Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa
File: bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa (raw, json)
Hash identifier: TMZDhR3u45kVGfEAQ8l8NynzQe5XvrLbHUC6bDkmNyI=
Subject key identifier: 77:D6:89:84:A5:5B:A3:B7:33:56:DE:F4:DF:B5:DE:69:62:FF:5D:98
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858488BA8C64E662237BAF6BD5750
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa
Signing time: Tue 14 Jan 2025 20:44:18 +0000
ROA not before: Tue 14 Jan 2025 20:44:18 +0000
ROA not after: Mon 14 Apr 2025 19:44:18 +0000
asID: 0
IP address blocks: 204.254.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:a8:c6:4e:66:22:37:ba:f6:bd:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 14 20:44:18 2025 GMT
Not After : Apr 14 19:44:18 2025 GMT
Subject: CN=657e783e-4835-4650-9013-4dcb8ddfcd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:cc:c5:21:b7:98:a0:f4:74:85:36:1e:5c:
9e:84:17:c5:d7:69:55:cf:2d:49:b3:a2:50:d2:39:
b0:ee:13:8b:cd:ad:c2:76:bf:79:5a:95:49:6e:8d:
d9:80:78:e4:5e:e1:5d:c8:85:6c:3b:1b:61:fe:2d:
60:24:a5:ba:91:3f:9d:a8:44:8c:b7:97:2f:7c:a7:
95:0b:25:04:98:7e:4e:b3:70:41:d0:54:b3:90:fb:
d7:5d:5c:b0:9b:48:1e:51:d7:d4:65:60:f1:05:33:
89:5d:eb:42:ce:56:b0:fd:c6:b2:f1:3e:c2:65:2e:
d9:5d:03:e1:cf:12:13:aa:97:0c:f0:60:bd:86:73:
9b:90:4e:3a:a1:f7:51:83:38:d0:4b:0f:68:c2:be:
35:c3:97:52:28:9f:60:50:9d:cb:7d:52:34:80:fe:
ed:22:2c:9f:36:23:83:f2:26:15:6f:90:b7:a1:f3:
17:80:57:cd:55:64:11:b0:c3:72:64:fd:25:5a:a6:
0a:d0:23:7c:89:41:b2:f8:45:d7:10:f6:49:89:1f:
c8:65:f2:68:75:01:98:d1:e1:48:53:a6:53:41:df:
40:66:ac:73:6c:13:54:f4:95:e3:8c:d5:65:8a:1e:
99:f4:d3:ae:81:38:e2:9e:fb:bc:82:f8:78:31:98:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:89:84:A5:5B:A3:B7:33:56:DE:F4:DF:B5:DE:69:62:FF:5D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
204.254.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:9a:a6:43:2f:42:76:8f:e3:ae:97:17:47:9c:4d:f9:92:85:
7b:80:54:df:1d:ae:a2:c3:28:1c:05:48:99:07:54:75:46:72:
ab:f6:8d:26:84:c4:29:1d:2b:ff:ce:b4:a2:38:a7:ed:0a:ad:
13:b2:f9:f5:cc:12:69:41:6e:84:65:4a:f0:33:67:dc:d4:79:
01:f1:2f:21:80:0f:62:84:62:07:14:b2:35:12:1e:dd:29:b0:
96:6e:96:26:77:72:17:de:2e:5a:78:f1:3b:86:1a:c6:23:89:
81:e0:c5:6b:85:ed:0b:cf:77:24:44:60:c7:be:70:06:41:f0:
d3:53:8e:13:ee:0a:34:53:57:57:ba:35:d7:59:ba:e2:74:5c:
7f:58:b9:ce:63:de:7c:71:ce:c0:32:97:65:20:88:46:6e:21:
16:47:52:af:30:20:9c:3b:aa:e4:b2:80:39:82:a4:90:6e:3c:
8f:89:b1:98:31:58:b2:52:dd:05:9d:0d:29:ce:b4:4d:00:28:
a0:58:f7:04:c8:a1:21:ca:2e:5b:95:1a:0d:10:82:33:1c:a4:
95:39:09:2b:24:fb:4c:ed:f9:ff:03:11:03:4d:73:16:45:cd:
85:11:4b:bc:d8:e9:22:22:61:c5:3d:ff:70:5b:76:92:77:ab:
20:e8:02:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiLqMZOZiI3uva9V1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDExNDIwNDQxOFoXDTI1MDQxNDE5NDQxOFowLzEtMCsGA1UEAxMk
NjU3ZTc4M2UtNDgzNS00NjUwLTkwMTMtNGRjYjhkZGZjZDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdHMxSG3mKD0dIU2HlyehBfF12lVzy1Js6JQ
0jmw7hOLza3Cdr95WpVJbo3ZgHjkXuFdyIVsOxth/i1gJKW6kT+dqESMt5cvfKeV
CyUEmH5Os3BB0FSzkPvXXVywm0geUdfUZWDxBTOJXetCzlaw/cay8T7CZS7ZXQPh
zxITqpcM8GC9hnObkE46ofdRgzjQSw9owr41w5dSKJ9gUJ3LfVI0gP7tIiyfNiOD
8iYVb5C3ofMXgFfNVWQRsMNyZP0lWqYK0CN8iUGy+EXXEPZJiR/IZfJodQGY0eFI
U6ZTQd9AZqxzbBNU9JXjjNVlih6Z9NOugTjinvu8gvh4MZhc7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfWiYSlW6O3M1be9N+13mli/12YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmOGJlNzctMWNlNy0z
NGNjLThkNTctNDRmYzZkM2E0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzP54MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuapkMvQnaP466XF0ecTfmShXuAVN8drqLDKBwFSJkHVHVGcqv2jSaE
xCkdK//OtKI4p+0KrROy+fXMEmlBboRlSvAzZ9zUeQHxLyGAD2KEYgcUsjUSHt0p
sJZuliZ3chfeLlp48TuGGsYjiYHgxWuF7QvPdyREYMe+cAZB8NNTjhPuCjRTV1e6
NddZuuJ0XH9Yuc5j3nxxzsAyl2UgiEZuIRZHUq8wIJw7quSygDmCpJBuPI+JsZgx
WLJS3QWdDSnOtE0AKKBY9wTIoSHKLluVGg0QgjMcpJU5CSsk+0zt+f8DEQNNcxZF
zYURS7zY6SIiYcU9/3BbdpJ3qyDoAnk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:45 2025 by rpki-client