Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
File: 8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa (raw, json)
Hash identifier: 4ne+AwMm4uoXmNhXRV6AMDfIxar9PsK3xZkr9a+lQZY=
Subject key identifier: 40:B9:BF:5F:B5:FE:64:B4:70:32:8D:B2:53:F0:29:6A:A1:95:D8:CE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F13148980B7AD4289680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 70.110.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f1:31:48:98:0b:7a:d4:28:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1f21bda4-d6fa-4c0e-a618-7cab29d1241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:af:56:c0:85:af:14:49:18:48:b9:a9:26:
46:59:0a:bf:c6:ba:1a:da:95:be:dc:af:4f:be:e5:
20:72:e1:42:32:15:fb:5a:b8:47:3f:2a:e3:42:62:
bd:f3:40:43:4b:98:0d:96:28:53:5b:6f:b8:dd:47:
5c:bc:68:58:70:ae:8a:71:b6:e7:70:6b:b5:ab:c8:
50:e0:2b:01:1b:30:c8:11:e8:37:e5:94:ce:6a:bf:
0f:4d:63:9f:89:18:d7:a2:3b:7d:43:65:56:88:30:
90:d5:96:38:b7:ef:1c:90:03:97:42:69:d3:b7:10:
4a:93:fd:88:54:9b:c6:dc:2f:80:37:af:a5:3a:db:
4e:7d:83:7b:0d:d8:84:43:84:cc:f9:c1:11:1c:db:
ef:bc:5b:26:66:70:6e:d9:32:95:c3:25:5b:bc:50:
da:0e:8f:d3:01:29:8c:0c:b9:3f:f5:d4:e5:b2:72:
e6:d7:ef:4d:55:e0:51:c2:33:f5:b0:54:ad:c5:17:
b9:53:df:ac:c6:58:e4:e8:13:e8:7e:dd:f4:3d:b6:
97:44:a5:e9:39:38:8f:12:8a:67:fa:96:4b:01:0e:
53:3b:db:a3:e8:fa:eb:c9:f7:a2:79:93:aa:8a:b1:
d8:05:05:a5:b0:28:19:51:f9:de:34:6a:cb:36:3f:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:BF:5F:B5:FE:64:B4:70:32:8D:B2:53:F0:29:6A:A1:95:D8:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.110.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:0d:26:8c:23:50:ab:42:64:25:67:39:49:3e:35:52:f8:37:
ab:c8:75:bf:9d:98:f7:73:6a:7b:40:6e:64:9e:a6:e4:ae:d9:
34:a8:8e:69:ae:bd:f0:6c:18:54:85:07:78:67:10:42:84:33:
0a:88:ae:a4:ba:24:66:e0:0d:8f:43:59:15:e4:ac:61:2c:7d:
a5:34:e8:9d:fc:af:2e:3f:65:38:b6:33:a6:9b:fc:3b:bc:34:
17:a6:07:67:ca:56:14:ec:89:4e:a6:20:61:f8:27:91:c9:98:
90:59:4e:51:58:f2:0e:81:f7:7b:59:b9:08:a5:19:a5:12:09:
4d:a2:1a:54:3d:f1:82:ef:ad:f3:4c:8a:f3:7d:6f:1b:ab:de:
4e:14:a3:9d:e6:95:1a:51:ff:dc:3b:ff:58:3b:b4:3f:c5:bd:
d1:38:9c:3c:15:b1:3d:3b:92:51:4a:70:bc:b0:db:e3:0b:fd:
c2:72:f0:4c:aa:7a:0f:1b:90:7b:87:cc:be:08:99:fa:97:50:
1a:25:a1:36:e4:0d:3c:e5:5b:c8:75:4d:94:cc:7c:ba:ef:af:
33:86:28:60:39:12:c6:b3:b6:33:01:88:84:e5:50:4e:c5:c6:
87:b0:e9:94:08:f2:2e:69:0f:ff:e5:3e:86:a4:f6:48:ad:46:
38:7d:35:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvExSJgLetQoloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MWYyMWJkYTQtZDZmYS00YzBlLWE2MTgtN2NhYjI5ZDEyNDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmvVsCFrxRJGEi5qSZGWQq/xroa2pW+3K9P
vuUgcuFCMhX7WrhHPyrjQmK980BDS5gNlihTW2+43UdcvGhYcK6KcbbncGu1q8hQ
4CsBGzDIEeg35ZTOar8PTWOfiRjXojt9Q2VWiDCQ1ZY4t+8ckAOXQmnTtxBKk/2I
VJvG3C+AN6+lOttOfYN7DdiEQ4TM+cERHNvvvFsmZnBu2TKVwyVbvFDaDo/TASmM
DLk/9dTlsnLm1+9NVeBRwjP1sFStxRe5U9+sxljk6BPoft30PbaXRKXpOTiPEopn
+pZLAQ5TO9uj6PrryfeieZOqirHYBQWlsCgZUfneNGrLNj+E4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEC5v1+1/mS0cDKNslPwKWqhldjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGEzODM3Y2ItODdmMy0z
MjdlLWE3YzItNjY4NWExYTg2MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRm58MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoNJowjUKtCZCVnOUk+NVL4N6vIdb+dmPdzantAbmSepuSu2TSojmmu
vfBsGFSFB3hnEEKEMwqIrqS6JGbgDY9DWRXkrGEsfaU06J38ry4/ZTi2M6ab/Du8
NBemB2fKVhTsiU6mIGH4J5HJmJBZTlFY8g6B93tZuQilGaUSCU2iGlQ98YLvrfNM
ivN9bxur3k4Uo53mlRpR/9w7/1g7tD/FvdE4nDwVsT07klFKcLyw2+ML/cJy8Eyq
eg8bkHuHzL4ImfqXUBoloTbkDTzlW8h1TZTMfLrvrzOGKGA5EsaztjMBiITlUE7F
xoew6ZQI8i5pD//lPoak9kitRjh9NY4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:03 2025 by rpki-client