Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json)
Hash identifier: JXHWIN2YedQ8Iiii9l0Nz+2hNwYPqW3XuC6Fzc+7Jg4=
Subject key identifier: CB:00:7D:BD:44:4A:B2:D5:D2:30:27:56:D2:12:91:1D:A2:40:5A:27
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C31C1EBA9FE17A3CEE500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.131.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:31:c1:eb:a9:fe:17:a3:ce:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=10a4e8a0-5fbd-4649-85da-c9a8b9f8848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:4d:25:32:fa:f9:06:79:2a:2f:40:eb:fe:
70:40:9d:6e:e9:92:e3:c2:ae:f8:eb:69:38:b7:de:
41:de:01:c0:5a:f6:c0:04:57:e1:60:a4:b5:83:2a:
7e:c2:51:b4:dd:ce:0f:53:7e:a5:eb:d8:f9:f4:fb:
f1:55:9f:3a:a4:a3:5c:4d:1c:3b:dc:7c:00:7a:3e:
6f:ef:e0:66:64:53:d2:46:6d:ac:32:92:f2:05:46:
49:40:9f:61:04:8f:d0:00:3c:85:32:dd:f8:0c:57:
92:96:df:40:81:1c:6c:5c:f0:f2:5e:7d:66:7f:88:
01:b8:4d:b4:c1:96:fd:51:c1:2b:41:df:3d:3d:0d:
af:4c:36:c5:eb:7a:8d:7b:9f:09:5c:66:8c:dd:10:
54:39:5d:df:db:35:46:2b:9d:4e:70:da:96:88:41:
83:40:d0:24:b0:84:73:8d:eb:3d:82:34:fc:ce:e6:
a3:25:c8:35:81:d7:c1:4a:93:3d:9b:f6:fb:49:25:
05:ca:2c:66:b7:ec:d6:58:8d:61:cc:50:52:57:06:
28:58:42:71:d3:61:4d:ee:7e:f9:a9:4b:69:b3:76:
2e:5e:37:31:24:1b:10:ff:eb:82:b6:64:7e:2f:aa:
0f:6e:1a:21:0d:8c:6a:83:6e:5b:69:48:ef:86:bb:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:7D:BD:44:4A:B2:D5:D2:30:27:56:D2:12:91:1D:A2:40:5A:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bc:44:ed:d5:c5:b9:c4:1b:ab:5d:05:d9:a5:d5:7a:f2:55:
6c:59:e1:74:7d:02:5c:28:21:aa:2b:b0:42:42:f5:4f:60:95:
aa:0a:6a:72:53:58:e8:cf:b4:6d:dc:82:56:eb:3a:ba:ef:eb:
a1:e8:d1:98:e9:4c:dd:c3:51:15:c8:09:1b:97:fa:7c:e9:e0:
d8:24:f9:b9:31:e5:b4:17:31:51:77:fc:75:cb:91:39:fb:82:
e9:1e:a9:28:05:f2:84:01:a8:6a:12:de:7c:80:c3:09:05:62:
3c:a0:f3:ee:06:c7:60:cb:4f:de:29:e3:e3:2a:4a:f4:b6:0d:
9e:d5:82:38:8b:6a:be:ea:82:47:76:62:03:9c:65:c0:54:d5:
95:31:5f:d8:b7:2a:3f:06:1b:23:85:c8:c5:6c:d3:de:38:ac:
9d:33:14:04:d3:a3:60:8c:bf:28:61:d4:a5:d9:bb:a3:d4:47:
19:e3:a8:d1:0d:38:7a:31:9a:19:cd:37:02:a4:3c:bc:45:69:
77:75:1b:93:71:62:95:dc:0e:03:b2:64:d1:a9:38:45:fa:d7:
66:dd:2b:17:ad:48:b8:42:3e:ad:da:b1:c1:0a:c6:70:83:eb:
e5:a9:d1:b9:ff:16:66:e6:e7:7d:f3:b8:ef:d2:db:ce:bb:e0:
7b:e9:9d:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkLTDHB66n+F6PO5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MTBhNGU4YTAtNWZiZC00NjQ5LTg1ZGEtYzlhOGI5Zjg4NDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BxNJTL6+QZ5Ki9A6/5wQJ1u6ZLjwq7462k4
t95B3gHAWvbABFfhYKS1gyp+wlG03c4PU36l69j59PvxVZ86pKNcTRw73HwAej5v
7+BmZFPSRm2sMpLyBUZJQJ9hBI/QADyFMt34DFeSlt9AgRxsXPDyXn1mf4gBuE20
wZb9UcErQd89PQ2vTDbF63qNe58JXGaM3RBUOV3f2zVGK51OcNqWiEGDQNAksIRz
jes9gjT8zuajJcg1gdfBSpM9m/b7SSUFyixmt+zWWI1hzFBSVwYoWEJx02FN7n75
qUtps3YuXjcxJBsQ/+uCtmR+L6oPbhohDYxqg25baUjvhruwXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMsAfb1ESrLV0jAnVtISkR2iQFonMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z
MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAE7xE7dXFucQbq10F2aXVevJVbFnhdH0CXCghqiuwQkL1T2CVqgpqclNY
6M+0bdyCVus6uu/roejRmOlM3cNRFcgJG5f6fOng2CT5uTHltBcxUXf8dcuROfuC
6R6pKAXyhAGoahLefIDDCQViPKDz7gbHYMtP3inj4ypK9LYNntWCOItqvuqCR3Zi
A5xlwFTVlTFf2LcqPwYbI4XIxWzT3jisnTMUBNOjYIy/KGHUpdm7o9RHGeOo0Q04
ejGaGc03AqQ8vEVpd3Ubk3FildwOA7Jk0ak4RfrXZt0rF61IuEI+rdqxwQrGcIPr
5anRuf8WZubnffO479Lbzrvge+mdQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:09 2025 by rpki-client