Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa
File: 3fd32110-2549-302d-a090-2361ceb42d58.roa (raw, json)
Hash identifier: ua/qRNxa2+xGCYUpR9V8watR3uu09Wc4uGQk7v1Fa2M=
Subject key identifier: C8:7D:CE:CB:72:A2:EB:76:16:A5:45:35:95:DC:32:BE:19:27:5A:03
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2B741BF3A1E287EDF700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.239.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:74:1b:f3:a1:e2:87:ed:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=26a7a14c-6d46-4762-87f9-8eb73423c39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:b9:a7:d9:ea:98:2c:68:50:6d:21:6d:1f:
b5:a4:9e:29:91:a2:7a:50:f8:a6:ca:93:22:b4:65:
04:72:f5:70:6a:c4:78:e3:7c:24:12:19:a1:a2:2f:
ef:30:42:b4:b0:e3:7a:7e:0f:a7:a5:9f:1e:b5:8f:
08:42:b1:ae:3d:1f:64:db:e5:e5:eb:7f:5f:30:13:
01:1c:bb:ac:5f:60:9e:af:01:8d:c2:22:5c:47:ba:
bd:6b:2c:82:ac:90:21:7e:ea:c8:ec:fb:35:64:51:
d9:2d:6c:b5:6f:f9:21:be:bf:1d:5d:5d:81:b8:24:
2c:90:5c:1c:f9:da:25:0b:ef:76:f2:19:5b:2e:84:
bf:58:10:1c:9d:99:63:58:fd:57:31:9a:49:39:18:
9e:65:01:b3:3f:5d:6f:aa:ed:d7:b3:3b:75:b4:88:
e5:1c:22:4e:ac:1d:7b:68:03:6e:11:b7:ae:a6:3e:
26:9d:05:be:cd:94:58:08:2c:c1:1d:03:5f:39:1a:
dd:05:c7:c1:95:1b:c7:d1:30:27:93:11:f0:d5:80:
02:b4:ce:bc:03:3f:fb:90:8b:3e:2c:96:e8:50:33:
96:c7:79:e5:8a:3e:2d:5b:62:f5:19:3b:ee:d6:65:
63:71:38:35:89:4d:59:eb:c2:08:5b:ba:3f:bb:27:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7D:CE:CB:72:A2:EB:76:16:A5:45:35:95:DC:32:BE:19:27:5A:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.239.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:73:98:e5:ea:42:a7:a1:31:3a:b8:22:1a:73:39:fe:03:16:
4d:b2:9f:d6:c3:a7:59:fa:3f:e1:de:56:2a:45:0f:d7:f4:a4:
5a:92:24:fa:dd:22:28:fe:41:dd:90:05:68:31:d1:14:be:4e:
c2:65:2c:40:ec:fc:6f:b4:1e:00:15:04:69:b9:5f:62:6b:a4:
17:f3:ca:c0:87:ea:fc:0b:5b:04:15:30:a6:45:e1:6f:33:4f:
b4:92:54:db:2e:1a:c7:3f:fe:34:eb:2b:fc:84:35:2e:bb:6c:
e7:20:86:e4:0b:56:84:56:a8:18:85:f9:21:c2:62:97:12:87:
d4:13:3d:74:70:a6:8b:8d:21:31:2c:94:0e:cf:16:d5:d2:af:
6b:de:26:f1:5f:6d:5a:0c:41:77:ef:c9:49:50:98:e6:76:d6:
1e:dc:f3:a1:f3:17:38:9a:de:98:07:d4:a4:f1:a0:52:d6:d8:
f2:50:e6:a2:c6:3f:dd:26:d9:a8:0d:a0:9f:9e:4c:3f:84:10:
db:42:06:bd:09:76:a6:94:6f:3c:ef:1f:d4:4f:83:4e:6b:d8:
a9:71:51:b4:93:41:9e:82:17:7d:e3:1c:d2:a6:35:f1:66:ed:
65:59:cf:6b:ac:32:cb:bc:55:7d:44:50:70:af:ae:f5:3e:ce:
d6:8c:a1:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCt0G/Oh4oft9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MjZhN2ExNGMtNmQ0Ni00NzYyLTg3ZjktOGViNzM0MjNjMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkte5p9nqmCxoUG0hbR+1pJ4pkaJ6UPimypMi
tGUEcvVwasR443wkEhmhoi/vMEK0sON6fg+npZ8etY8IQrGuPR9k2+Xl639fMBMB
HLusX2CerwGNwiJcR7q9ayyCrJAhfurI7Ps1ZFHZLWy1b/khvr8dXV2BuCQskFwc
+dolC+928hlbLoS/WBAcnZljWP1XMZpJORieZQGzP11vqu3Xszt1tIjlHCJOrB17
aANuEbeupj4mnQW+zZRYCCzBHQNfORrdBcfBlRvH0TAnkxHw1YACtM68Az/7kIs+
LJboUDOWx3nlij4tW2L1GTvu1mVjcTg1iU1Z68IIW7o/uycalQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMh9zstyout2FqVFNZXcMr4ZJ1oDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZkMzIxMTAtMjU0OS0z
MDJkLWEwOTAtMjM2MWNlYjQyZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRO8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNzmOXqQqehMTq4IhpzOf4DFk2yn9bDp1n6P+HeVipFD9f0pFqSJPrd
Iij+Qd2QBWgx0RS+TsJlLEDs/G+0HgAVBGm5X2JrpBfzysCH6vwLWwQVMKZF4W8z
T7SSVNsuGsc//jTrK/yENS67bOcghuQLVoRWqBiF+SHCYpcSh9QTPXRwpouNITEs
lA7PFtXSr2veJvFfbVoMQXfvyUlQmOZ21h7c86HzFzia3pgH1KTxoFLW2PJQ5qLG
P90m2agNoJ+eTD+EENtCBr0JdqaUbzzvH9RPg05r2KlxUbSTQZ6CF33jHNKmNfFm
7WVZz2usMsu8VX1EUHCvrvU+ztaMoUs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:50 2025 by rpki-client