Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80c71bbe-ca8d-34c2-bdf7-a36638d314f8.roa
File: 80c71bbe-ca8d-34c2-bdf7-a36638d314f8.roa (raw, json)
Hash identifier: CIWo0iKxR0wvSIi2oW5pjCmk9G8V+ZfHZuUXB2NQQJ0=
Subject key identifier: A0:08:9D:8D:EE:98:73:80:1D:08:AA:AF:E7:E8:76:CB:9F:8A:73:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB481DF60BB807194EA780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80c71bbe-ca8d-34c2-bdf7-a36638d314f8.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 151.204.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:48:1d:f6:0b:b8:07:19:4e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6cd4f07b-a843-4d5a-ad4d-b191b50bfbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:0f:97:dd:37:a4:bb:10:ce:dd:9c:49:43:
4d:27:07:19:59:36:08:a6:1a:26:93:8e:f8:c2:64:
77:a9:ca:c6:63:ff:9a:b5:39:ff:9a:f9:2a:9f:b3:
9c:07:a9:d7:45:92:18:3f:e0:64:42:5b:59:26:f8:
de:ef:ea:94:12:79:1b:74:75:03:da:58:bf:bc:70:
2f:9d:8f:51:97:b6:4f:21:be:c0:ef:76:c1:9c:76:
36:95:63:da:bd:ea:cf:7a:79:23:ff:36:e4:c5:d9:
42:f9:e4:0c:85:de:b6:1d:e4:af:82:66:53:f7:e6:
e3:dc:81:ca:79:24:04:5c:2d:e1:0a:80:ed:f6:2e:
f4:a7:fe:3c:6e:1c:f7:a9:d9:1c:73:ef:ff:88:48:
55:a7:35:16:ec:e3:e3:94:df:81:16:ab:91:3a:f5:
d5:5d:dc:d3:33:1b:b7:27:f9:9a:35:21:ed:42:39:
2e:22:49:cd:17:b0:7c:18:18:e9:49:10:95:37:5d:
81:c5:4c:76:57:31:ad:26:ba:72:65:00:1f:42:70:
d4:8b:f8:9d:77:e4:9a:db:54:19:9c:94:d2:50:52:
e1:46:6e:4e:26:6d:33:8e:75:7d:96:0a:ef:49:3d:
32:d5:0c:a1:aa:4f:4f:f2:57:6d:f7:84:70:ed:76:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:9D:8D:EE:98:73:80:1D:08:AA:AF:E7:E8:76:CB:9F:8A:73:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80c71bbe-ca8d-34c2-bdf7-a36638d314f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
151.204.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:c5:e7:d5:c1:73:6d:d1:f1:43:11:e5:5c:3e:a2:2f:18:ff:
67:d0:99:9c:39:ed:d3:47:15:c3:13:cf:ab:b9:e0:71:5d:ec:
26:75:df:ce:1a:5f:55:a2:b6:a7:69:2d:55:df:cb:db:8d:1e:
12:c8:12:d9:69:12:7b:e6:4e:bd:1d:ca:f9:5d:e0:0d:f5:73:
d8:28:2e:00:2c:3c:b6:63:eb:64:46:f1:e1:8f:86:5f:f9:02:
b7:0c:ad:c8:90:0e:3b:6d:ec:c7:8f:d4:d4:15:d7:91:ae:c5:
62:c5:20:50:20:94:98:bf:c5:58:a5:eb:0f:d4:47:99:be:38:
7a:8c:59:b3:8a:d5:5b:f6:23:84:f4:be:75:f1:1e:b6:44:9b:
76:82:d8:59:bc:2c:1e:f3:b7:b0:ee:ca:b9:d5:a6:da:34:bd:
34:e6:e7:88:b5:98:fa:b7:f3:df:df:a9:1b:6a:30:87:03:28:
29:cd:30:eb:f1:e1:4a:92:5b:14:7b:79:68:08:88:11:3d:3c:
70:0f:24:b3:b6:89:ef:6d:e9:53:67:e6:f7:22:cc:10:02:e4:
16:35:55:c8:8d:ab:44:8a:13:a9:4a:1c:f6:c3:fc:01:10:f5:
bd:97:50:fe:96:ae:25:be:23:44:0d:5c:8d:3f:1e:6d:60:53:
9b:d6:31:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860gd9gu4BxlOp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmNkNGYwN2ItYTg0My00ZDVhLWFkNGQtYjE5MWI1MGJmYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA420Pl903pLsQzt2cSUNNJwcZWTYIphomk474
wmR3qcrGY/+atTn/mvkqn7OcB6nXRZIYP+BkQltZJvje7+qUEnkbdHUD2li/vHAv
nY9Rl7ZPIb7A73bBnHY2lWPaverPenkj/zbkxdlC+eQMhd62HeSvgmZT9+bj3IHK
eSQEXC3hCoDt9i70p/48bhz3qdkcc+//iEhVpzUW7OPjlN+BFquROvXVXdzTMxu3
J/maNSHtQjkuIknNF7B8GBjpSRCVN12BxUx2VzGtJrpyZQAfQnDUi/idd+Sa21QZ
nJTSUFLhRm5OJm0zjnV9lgrvST0y1Qyhqk9P8ldt94Rw7Xb2OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAInY3umHOAHQiqr+fodsufinN9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODBjNzFiYmUtY2E4ZC0z
NGMyLWJkZjctYTM2NjM4ZDMxNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGl8wAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzF59XBc23R8UMR5Vw+oi8Y/2fQmZw57dNHFcMTz6u54HFd7CZ1384a
X1WitqdpLVXfy9uNHhLIEtlpEnvmTr0dyvld4A31c9goLgAsPLZj62RG8eGPhl/5
ArcMrciQDjtt7MeP1NQV15GuxWLFIFAglJi/xVil6w/UR5m+OHqMWbOK1Vv2I4T0
vnXxHrZEm3aC2Fm8LB7zt7DuyrnVpto0vTTm54i1mPq389/fqRtqMIcDKCnNMOvx
4UqSWxR7eWgIiBE9PHAPJLO2ie9t6VNn5vcizBAC5BY1VciNq0SKE6lKHPbD/AEQ
9b2XUP6WriW+I0QNXI0/Hm1gU5vWMXk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:42 2025 by rpki-client