Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6435adc8-6f91-3174-9afc-2201f9748ccd.roa
File: 6435adc8-6f91-3174-9afc-2201f9748ccd.roa (raw, json)
Hash identifier: BMo544bjlgNUOQmChTzKOWpWsXBQ1Py4lovFuvJILvw=
Subject key identifier: 5F:F9:24:AA:D2:F6:33:6F:F8:B0:B4:80:25:A2:4C:6B:15:FA:C4:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D5C740DEC6F72547BA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6435adc8-6f91-3174-9afc-2201f9748ccd.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 100.17.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d5:c7:40:de:c6:f7:25:47:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=092f796d-de32-4838-a3ea-6987538e5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:62:d7:65:00:c6:49:d6:80:52:ae:90:2c:
38:36:8f:3d:4c:41:f4:d1:71:0e:1d:95:b2:e4:c6:
22:2b:26:9e:ad:fe:c3:1b:62:7c:64:a3:5b:3a:1b:
48:91:ee:23:f0:ab:ed:a9:77:d2:df:bb:5f:71:6d:
b3:77:82:9d:58:62:4c:08:4c:6d:64:69:b2:0e:7c:
cb:71:08:a4:4e:5d:18:34:99:cc:e2:a8:fe:fd:f7:
6b:d9:64:51:02:48:32:31:5a:c6:f8:71:a9:1f:fb:
16:98:c8:2a:4d:d8:0b:ae:80:17:df:dc:ee:09:3a:
5e:d0:9c:2f:2c:15:da:cf:15:b5:1c:85:33:6b:f0:
c4:6e:74:d3:c5:f7:00:77:41:98:22:1b:08:22:19:
74:21:2c:dd:c8:3f:2a:b4:ac:4a:14:33:79:12:c0:
ee:e4:a3:cc:38:40:03:8c:db:5b:b0:84:be:ea:17:
7e:14:c0:65:a7:e5:45:a5:f8:04:91:56:ae:2f:3f:
1e:90:5e:df:ad:7b:f5:06:8a:6c:57:cb:8a:e6:52:
83:be:87:41:68:99:bc:a3:c9:61:4b:43:1c:51:05:
9a:7b:b7:da:2c:cb:33:e8:7e:33:9d:f9:bf:81:c2:
56:4d:24:0c:06:de:67:04:87:cc:05:74:90:b8:6c:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:24:AA:D2:F6:33:6F:F8:B0:B4:80:25:A2:4C:6B:15:FA:C4:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6435adc8-6f91-3174-9afc-2201f9748ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4c:1b:84:c8:3f:81:e9:45:e0:35:c7:86:80:b4:1f:31:6d:
fe:f8:ac:bc:f5:e1:a9:3c:93:0e:9e:01:31:c8:e6:e8:26:5c:
c8:ee:6e:03:6b:e5:17:91:8b:00:2e:3f:99:19:67:a9:6f:2b:
23:9a:f9:29:63:fc:93:81:60:b1:ce:6a:5b:6b:a4:72:0a:43:
b8:77:8c:06:1d:47:33:15:ee:7d:73:b8:91:04:ba:1c:82:a8:
7e:3d:84:ec:2f:5d:e6:69:ef:bf:b3:7d:bf:2b:70:49:dd:ff:
ff:b4:c1:46:ee:00:ba:88:6a:ef:bb:63:9c:d1:01:7e:8c:80:
ef:55:06:1a:57:89:96:76:29:a4:7d:ad:0f:cb:09:56:0e:66:
f5:bb:c2:08:fd:37:b0:20:e5:d9:68:73:df:2b:b4:aa:2a:56:
de:3f:73:ae:4b:6c:c4:23:92:66:71:6e:d5:49:cf:88:e9:b1:
c1:58:97:31:04:c6:6d:fa:02:5e:78:5d:0a:3d:fa:f6:e7:a1:
0e:81:79:5d:c5:db:8a:b7:fd:f6:d7:09:46:e4:01:71:7a:f0:
59:ee:e1:3c:70:f3:06:a2:22:4d:f0:3f:c5:99:51:80:6b:a8:
f7:5c:a7:79:a3:a4:cd:23:10:3f:ed:f2:8a:aa:80:ba:5c:ff:
d6:c4:c3:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRtXHQN7G9yVHuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MDkyZjc5NmQtZGUzMi00ODM4LWEzZWEtNjk4NzUzOGU1MjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxpi12UAxknWgFKukCw4No89TEH00XEOHZWy
5MYiKyaerf7DG2J8ZKNbOhtIke4j8KvtqXfS37tfcW2zd4KdWGJMCExtZGmyDnzL
cQikTl0YNJnM4qj+/fdr2WRRAkgyMVrG+HGpH/sWmMgqTdgLroAX39zuCTpe0Jwv
LBXazxW1HIUza/DEbnTTxfcAd0GYIhsIIhl0ISzdyD8qtKxKFDN5EsDu5KPMOEAD
jNtbsIS+6hd+FMBlp+VFpfgEkVauLz8ekF7frXv1BopsV8uK5lKDvodBaJm8o8lh
S0McUQWae7faLMsz6H4znfm/gcJWTSQMBt5nBIfMBXSQuGw+QwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF/5JKrS9jNv+LC0gCWiTGsV+sQiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjQzNWFkYzgtNmY5MS0z
MTc0LTlhZmMtMjIwMWY5NzQ4Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPEwbhMg/gelF4DXHhoC0HzFt/visvPXhqTyTDp4BMcjm6CZcyO5uA2vl
F5GLAC4/mRlnqW8rI5r5KWP8k4Fgsc5qW2ukcgpDuHeMBh1HMxXufXO4kQS6HIKo
fj2E7C9d5mnvv7N9vytwSd3//7TBRu4Auohq77tjnNEBfoyA71UGGleJlnYppH2t
D8sJVg5m9bvCCP03sCDl2Whz3yu0qipW3j9zrktsxCOSZnFu1UnPiOmxwViXMQTG
bfoCXnhdCj369uehDoF5XcXbirf99tcJRuQBcXrwWe7hPHDzBqIiTfA/xZlRgGuo
91yneaOkzSMQP+3yiqqAulz/1sTD1Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:30:42 2025 by rpki-client