Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa
File: cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa (raw, json)
Hash identifier: HZlsfbxfveZD6JW8XQHOTX/T4LOpfcv+uQ024Xy6cr0=
Subject key identifier: 47:D5:E4:28:69:32:30:E6:54:18:DD:50:4F:50:5A:3A:1B:96:62:BC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F9FFE91BD66339335F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 141.155.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f9:ff:e9:1b:d6:63:39:33:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=c94b18b8-0acc-44c6-bdec-66f10911a6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:cd:3d:3b:35:a8:63:aa:47:55:14:d2:aa:
43:ac:c6:16:af:56:0b:b8:f7:94:f7:96:87:94:bc:
fb:13:dd:4b:4a:a9:1b:8a:88:16:0b:72:d1:54:a4:
a9:8d:62:09:f3:af:cd:fd:0e:89:24:ab:27:a6:9b:
18:90:e4:ff:da:a8:91:32:f5:a6:98:7b:29:d2:3b:
0b:12:83:65:6e:5f:d7:0f:02:8c:c5:7f:0f:bd:d3:
83:24:d8:27:59:f0:a8:13:16:4b:6f:07:c9:81:e3:
25:0f:0f:b8:0c:b4:b1:ba:19:de:f1:14:34:02:7a:
71:5c:55:5a:5d:e1:29:c5:24:fc:49:91:d4:15:1c:
10:a1:db:71:21:bc:78:3e:2c:a1:79:09:c9:f8:ec:
a4:f0:5c:e0:07:eb:db:a7:66:5a:d1:ba:e0:3c:13:
c5:12:05:52:da:27:43:5a:37:27:f3:6f:e6:5b:d8:
39:9c:64:46:1f:63:5e:f6:de:e2:56:cd:fd:8c:09:
7a:eb:7a:94:f9:1f:59:33:1d:94:db:fe:92:be:4f:
fd:d0:8e:9a:98:d7:18:17:2c:bc:66:18:75:66:aa:
67:da:bd:17:02:f3:30:77:42:95:02:7a:d8:13:f9:
04:3f:65:93:4f:50:e7:95:34:bc:69:85:f7:c4:7a:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:E4:28:69:32:30:E6:54:18:DD:50:4F:50:5A:3A:1B:96:62:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.155.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e3:75:c2:94:e8:9e:3d:22:07:8c:58:49:c1:07:a3:d7:61:
f6:a4:fb:12:e3:cc:96:31:d2:32:0f:b8:fb:96:70:50:18:02:
e7:db:f2:ca:86:db:03:61:ae:ad:92:39:94:cb:c1:7c:8f:b9:
6b:4c:79:5a:93:6f:ed:61:32:55:e3:d7:39:a4:49:26:38:97:
13:2e:ad:c0:75:f2:fb:7c:1a:89:c1:00:8a:f6:99:d5:45:f9:
92:d1:64:11:cc:30:85:ef:0c:cb:bc:f8:a2:ee:2f:ac:53:39:
20:5a:c8:04:b6:c2:8b:27:c5:75:ce:27:38:e4:72:73:f1:30:
44:3d:9b:ac:41:eb:a5:82:09:9c:9d:9a:f5:19:87:a6:e3:19:
bd:c3:ac:6a:2b:45:ed:d9:4d:02:3e:35:b7:40:09:53:5a:fd:
b4:62:1a:c1:e8:e7:3f:8a:22:dd:ed:19:72:a3:3a:95:c8:10:
d9:4b:2d:61:49:c0:4b:d8:0c:8b:1a:6c:cd:e8:69:15:27:3e:
80:fe:a1:46:4b:73:b4:ac:d6:b0:44:4e:6b:4e:aa:cd:bc:be:
3b:ec:39:f0:22:0a:be:f8:03:04:5f:cc:95:4f:cb:48:2b:52:
d9:5c:90:19:83:77:da:9a:bd:50:81:46:d5:df:82:07:ae:1b:
de:6c:d4:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvn/6RvWYzkzXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
Yzk0YjE4YjgtMGFjYy00NGM2LWJkZWMtNjZmMTA5MTFhNmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/TNPTs1qGOqR1UU0qpDrMYWr1YLuPeU95aH
lLz7E91LSqkbiogWC3LRVKSpjWIJ86/N/Q6JJKsnppsYkOT/2qiRMvWmmHsp0jsL
EoNlbl/XDwKMxX8PvdODJNgnWfCoExZLbwfJgeMlDw+4DLSxuhne8RQ0AnpxXFVa
XeEpxST8SZHUFRwQodtxIbx4PiyheQnJ+Oyk8FzgB+vbp2Za0brgPBPFEgVS2idD
Wjcn82/mW9g5nGRGH2Ne9t7iVs39jAl663qU+R9ZMx2U2/6Svk/90I6amNcYFyy8
Zhh1Zqpn2r0XAvMwd0KVAnrYE/kEP2WTT1DnlTS8aYX3xHodCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfV5ChpMjDmVBjdUE9QWjoblmK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2MyZTdlNjQtNDVjYy0z
MGVhLTgyMGUtNWJjYmRhZmI2YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbjdcKU6J49IgeMWEnBB6PXYfak+xLjzJYx0jIPuPuWcFAYAufb8sqG
2wNhrq2SOZTLwXyPuWtMeVqTb+1hMlXj1zmkSSY4lxMurcB18vt8GonBAIr2mdVF
+ZLRZBHMMIXvDMu8+KLuL6xTOSBayAS2wosnxXXOJzjkcnPxMEQ9m6xB66WCCZyd
mvUZh6bjGb3DrGorRe3ZTQI+NbdACVNa/bRiGsHo5z+KIt3tGXKjOpXIENlLLWFJ
wEvYDIsabM3oaRUnPoD+oUZLc7Ss1rBETmtOqs28vjvsOfAiCr74AwRfzJVPy0gr
UtlckBmDd9qavVCBRtXfggeuG95s1AA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:07 2025 by rpki-client