Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdec1758-cce8-30ee-b894-0c3329dbb011.roa
File: bdec1758-cce8-30ee-b894-0c3329dbb011.roa (raw, json)
Hash identifier: f3meQFuDX/u67pN9hrqOGKwsbZ/Zq6TLFhXa9wE6SAQ=
Subject key identifier: 1E:CA:19:8B:89:98:92:4A:46:6D:E3:03:CB:BA:7A:83:03:93:E1:90
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E9CED387114F40F790C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdec1758-cce8-30ee-b894-0c3329dbb011.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.211.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e9:ce:d3:87:11:4f:40:f7:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=6c0c3184-95d4-4dc5-b836-c1187d105a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:ca:01:14:39:3d:bb:91:9a:69:9b:7e:f2:
04:1c:60:47:ff:53:e7:9a:2c:13:13:b1:09:9d:df:
70:47:52:11:68:f6:9d:a5:28:4c:e0:0c:08:a6:55:
44:59:a4:d9:89:27:e4:c0:ad:df:79:cb:e9:64:7d:
4b:f9:21:b7:15:ae:64:ab:5a:95:ec:98:63:5c:1e:
08:7f:b3:99:11:ae:4a:b9:8f:b4:b9:29:c5:62:6e:
d5:4f:22:fb:93:1a:2a:79:5a:6a:d4:2a:c1:c2:d2:
66:93:e2:18:d9:1e:68:1e:3b:f3:17:57:ad:6d:c9:
d1:08:f8:bd:87:66:86:98:06:6a:15:63:af:8b:5b:
0a:a3:5b:10:8c:16:6c:6b:11:07:ee:e1:af:db:fe:
7d:67:a8:c8:9d:f3:f9:5d:e6:cd:5b:d5:a7:1d:d1:
ac:a6:5c:c2:bd:6b:05:ea:72:f1:7f:e0:fa:26:99:
b2:d6:67:86:38:39:4e:6e:9b:5b:07:0f:d9:20:b9:
0f:ab:39:f0:54:77:5e:d5:71:9a:dd:55:b4:1e:0d:
d1:2a:fd:73:a2:97:f7:4e:d6:cd:e7:56:7b:a3:c9:
39:9a:34:e1:51:bd:37:98:d3:39:29:64:0c:d4:f6:
6d:eb:6e:7f:27:a7:8b:ca:c1:94:6b:f8:bf:3e:b8:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:19:8B:89:98:92:4A:46:6D:E3:03:CB:BA:7A:83:03:93:E1:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdec1758-cce8-30ee-b894-0c3329dbb011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.211.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:78:6c:76:12:67:de:43:37:5c:2a:4e:f1:cf:d2:9a:c2:9b:
f4:00:03:bb:67:dc:d5:1e:c2:a4:e7:b3:af:4e:30:d2:f6:79:
51:98:3d:7c:65:07:2d:8e:69:19:c5:05:b6:bb:d4:89:02:18:
ec:5b:38:50:bf:8d:bb:52:ef:97:04:a8:68:45:4f:f1:6d:96:
11:1e:0f:ec:d2:70:33:2e:c7:7d:4d:02:bc:54:b1:30:20:c3:
fd:d0:1b:43:65:02:18:a4:ab:54:e5:20:2f:1f:43:d5:7d:aa:
84:ed:06:47:cf:ae:0a:96:1f:ed:7d:67:cf:f0:75:34:92:ef:
f0:e4:ea:0d:fc:fd:ae:84:ea:10:f7:15:f0:72:f8:47:ed:7f:
e2:52:03:2f:f0:66:6c:55:71:0b:d9:98:3a:16:36:44:19:e9:
18:c6:5e:e8:fb:59:5f:e8:d4:11:df:95:a3:6d:a9:67:52:91:
7a:0b:a9:93:7a:7b:47:f5:24:10:75:35:5e:8d:f0:78:25:7a:
1e:d5:4c:5e:38:66:0d:2d:e5:b2:5f:4f:ab:4a:af:6e:d4:bd:
1e:de:26:c5:4f:1e:a3:de:75:86:fb:40:03:76:22:71:08:6d:
85:69:20:bb:e7:0a:be:c9:2b:b3:b6:75:4d:6a:41:61:17:d9:
33:fc:68:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOnO04cRT0D3kMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NmMwYzMxODQtOTVkNC00ZGM1LWI4MzYtYzExODdkMTA1YTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW/KARQ5PbuRmmmbfvIEHGBH/1PnmiwTE7EJ
nd9wR1IRaPadpShM4AwIplVEWaTZiSfkwK3fecvpZH1L+SG3Fa5kq1qV7JhjXB4I
f7OZEa5KuY+0uSnFYm7VTyL7kxoqeVpq1CrBwtJmk+IY2R5oHjvzF1etbcnRCPi9
h2aGmAZqFWOvi1sKo1sQjBZsaxEH7uGv2/59Z6jInfP5XebNW9WnHdGsplzCvWsF
6nLxf+D6Jpmy1meGODlObptbBw/ZILkPqznwVHde1XGa3VW0Hg3RKv1zopf3TtbN
51Z7o8k5mjThUb03mNM5KWQM1PZt625/J6eLysGUa/i/PrglhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7KGYuJmJJKRm3jA8u6eoMDk+GQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRlYzE3NTgtY2NlOC0z
MGVlLWI4OTQtMGMzMzI5ZGJiMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALV4bHYSZ95DN1wqTvHP0prCm/QAA7tn3NUewqTns69OMNL2eVGYPXxl
By2OaRnFBba71IkCGOxbOFC/jbtS75cEqGhFT/FtlhEeD+zScDMux31NArxUsTAg
w/3QG0NlAhikq1TlIC8fQ9V9qoTtBkfPrgqWH+19Z8/wdTSS7/Dk6g38/a6E6hD3
FfBy+Eftf+JSAy/wZmxVcQvZmDoWNkQZ6RjGXuj7WV/o1BHflaNtqWdSkXoLqZN6
e0f1JBB1NV6N8Hgleh7VTF44Zg0t5bJfT6tKr27UvR7eJsVPHqPedYb7QAN2InEI
bYVpILvnCr7JK7O2dU1qQWEX2TP8aFQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:43:13 2025 by rpki-client