Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
File: da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa (raw, json)
Hash identifier: vaGP80duCzjcw2i+YHQGsFU36VnWwKAfzownQvJfhV4=
Subject key identifier: C8:F7:F8:5D:6D:14:7F:FA:F2:92:AF:45:DF:D4:43:81:45:DE:48:B5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3316E9C0B82C64456980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.255.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:33:16:e9:c0:b8:2c:64:45:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=29091abf-a05f-4f94-9ffc-d6cedaab73c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:98:ee:59:ec:ee:1e:b5:b4:12:1f:82:3a:
03:aa:1e:0c:ac:d8:b1:bc:23:73:e9:83:f1:e1:1c:
9e:1e:63:87:f0:3b:fb:8d:22:06:6a:f7:11:2f:81:
5d:f9:d8:e7:8d:0e:f3:2f:0d:ab:89:da:73:6c:80:
df:35:e0:6b:cc:25:95:f3:0d:a9:66:51:e3:4d:44:
69:de:58:bf:98:d1:07:32:81:63:eb:b7:d9:6f:5a:
c2:a9:0a:85:9e:5d:88:89:14:9a:2f:7d:a6:ab:1c:
73:8e:55:e1:7f:80:25:58:a5:f7:dd:a8:ba:99:9f:
ac:db:6f:fb:31:31:19:11:42:5b:d1:ec:5e:85:81:
85:03:ff:3f:75:e3:a3:c7:a2:40:0f:9b:6a:4d:ea:
5f:61:b0:cf:73:5f:ef:09:fc:c0:b9:9c:68:e4:7e:
a1:dd:f2:a5:61:ea:0d:e7:e0:74:d3:24:7e:53:b6:
0f:d6:ab:89:04:fc:b1:a9:7f:8c:6f:c1:8f:ad:0e:
9f:16:d8:13:a4:69:3b:07:a4:1c:b0:67:4c:8b:6d:
63:1f:ea:b5:cc:fb:18:43:5a:b3:04:fa:86:49:e3:
e0:d6:e1:2d:00:14:2a:32:be:81:03:59:f1:21:85:
d3:4e:8a:f3:7b:79:4a:29:f1:5c:aa:14:07:82:b2:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:F8:5D:6D:14:7F:FA:F2:92:AF:45:DF:D4:43:81:45:DE:48:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.255.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:75:7f:14:10:3d:40:d7:7a:3b:b0:78:ea:92:99:ea:59:6e:
44:e9:f4:af:a4:5d:4a:a4:f1:bc:20:dd:2e:ed:02:6f:74:35:
2c:95:ed:fe:7b:fa:0a:83:fd:7a:de:3e:f1:54:cf:95:98:c6:
df:1c:72:75:c7:6b:a8:db:61:43:dc:41:77:ef:ad:3f:bb:84:
9a:66:ef:88:a4:af:e7:bf:b3:ff:37:db:49:e5:aa:50:f6:ae:
65:1b:58:5e:d5:8a:2d:7f:09:bc:66:4a:22:63:6c:45:bc:fd:
23:88:23:0e:06:89:d9:b4:cc:c1:c0:0c:e6:91:1b:d8:87:ea:
56:47:26:08:cd:55:16:f0:89:47:33:fb:a1:6d:d8:fa:68:27:
75:60:89:60:74:0a:be:c8:b9:05:90:39:e1:b7:7a:ca:2c:89:
e6:9d:6b:f1:a6:3b:46:b2:9e:35:22:91:53:f7:88:3d:51:f4:
cf:65:7e:70:3f:40:4d:df:a9:5a:ab:27:17:b7:e7:c8:03:98:
7b:68:f6:6d:5b:80:7e:fa:c6:b5:97:19:78:04:c6:6a:1f:a1:
5d:9b:ab:dc:80:aa:90:b0:c5:cd:d4:04:7b:b7:7e:0b:35:a5:
ff:ae:3f:05:c3:a9:f7:df:35:71:7e:7e:e0:3f:40:74:b0:ab:
75:a1:53:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDMW6cC4LGRFaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MjkwOTFhYmYtYTA1Zi00Zjk0LTlmZmMtZDZjZWRhYWI3M2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqaY7lns7h61tBIfgjoDqh4MrNixvCNz6YPx
4RyeHmOH8Dv7jSIGavcRL4Fd+djnjQ7zLw2ridpzbIDfNeBrzCWV8w2pZlHjTURp
3li/mNEHMoFj67fZb1rCqQqFnl2IiRSaL32mqxxzjlXhf4AlWKX33ai6mZ+s22/7
MTEZEUJb0exehYGFA/8/deOjx6JAD5tqTepfYbDPc1/vCfzAuZxo5H6h3fKlYeoN
5+B00yR+U7YP1quJBPyxqX+Mb8GPrQ6fFtgTpGk7B6QcsGdMi21jH+q1zPsYQ1qz
BPqGSePg1uEtABQqMr6BA1nxIYXTTorze3lKKfFcqhQHgrK2EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMj3+F1tFH/68pKvRd/UQ4FF3ki1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE4ZGM2YzctMTMzMC0z
YTJkLWE5YzMtMGUwNDk3MjljN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAF1fxQQPUDXejuweOqSmepZbkTp9K+kXUqk8bwg3S7tAm90NSyV7f57
+gqD/XrePvFUz5WYxt8ccnXHa6jbYUPcQXfvrT+7hJpm74ikr+e/s/8320nlqlD2
rmUbWF7Vii1/CbxmSiJjbEW8/SOIIw4Gidm0zMHADOaRG9iH6lZHJgjNVRbwiUcz
+6Ft2PpoJ3VgiWB0Cr7IuQWQOeG3esosieada/GmO0aynjUikVP3iD1R9M9lfnA/
QE3fqVqrJxe358gDmHto9m1bgH76xrWXGXgExmofoV2bq9yAqpCwxc3UBHu3fgs1
pf+uPwXDqfffNXF+fuA/QHSwq3WhU1E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:55:53 2025 by rpki-client