Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
File: dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa (raw, json)
Hash identifier: JaFjcqqOCo7F+plnJGv+AcJQRe5+mu+YAukQO9LCzVU=
Subject key identifier: 1D:34:E5:3C:F9:46:A5:F3:FF:C7:BA:68:41:B7:08:BA:0D:3E:71:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F7789D01046533BB8A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.191.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f7:78:9d:01:04:65:33:bb:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=d47cac3c-e3b7-45be-abc3-cb7c9cb541e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:f0:14:5c:f8:74:29:b4:48:ed:50:5f:a6:
96:33:68:23:fb:0a:69:6c:fe:cb:fc:d2:eb:52:90:
ae:62:79:18:2f:3f:07:d7:60:54:57:4e:6b:0d:5c:
31:9f:5d:e0:c3:f2:67:f5:7c:cb:e0:b5:5b:fb:a9:
1b:50:15:a4:ef:51:b2:59:f8:7f:47:ef:2d:09:c9:
f7:2c:dc:74:aa:d9:fa:91:b7:b8:24:c8:2a:0c:e5:
25:99:df:50:dd:21:20:64:20:d2:3a:0a:5d:76:41:
13:b1:4c:a0:3c:82:6c:7b:36:44:c3:3b:ee:05:4a:
2b:ce:22:93:0f:06:6c:11:21:12:d0:a1:e4:0c:78:
74:57:c9:a7:bc:5d:7a:42:51:65:61:15:50:fb:da:
da:c1:20:88:cc:f9:86:cf:0b:2d:66:84:ec:71:65:
e0:11:d6:eb:be:77:c0:3f:6b:9b:f1:0a:2e:27:4d:
1d:bd:6e:54:12:05:0a:13:53:57:48:c3:f1:0d:7a:
d4:d1:6e:32:e9:65:60:39:b1:1d:5f:e7:3d:66:ea:
97:2b:7c:a9:c0:c3:5d:8e:da:a6:2e:ca:ba:ec:e1:
6a:22:7a:f2:f9:06:d6:d7:79:7c:2c:d9:01:7b:20:
3b:18:1c:4b:b2:de:91:e9:18:b3:8b:81:4c:ab:77:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:E5:3C:F9:46:A5:F3:FF:C7:BA:68:41:B7:08:BA:0D:3E:71:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c5:dc:b2:da:0d:a9:f0:3f:33:e0:c0:e2:e0:83:7a:d6:57:
37:29:59:92:61:4b:7c:df:f2:8d:39:c3:4f:bf:83:6f:4b:82:
b4:cf:d8:e7:89:8b:69:c4:ce:08:09:6e:12:31:0c:7f:dc:e2:
5f:6f:bb:b1:b0:2f:81:83:b2:4f:75:0d:01:c8:6e:9a:c6:4a:
dd:23:f9:bc:49:a9:45:70:3c:ac:43:6b:2e:f5:25:a0:51:48:
55:fd:7d:66:c6:22:c9:5f:3d:83:b9:9d:cb:47:f2:b6:c8:0c:
e9:7c:20:b4:c6:e0:bc:5c:91:ba:31:15:e2:61:14:1e:99:a1:
ec:0b:19:c9:9d:a3:63:b0:fd:d5:ef:04:e5:f2:a8:be:1d:f7:
49:6a:bc:b0:98:22:a0:ea:fb:ba:97:f0:91:fd:c8:f1:d8:92:
72:e1:ed:74:97:93:73:50:98:a9:e5:bd:a7:8e:2b:f4:83:b3:
25:c2:44:54:8e:5b:8c:c6:c5:c4:c1:bf:1f:f9:61:8a:f4:0d:
57:81:b2:8b:60:70:f5:14:b7:6d:b9:d0:b5:99:d7:41:28:00:
e7:ab:32:81:f1:e4:55:13:04:68:39:98:03:91:d3:ea:64:46:
d6:80:3a:4e:78:9f:88:4a:f8:fc:24:e3:b5:ce:94:d7:30:ae:
74:2c:46:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvd4nQEEZTO7ikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZDQ3Y2FjM2MtZTNiNy00NWJlLWFiYzMtY2I3YzljYjU0MWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHHwFFz4dCm0SO1QX6aWM2gj+wppbP7L/NLr
UpCuYnkYLz8H12BUV05rDVwxn13gw/Jn9XzL4LVb+6kbUBWk71GyWfh/R+8tCcn3
LNx0qtn6kbe4JMgqDOUlmd9Q3SEgZCDSOgpddkETsUygPIJsezZEwzvuBUorziKT
DwZsESES0KHkDHh0V8mnvF16QlFlYRVQ+9rawSCIzPmGzwstZoTscWXgEdbrvnfA
P2ub8QouJ00dvW5UEgUKE1NXSMPxDXrU0W4y6WVgObEdX+c9ZuqXK3ypwMNdjtqm
Lsq67OFqInry+QbW13l8LNkBeyA7GBxLst6R6Rizi4FMq3dtwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB005Tz5RqXz/8e6aEG3CLoNPnGZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZmNzE3ZDktNWNjYi0z
YTFlLTg1MDMtYjEzMzBkM2VlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR78wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUcXcstoNqfA/M+DA4uCDetZXNylZkmFLfN/yjTnDT7+Db0uCtM/Y54mL
acTOCAluEjEMf9ziX2+7sbAvgYOyT3UNAchumsZK3SP5vEmpRXA8rENrLvUloFFI
Vf19ZsYiyV89g7mdy0fytsgM6XwgtMbgvFyRujEV4mEUHpmh7AsZyZ2jY7D91e8E
5fKovh33SWq8sJgioOr7upfwkf3I8diScuHtdJeTc1CYqeW9p44r9IOzJcJEVI5b
jMbFxMG/H/lhivQNV4Gyi2Bw9RS3bbnQtZnXQSgA56sygfHkVRMEaDmYA5HT6mRG
1oA6TnifiEr4/CTjtc6U1zCudCxG8w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:10 2025 by rpki-client