Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa
File: 0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa (raw, json)
Hash identifier: 17jGdlLoYogylUqUbtLnk8SRc6XpaC9nRjgWs5yqVPQ=
Subject key identifier: DD:DB:EE:1C:23:93:94:FC:5E:15:EF:FC:7E:8E:17:75:76:ED:00:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A15B5DA41684139463880F20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa
Signing time: Wed 22 Jan 2025 15:16:07 +0000
ROA not before: Wed 22 Jan 2025 15:16:07 +0000
ROA not after: Tue 22 Apr 2025 14:16:07 +0000
asID: 6167
IP address blocks: 97.216.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:5b:5d:a4:16:84:13:94:63:88:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 22 15:16:07 2025 GMT
Not After : Apr 22 14:16:07 2025 GMT
Subject: CN=98262f8d-dbce-44de-befb-be66157abb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:bf:8b:2e:ed:a4:8a:24:05:6b:ad:f0:b6:
c1:c4:c6:00:ea:d1:5d:e7:dc:00:4d:1d:f0:71:0c:
2b:2b:1a:e2:f0:63:92:0a:eb:ae:8f:97:d1:d6:b0:
09:4a:d6:9b:42:cf:54:67:67:24:2b:ef:14:5a:74:
b9:9d:9f:fc:60:63:60:13:ef:13:2b:e4:b2:1a:6b:
6a:07:a2:15:c4:a3:de:2c:97:e7:23:a3:8f:3e:9f:
4b:6f:1e:7e:2a:d9:23:4b:09:a4:dc:bc:f6:50:da:
13:c6:59:99:ec:20:87:fb:f0:3e:21:b4:61:75:ac:
51:c2:24:34:e6:e1:fe:55:f3:e7:84:cb:f1:0b:e1:
1c:d2:11:68:eb:05:c6:8d:59:6f:5d:b0:cb:c2:2d:
45:9d:29:c2:0a:f1:15:b5:21:45:45:0c:45:ea:49:
a2:2c:f7:87:a5:2e:9e:03:f7:85:ab:4b:5b:80:23:
28:c3:8c:d2:ac:16:ab:28:7d:74:22:c9:ab:5c:75:
ee:cd:98:37:9c:b1:63:d4:0e:8f:90:00:b9:2a:47:
e5:55:43:73:00:15:6a:87:bc:03:97:40:be:60:ee:
f7:d5:eb:b3:b7:70:bc:4f:3b:f5:48:cb:5e:f3:92:
05:3a:37:53:4e:ab:75:f8:f0:97:7f:de:72:5b:96:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:EE:1C:23:93:94:FC:5E:15:EF:FC:7E:8E:17:75:76:ED:00:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.216.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c0:af:ea:ff:b8:9e:f8:04:64:41:19:94:95:51:95:51:fd:
71:9b:41:36:be:41:58:b9:ec:88:a2:62:9a:77:e2:a5:ca:6d:
53:3a:c4:2b:c1:ec:72:b4:03:03:97:74:c2:f0:70:97:03:cc:
3b:bf:c9:64:e2:67:75:af:e4:17:c5:ce:7f:6c:b6:a1:96:f4:
6a:3b:c1:c3:67:c1:cd:f5:1c:6d:d5:f8:f9:b5:a5:bb:b7:e4:
cc:59:cf:3b:b7:6b:b0:4e:cb:2e:fd:90:8c:0f:58:b3:f2:8f:
25:2e:f7:45:6f:f6:3a:46:50:9b:c3:f7:c4:ac:6c:35:55:0d:
d3:3b:ad:0a:89:ef:5d:8a:9a:44:32:3c:7c:d1:32:a6:5e:3c:
ba:53:17:b5:2b:9d:da:9e:2f:f9:17:17:54:17:b5:13:73:f2:
10:e7:a5:b2:e1:b3:73:87:2e:8f:d9:8b:b4:fa:5f:36:1f:e7:
ed:10:85:43:68:f2:4e:4f:7a:6a:f3:7b:c6:6a:4f:d0:cb:45:
65:38:69:d6:51:bc:2d:64:28:ea:84:2a:2e:34:ee:55:1c:83:
bf:31:22:5b:90:80:86:15:79:e8:a4:66:8a:82:e0:79:89:f5:
f2:27:b7:e9:20:7b:bb:78:b8:e6:1b:27:83:94:14:9e:0e:d9:
e8:fd:ac:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihW12kFoQTlGOIDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMjE1MTYwN1oXDTI1MDQyMjE0MTYwN1owLzEtMCsGA1UEAxMk
OTgyNjJmOGQtZGJjZS00NGRlLWJlZmItYmU2NjE1N2FiYjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis2/iy7tpIokBWut8LbBxMYA6tFd59wATR3w
cQwrKxri8GOSCuuuj5fR1rAJStabQs9UZ2ckK+8UWnS5nZ/8YGNgE+8TK+SyGmtq
B6IVxKPeLJfnI6OPPp9Lbx5+KtkjSwmk3Lz2UNoTxlmZ7CCH+/A+IbRhdaxRwiQ0
5uH+VfPnhMvxC+Ec0hFo6wXGjVlvXbDLwi1FnSnCCvEVtSFFRQxF6kmiLPeHpS6e
A/eFq0tbgCMow4zSrBarKH10IsmrXHXuzZg3nLFj1A6PkAC5KkflVUNzABVqh7wD
l0C+YO731euzt3C8Tzv1SMte85IFOjdTTqt1+PCXf95yW5ZzowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3b7hwjk5T8XhXv/H6OF3V27QC2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGM5MmQ1ZjktOWJlZS0z
N2ExLThjMmUtYjAwODRlYTVlMjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdgkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7Ar+r/uJ74BGRBGZSVUZVR/XGbQTa+QVi57IiiYpp34qXKbVM6xCvB
7HK0AwOXdMLwcJcDzDu/yWTiZ3Wv5BfFzn9stqGW9Go7wcNnwc31HG3V+Pm1pbu3
5MxZzzu3a7BOyy79kIwPWLPyjyUu90Vv9jpGUJvD98SsbDVVDdM7rQqJ712KmkQy
PHzRMqZePLpTF7UrndqeL/kXF1QXtRNz8hDnpbLhs3OHLo/Zi7T6XzYf5+0QhUNo
8k5Pemrze8ZqT9DLRWU4adZRvC1kKOqEKi407lUcg78xIluQgIYVeeikZoqC4HmJ
9fInt+kge7t4uOYbJ4OUFJ4O2ej9rGk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:23 2025 by rpki-client