Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa
File: d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa (raw, json)
Hash identifier: IOXhUHFeq84poszpKt0ZauXomnl2Fa2KMiMrdGW2OtI=
Subject key identifier: 99:2F:F7:2A:E3:50:A7:80:CD:5E:5D:B6:ED:24:2E:EA:0A:DB:73:52
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D4D351B391DB0BBFD100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.62.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d4:d3:51:b3:91:db:0b:bf:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e0d4e7cb-4c77-4af7-bd10-1ca0cd247931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:89:83:8f:c5:94:44:70:39:aa:1b:35:da:
9f:f0:c4:38:49:5b:79:4a:68:6f:02:12:b2:d2:7e:
cd:7e:60:88:7f:92:46:51:28:56:24:5a:c9:03:51:
76:de:a1:d5:31:4e:ae:b3:d6:9f:00:d4:ea:53:da:
c3:20:b8:75:8b:65:ff:b5:c9:fe:7f:8f:0f:4f:84:
70:45:ac:f0:30:c7:52:fb:ea:89:92:4c:08:09:cf:
b1:17:26:67:24:8b:60:2b:57:0a:11:36:07:75:c2:
8b:2f:da:26:b1:f1:f2:98:92:06:c2:cf:b9:7d:de:
ae:5d:38:ad:dc:49:96:fc:a6:66:2b:2d:e9:db:d7:
d3:b3:20:3d:c8:09:53:fc:12:64:89:70:7e:dc:ea:
cc:94:e5:07:1a:09:30:d1:62:53:b2:6d:09:f5:57:
8b:d9:0f:31:9a:80:78:6f:37:24:e9:cc:d5:d5:40:
43:28:c0:7d:d0:c0:e3:cd:13:64:c9:af:9f:c4:87:
6b:cd:36:06:04:8d:7b:4d:2d:a7:ab:15:60:57:cb:
63:0e:b1:f2:a7:60:21:e5:59:06:1f:7f:e7:7f:4a:
50:87:4e:df:0a:51:e3:31:9e:8f:92:2e:e8:f1:4f:
cb:5f:31:32:e4:57:3c:75:6f:0b:33:b7:19:f4:ed:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:F7:2A:E3:50:A7:80:CD:5E:5D:B6:ED:24:2E:EA:0A:DB:73:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d49cdd8d-0698-3d9f-90d1-c0c4efaa97c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.62.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b2:b7:ce:6d:e6:68:33:44:41:c0:82:10:ef:5f:2d:bc:1d:
73:a6:1d:0c:76:b6:89:fe:95:74:24:89:cf:ae:86:23:23:43:
e7:a1:1e:d0:b9:62:3c:e0:2e:08:39:ed:76:62:a3:ed:a6:a1:
31:49:26:ee:b8:13:c5:9d:af:c9:df:84:67:e5:aa:da:e0:af:
4b:b6:8c:8b:07:98:9b:39:61:04:6e:48:e5:7e:87:d2:6f:f4:
f9:77:69:25:4f:82:62:b8:c0:45:15:40:c2:74:fe:46:8e:1c:
0d:26:2d:52:b6:04:72:83:0b:3b:72:d3:eb:ef:56:86:b9:2f:
3b:db:58:1f:bc:4a:d6:ef:9c:88:9e:20:36:c0:00:5e:d2:55:
af:e4:ec:96:ca:af:e7:2b:e2:3d:97:00:fb:e0:2d:68:aa:c2:
36:8d:9f:aa:83:39:dc:25:a5:d1:eb:07:c9:97:5f:3b:39:cf:
48:95:0e:07:3e:32:ab:55:55:d6:c7:b2:37:a5:e8:58:be:e4:
a4:01:6c:be:a3:59:6e:31:4f:8a:8b:d2:70:f5:af:5e:05:e9:
40:b7:ae:80:ae:2e:a1:fc:75:70:72:13:9b:bd:82:e2:4f:2e:
70:8d:7f:76:a7:d5:5b:1f:22:41:0c:ae:d5:d2:4f:b0:5b:04:
06:66:9b:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtTTUbOR2wu/0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZTBkNGU3Y2ItNGM3Ny00YWY3LWJkMTAtMWNhMGNkMjQ3OTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD2Jg4/FlERwOaobNdqf8MQ4SVt5SmhvAhKy
0n7NfmCIf5JGUShWJFrJA1F23qHVMU6us9afANTqU9rDILh1i2X/tcn+f48PT4Rw
RazwMMdS++qJkkwICc+xFyZnJItgK1cKETYHdcKLL9omsfHymJIGws+5fd6uXTit
3EmW/KZmKy3p29fTsyA9yAlT/BJkiXB+3OrMlOUHGgkw0WJTsm0J9VeL2Q8xmoB4
bzck6czV1UBDKMB90MDjzRNkya+fxIdrzTYGBI17TS2nqxVgV8tjDrHyp2Ah5VkG
H3/nf0pQh07fClHjMZ6Pki7o8U/LXzEy5Fc8dW8LM7cZ9O2eRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkv9yrjUKeAzV5dtu0kLuoK23NSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ5Y2RkOGQtMDY5OC0z
ZDlmLTkwZDEtYzBjNGVmYWE5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrT4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCyt85t5mgzREHAghDvXy28HXOmHQx2ton+lXQkic+uhiMjQ+ehHtC5
YjzgLgg57XZio+2moTFJJu64E8Wdr8nfhGflqtrgr0u2jIsHmJs5YQRuSOV+h9Jv
9Pl3aSVPgmK4wEUVQMJ0/kaOHA0mLVK2BHKDCzty0+vvVoa5LzvbWB+8StbvnIie
IDbAAF7SVa/k7JbKr+cr4j2XAPvgLWiqwjaNn6qDOdwlpdHrB8mXXzs5z0iVDgc+
MqtVVdbHsjel6Fi+5KQBbL6jWW4xT4qL0nD1r14F6UC3roCuLqH8dXByE5u9guJP
LnCNf3an1VsfIkEMrtXST7BbBAZmm5w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:20:50 2025 by rpki-client