrPI9bDZbm6XJahjnh65zlKbFsBiXw2TElBSml2YuPHyZS9Ul8fsz
Swp96t9n50QO56G8gTMqhYj1pZH0Z9YugPorjEjEPCy72V8qlyXSJEcfgj7J5LGq
LY4jUSnHB0mr9KCTJKI7eZ6o2KJnxYFbaDSZ7SKbBQzzWsBjyFTBygusoFrxQNg7
FAoBFq/7heZf98Hfb4KFG0YRdoQnfUk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:58 2025 by rpki-client