Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27785a90-06a2-3daf-b54a-594f9692e1bb.roa
File: 27785a90-06a2-3daf-b54a-594f9692e1bb.roa (raw, json)
Hash identifier: bXo+wnEq2jVVIHDO2Iu5MQVeWYOEbz8z49WzMw6Y1u0=
Subject key identifier: F1:1A:1C:8E:33:68:23:72:89:9C:FF:7D:58:2C:95:C5:61:FF:B9:05
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E866708E1260394D41421E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27785a90-06a2-3daf-b54a-594f9692e1bb.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.234.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:70:8e:12:60:39:4d:41:42:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=bd8433c3-ae16-4454-b006-848116acf89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:5d:02:05:cf:e1:ce:ec:ec:23:f0:51:2d:
b2:53:a2:9a:b8:9b:e1:b7:0a:2e:89:53:45:72:4d:
ad:3a:3a:bd:8d:3f:d5:43:6e:8b:cd:57:d0:c2:d9:
26:4e:52:c1:69:32:33:41:d5:f8:ef:0e:e0:3f:62:
5a:c8:d2:13:9e:26:7b:e9:bf:83:bc:24:9b:d2:5c:
c6:8f:a1:56:39:db:00:9c:96:6c:6a:04:4c:ea:62:
46:9d:58:48:cf:8e:0d:f4:9c:89:44:dd:fb:39:6c:
50:03:e4:7e:a1:a6:96:45:96:85:82:b2:9e:1f:9e:
08:2a:64:e1:60:0a:e9:d5:aa:28:76:30:42:0e:9e:
6c:d3:0f:75:7c:d5:9e:cb:73:e3:44:64:cf:b2:93:
a4:f4:ec:09:d1:44:f8:2e:94:77:66:10:55:91:d5:
35:47:a9:e5:1e:19:a3:57:c4:7a:4f:9e:96:f2:82:
a2:97:b2:b0:ed:f6:5b:65:2b:54:7a:61:01:ee:6f:
ef:b7:75:62:ff:b4:00:5a:3f:c2:f4:96:8a:fc:13:
1f:1d:9b:ce:24:60:a6:08:cf:8f:17:ce:1c:ab:af:
d9:3d:57:b6:e8:34:42:23:da:44:02:56:7f:7f:be:
e3:84:97:bb:d5:f9:4a:4b:b2:95:5a:c2:70:b4:24:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:1C:8E:33:68:23:72:89:9C:FF:7D:58:2C:95:C5:61:FF:B9:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27785a90-06a2-3daf-b54a-594f9692e1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.234.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:86:ab:39:b2:e1:0e:a5:2e:5c:ba:42:93:b3:7e:00:8d:8d:
9b:cc:17:fb:56:64:b8:83:a6:c0:70:28:e0:cc:c9:34:d8:08:
64:41:cd:04:e7:30:1f:4f:b9:53:dd:07:6f:df:f7:7a:b3:6a:
ef:64:68:ed:de:46:ed:c0:23:27:a6:27:2c:6d:e7:81:ac:0c:
0d:94:a8:9a:9b:8c:54:16:95:b6:6f:b0:db:84:27:e6:69:e5:
11:27:83:f9:6a:27:f3:43:f7:57:72:ac:5c:54:dd:d8:6d:5f:
e8:4e:82:37:6f:90:a6:f0:d8:f4:7f:2e:01:2c:f5:e8:6b:02:
49:9f:b1:0a:8d:e6:c9:f6:6f:c5:68:ac:59:0d:cc:fd:11:89:
04:3a:c6:4f:16:08:03:b9:fd:75:88:41:3d:0a:d1:4f:9f:9a:
c9:fc:fc:a2:fd:00:6e:a2:65:fb:95:1a:9e:8b:8d:b0:af:62:
29:e4:57:a1:62:db:40:26:21:32:5d:3e:9b:d9:ab:3a:c7:6f:
48:59:a3:c4:80:74:d6:41:1e:bc:37:74:99:8d:68:38:28:69:
92:e3:23:52:c7:97:4b:a0:7e:4b:64:ba:cb:74:52:dc:5c:ea:
70:ee:c3:34:75:c6:5a:22:19:48:04:5b:5d:32:f3:18:0d:65:
62:03:48:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnCOEmA5TUFCHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
YmQ4NDMzYzMtYWUxNi00NDU0LWIwMDYtODQ4MTE2YWNmODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbddAgXP4c7s7CPwUS2yU6KauJvhtwouiVNF
ck2tOjq9jT/VQ26LzVfQwtkmTlLBaTIzQdX47w7gP2JayNITniZ76b+DvCSb0lzG
j6FWOdsAnJZsagRM6mJGnVhIz44N9JyJRN37OWxQA+R+oaaWRZaFgrKeH54IKmTh
YArp1aoodjBCDp5s0w91fNWey3PjRGTPspOk9OwJ0UT4LpR3ZhBVkdU1R6nlHhmj
V8R6T56W8oKil7Kw7fZbZStUemEB7m/vt3Vi/7QAWj/C9JaK/BMfHZvOJGCmCM+P
F84cq6/ZPVe26DRCI9pEAlZ/f77jhJe71flKS7KVWsJwtCS+JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEaHI4zaCNyiZz/fVgslcVh/7kFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjc3ODVhOTAtMDZhMi0z
ZGFmLWI1NGEtNTk0Zjk2OTJlMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErurQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOGqzmy4Q6lLly6QpOzfgCNjZvMF/tWZLiDpsBwKODMyTTYCGRBzQTn
MB9PuVPdB2/f93qzau9kaO3eRu3AIyemJyxt54GsDA2UqJqbjFQWlbZvsNuEJ+Zp
5REng/lqJ/ND91dyrFxU3dhtX+hOgjdvkKbw2PR/LgEs9ehrAkmfsQqN5sn2b8Vo
rFkNzP0RiQQ6xk8WCAO5/XWIQT0K0U+fmsn8/KL9AG6iZfuVGp6LjbCvYinkV6Fi
20AmITJdPpvZqzrHb0hZo8SAdNZBHrw3dJmNaDgoaZLjI1LHl0ugfktkust0Utxc
6nDuwzR1xloiGUgEW10y8xgNZWIDSPg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:29 2025 by rpki-client