Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
File: 2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa (raw, json)
Hash identifier: Jn3dEdyCg1DtkEtrc6hbRKhxSgqdvD/j3Reqa6iwLv0=
Subject key identifier: 3E:85:31:7E:19:52:20:D1:D2:BD:1D:9C:69:EA:67:F6:17:DA:C8:2A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7A0E48AFE4EE679E9CD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 12079
IP address blocks: 153.114.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:0e:48:af:e4:ee:67:9e:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3c37ed64-c53b-4eb7-801e-ca2ed7ad51f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:77:6e:f6:93:a2:cf:7d:18:7e:be:71:f0:
48:4c:4e:7c:70:8c:7e:62:a5:c1:a7:50:36:d2:1d:
6d:ec:f3:c5:92:8c:c6:91:2f:67:a6:90:37:35:64:
0a:0e:df:ad:9a:9e:2c:90:23:e6:48:94:5a:7d:05:
0c:2c:f2:81:20:f9:8f:44:bb:81:0a:e3:92:69:a0:
87:d8:27:24:c5:bf:62:bf:b1:df:0e:8e:cb:6b:04:
db:71:e0:ad:1a:36:9c:f0:2a:6e:09:38:72:46:56:
ce:e6:65:d5:e9:e2:0a:6b:55:e1:cf:a2:a2:14:18:
2e:9e:b1:7a:27:f9:69:f7:81:32:d9:3c:c7:41:25:
93:f3:d1:bc:f9:1d:2a:1c:ae:75:cc:cf:0c:1b:8c:
47:63:7c:b7:5f:95:e8:47:d4:06:47:2e:75:b2:3c:
c4:c1:e8:c5:57:6c:f4:40:0c:bd:2c:ae:83:b4:25:
f8:6d:bb:bf:cf:fc:56:7f:05:e4:9e:1a:5d:bf:c5:
ec:80:a5:34:7b:ad:a5:e8:7e:a6:fa:06:62:3c:76:
5c:29:f7:57:99:d1:59:3a:9d:d4:b8:ae:88:5b:20:
26:11:5f:1d:9d:41:e9:94:ef:02:53:fd:9f:b4:c0:
70:39:34:bc:9b:fa:96:39:31:bb:a7:39:80:f9:50:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:31:7E:19:52:20:D1:D2:BD:1D:9C:69:EA:67:F6:17:DA:C8:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
153.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ee:ad:63:87:92:95:91:bf:59:d1:32:9d:e5:db:4d:a8:d3:
1c:20:5c:e0:e6:28:cd:3d:b5:17:50:37:f0:91:30:7f:2c:45:
a9:ee:96:79:46:50:fb:0f:2e:dd:bf:48:0c:30:28:32:2e:b7:
5b:4e:56:54:45:fe:f3:54:ce:b4:88:58:b1:67:b7:8e:dc:b9:
0e:ea:49:56:20:af:26:00:0e:95:b0:70:4f:30:8d:e2:a7:0d:
2a:a4:18:cc:a8:b8:2a:e4:d7:d6:db:c1:df:0d:d7:a2:b4:8a:
66:17:d0:42:2d:51:53:ff:ef:6b:94:67:60:9f:f7:88:20:fe:
43:2c:8f:95:0c:1d:a9:10:ab:2b:4f:38:3e:d9:37:2f:b9:56:
df:e8:7b:4b:61:4c:88:fc:a7:d8:52:24:80:02:59:47:f3:43:
f9:03:64:b9:da:07:3c:3d:49:49:06:7f:78:ce:ca:0f:c6:8b:
15:a7:38:8b:98:92:f0:90:3e:a7:e9:c9:d4:ae:10:2d:4e:16:
ca:a0:5d:b7:c8:ce:39:6c:ef:a9:75:10:af:0c:2f:1d:6d:8f:
a8:e9:2d:09:82:fd:51:0a:fe:9f:db:45:d5:0c:b0:bf:97:02:
dc:52:71:3d:bb:2b:d3:dc:76:0a:5b:01:d1:a6:7e:a5:b6:7d:
5a:e1:5b:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEh863oOSK/k7meenNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
M2MzN2VkNjQtYzUzYi00ZWI3LTgwMWUtY2EyZWQ3YWQ1MWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuV3bvaTos99GH6+cfBITE58cIx+YqXBp1A2
0h1t7PPFkozGkS9nppA3NWQKDt+tmp4skCPmSJRafQUMLPKBIPmPRLuBCuOSaaCH
2Cckxb9iv7HfDo7LawTbceCtGjac8CpuCThyRlbO5mXV6eIKa1Xhz6KiFBgunrF6
J/lp94Ey2TzHQSWT89G8+R0qHK51zM8MG4xHY3y3X5XoR9QGRy51sjzEwejFV2z0
QAy9LK6DtCX4bbu/z/xWfwXknhpdv8XsgKU0e62l6H6m+gZiPHZcKfdXmdFZOp3U
uK6IWyAmEV8dnUHplO8CU/2ftMBwOTS8m/qWOTG7pzmA+VCZHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD6FMX4ZUiDR0r0dnGnqZ/YX2sgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjA1N2RjZjktM2E5Yi0z
MGIwLWE3OTItMDExNmIwN2RkMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmXIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASe6tY4eSlZG/WdEyneXbTajTHCBc4OYozT21F1A38JEwfyxFqe6WeUZQ
+w8u3b9IDDAoMi63W05WVEX+81TOtIhYsWe3jty5DupJViCvJgAOlbBwTzCN4qcN
KqQYzKi4KuTX1tvB3w3XorSKZhfQQi1RU//va5RnYJ/3iCD+QyyPlQwdqRCrK084
Ptk3L7lW3+h7S2FMiPyn2FIkgAJZR/ND+QNkudoHPD1JSQZ/eM7KD8aLFac4i5iS
8JA+p+nJ1K4QLU4WyqBdt8jOOWzvqXUQrwwvHW2PqOktCYL9UQr+n9tF1Qywv5cC
3FJxPbsr09x2ClsB0aZ+pbZ9WuFbdg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:50 2025 by rpki-client