Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
File: 5a218aa9-a69e-3383-b2ce-6b813018e689.roa (raw, json)
Hash identifier: zPJycm8dLiBL2+bQGMdGEYlijBujsSCzYINoKM+2h74=
Subject key identifier: 38:C3:19:42:1B:E3:AE:F6:CC:BD:86:23:05:7D:14:CF:2E:97:82:84
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848ED4C6A24B468C1CC2CEF1E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
Signing time: Tue 18 Feb 2025 20:07:26 +0000
ROA not before: Tue 18 Feb 2025 20:07:26 +0000
ROA not after: Mon 19 May 2025 19:07:26 +0000
asID: 14618
IP address blocks: 208.214.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:4c:6a:24:b4:68:c1:cc:2c:ef:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 18 20:07:26 2025 GMT
Not After : May 19 19:07:26 2025 GMT
Subject: CN=f63cdbc7-85df-42f7-9d91-2f21e51b81e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:ce:3c:32:9f:23:6c:75:c3:40:e4:e7:3a:
7a:3b:90:7e:4d:82:be:98:b7:67:90:99:f3:1a:3e:
56:85:b3:e2:ef:26:e6:09:e0:19:f6:45:84:74:e8:
b0:bc:a8:b3:0e:73:11:84:62:d7:94:15:9d:a6:23:
c1:7f:94:35:27:68:da:de:2b:13:8c:b1:36:d0:60:
8b:73:0a:f9:2f:97:c7:ff:d6:6f:f8:77:dc:97:e4:
ef:a4:ae:05:d7:0d:8f:c0:ce:52:a8:6b:25:fe:3f:
fb:39:53:82:6c:65:7c:73:2d:aa:91:38:66:78:ab:
61:ab:b2:cf:be:5c:65:04:ff:75:8e:32:69:84:c3:
70:ce:51:97:20:e5:56:1a:2f:7a:84:d0:2e:ae:84:
fd:79:c9:ee:96:3b:83:aa:13:f9:56:c2:a7:20:9d:
ad:64:20:62:b5:08:49:14:6a:a6:59:c0:68:c1:0d:
e6:55:12:22:01:19:37:d8:45:43:01:a9:12:21:81:
39:11:95:58:90:65:fe:c7:9c:6c:13:79:82:b3:91:
4c:5e:00:b9:a0:f3:4b:b9:7e:26:4a:7a:42:e6:af:
43:ef:fa:d6:c0:d4:50:9e:92:57:73:18:88:b1:69:
20:3d:f2:ee:aa:0e:51:48:ba:22:9f:42:6c:98:bd:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:19:42:1B:E3:AE:F6:CC:BD:86:23:05:7D:14:CF:2E:97:82:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.214.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:3e:7a:c0:2f:7a:71:08:b1:53:1f:11:c2:ed:ff:6b:a4:8c:
b0:05:96:7f:19:bb:10:60:b7:42:eb:ef:77:bf:5a:bc:ff:79:
38:52:cd:85:84:c4:5a:fc:33:e9:eb:73:b5:d8:28:d9:ee:27:
e0:a9:71:6f:89:8d:f0:17:14:a8:60:b1:5b:d5:ab:75:d2:5a:
39:e7:f6:30:04:43:92:10:59:44:05:2b:59:d0:41:14:68:0d:
e9:80:cc:04:68:b8:60:5e:12:5e:ce:19:f3:36:5d:20:a7:36:
80:51:78:4a:29:39:94:7f:df:8c:29:eb:ba:17:05:72:7b:79:
0c:11:84:1a:c8:da:1d:02:e4:d4:da:4b:e8:c1:66:15:48:5b:
3c:a4:49:f2:f3:9b:44:7f:63:c6:fc:05:22:b8:19:2e:f0:65:
cc:99:9e:79:4c:2b:38:0a:0a:4d:22:6f:22:4a:b4:63:ca:72:
e4:bb:9c:85:97:a3:81:ba:cc:b1:11:80:a7:fd:ae:13:26:c4:
53:e7:28:cd:d3:89:10:b7:a6:ef:4d:9d:cd:4b:b7:4c:28:4e:
c0:55:7b:17:c2:2e:68:14:d6:8e:5d:bd:47:2f:1f:b1:78:56:
8f:ce:a3:0c:f4:4f:77:a6:02:28:1d:bc:9e:e6:6c:d7:59:c2:
aa:41:ac:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTGoktGjBzCzvHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxODIwMDcyNloXDTI1MDUxOTE5MDcyNlowLzEtMCsGA1UEAxMk
ZjYzY2RiYzctODVkZi00MmY3LTlkOTEtMmYyMWU1MWI4MWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWPOPDKfI2x1w0Dk5zp6O5B+TYK+mLdnkJnz
Gj5WhbPi7ybmCeAZ9kWEdOiwvKizDnMRhGLXlBWdpiPBf5Q1J2ja3isTjLE20GCL
cwr5L5fH/9Zv+Hfcl+TvpK4F1w2PwM5SqGsl/j/7OVOCbGV8cy2qkThmeKthq7LP
vlxlBP91jjJphMNwzlGXIOVWGi96hNAuroT9ecnuljuDqhP5VsKnIJ2tZCBitQhJ
FGqmWcBowQ3mVRIiARk32EVDAakSIYE5EZVYkGX+x5xsE3mCs5FMXgC5oPNLuX4m
SnpC5q9D7/rWwNRQnpJXcxiIsWkgPfLuqg5RSLoin0JsmL39awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjDGUIb4672zL2GIwV9FM8ul4KEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWEyMThhYTktYTY5ZS0z
MzgzLWIyY2UtNmI4MTMwMThlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4+esAvenEIsVMfEcLt/2ukjLAFln8ZuxBgt0Lr73e/Wrz/eThSzYWE
xFr8M+nrc7XYKNnuJ+CpcW+JjfAXFKhgsVvVq3XSWjnn9jAEQ5IQWUQFK1nQQRRo
DemAzARouGBeEl7OGfM2XSCnNoBReEopOZR/34wp67oXBXJ7eQwRhBrI2h0C5NTa
S+jBZhVIWzykSfLzm0R/Y8b8BSK4GS7wZcyZnnlMKzgKCk0ibyJKtGPKcuS7nIWX
o4G6zLERgKf9rhMmxFPnKM3TiRC3pu9Nnc1Lt0woTsBVexfCLmgU1o5dvUcvH7F4
Vo/Oowz0T3emAigdvJ7mbNdZwqpBrEM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:38 2025 by rpki-client