Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa
File: e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa (raw, json)
Hash identifier: DQy/R8V6aWeV4DJaRQpyGC9n31oIL8a3oYnJTRMBt4Y=
Subject key identifier: 28:12:12:EA:79:F2:3E:EE:0E:CE:B9:B3:3F:85:17:A4:10:11:55:E5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8667743708D1959622C2860
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.245.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:77:43:70:8d:19:59:62:2c:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=2c9a76a5-83c6-4b90-a640-0165505fe41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:7f:90:5a:5e:4b:12:75:3a:b9:7b:91:77:
32:19:18:07:57:e5:f4:f0:a9:44:35:fd:0b:8f:19:
e5:eb:17:6b:ed:9d:5f:f9:39:d0:48:92:70:0f:cd:
7c:6f:7f:15:6e:64:b1:30:cf:7d:c5:90:a8:6d:e2:
28:4b:41:2d:0f:28:84:43:19:18:a9:3b:0f:ac:2e:
fb:01:90:25:ae:d0:d3:40:ab:d3:91:3e:85:ad:05:
32:02:46:9f:1c:19:19:91:0e:ad:17:3d:2f:53:13:
67:96:f0:0a:a6:62:14:3c:b0:16:e3:21:62:75:81:
f9:b9:ed:05:a5:48:cd:e5:11:ed:0c:09:52:73:0f:
e6:9c:a4:2e:db:02:0f:00:55:b8:8f:3a:d6:e7:07:
ec:f7:55:a1:dd:e5:f3:7e:bc:98:ea:95:3e:ec:eb:
0f:90:ef:da:42:0e:97:61:cf:a7:2d:5d:ca:ad:dd:
8a:73:c2:12:38:aa:6b:37:bd:83:bf:24:3b:b0:fb:
e5:64:cd:60:60:6f:bf:af:34:94:bd:e4:4d:da:80:
e4:bc:6d:cf:f7:7a:88:45:c4:6b:e2:ca:47:f0:eb:
84:87:04:90:50:ca:93:43:e5:15:94:58:d0:e1:68:
aa:07:0f:5b:e6:ea:68:c1:1f:3b:64:02:b5:66:8a:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:12:EA:79:F2:3E:EE:0E:CE:B9:B3:3F:85:17:A4:10:11:55:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.245.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:17:73:57:64:d6:19:9b:7a:92:e9:cf:ec:44:26:49:0d:e1:
31:0b:8e:80:9f:c0:02:ba:f4:ae:5a:be:bf:8e:3b:2f:8a:01:
0e:c8:95:fa:74:63:88:2f:3f:51:66:a4:89:b2:f7:ac:3a:03:
38:81:95:89:24:31:21:6a:72:b9:9a:94:3b:1f:a3:d0:6b:ee:
fb:63:a6:c1:db:8b:c9:ce:f9:69:11:57:bf:90:29:3b:2d:59:
7c:5f:c9:82:2a:76:f0:1e:48:aa:49:03:46:3a:8f:7f:70:c8:
c5:c6:0d:2a:14:34:60:7f:da:22:dd:84:b3:a2:cc:bc:dc:e3:
8e:ce:0c:b2:87:fc:90:b5:1b:41:94:e3:f9:98:ad:fd:b1:94:
e3:e0:4a:cc:2b:9f:41:74:db:67:37:0a:f2:58:30:cc:e9:7e:
cc:31:f6:8b:1d:60:66:20:b0:2e:93:1f:bd:bd:ad:45:3f:e8:
43:7b:ef:c2:e8:32:82:96:7a:94:f0:2f:4c:7f:9c:2d:19:c4:
ed:20:9d:b8:e7:3e:5a:5f:37:ed:c0:dd:eb:16:e1:df:55:d3:
3f:8a:6d:51:ba:c1:93:cb:73:40:b6:95:05:5a:0c:d5:16:a7:
e7:53:0a:04:fb:1f:ab:95:a3:91:e0:7d:e2:51:17:15:6f:c4:
5c:2c:f4:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZndDcI0ZWWIsKGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
MmM5YTc2YTUtODNjNi00YjkwLWE2NDAtMDE2NTUwNWZlNDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUJ/kFpeSxJ1Orl7kXcyGRgHV+X08KlENf0L
jxnl6xdr7Z1f+TnQSJJwD818b38VbmSxMM99xZCobeIoS0EtDyiEQxkYqTsPrC77
AZAlrtDTQKvTkT6FrQUyAkafHBkZkQ6tFz0vUxNnlvAKpmIUPLAW4yFidYH5ue0F
pUjN5RHtDAlScw/mnKQu2wIPAFW4jzrW5wfs91Wh3eXzfryY6pU+7OsPkO/aQg6X
Yc+nLV3Krd2Kc8ISOKprN72DvyQ7sPvlZM1gYG+/rzSUveRN2oDkvG3P93qIRcRr
4spH8OuEhwSQUMqTQ+UVlFjQ4WiqBw9b5upowR87ZAK1ZorAzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgSEup58j7uDs65sz+FF6QQEVXlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTUzYTMzZGQtYTRjMy0z
ZmFkLWE2NWYtYTdiZTQ5NzFkNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0Xc1dk1hmbepLpz+xEJkkN4TELjoCfwAK69K5avr+OOy+KAQ7Ilfp0
Y4gvP1FmpImy96w6AziBlYkkMSFqcrmalDsfo9Br7vtjpsHbi8nO+WkRV7+QKTst
WXxfyYIqdvAeSKpJA0Y6j39wyMXGDSoUNGB/2iLdhLOizLzc447ODLKH/JC1G0GU
4/mYrf2xlOPgSswrn0F022c3CvJYMMzpfswx9osdYGYgsC6TH729rUU/6EN778Lo
MoKWepTwL0x/nC0ZxO0gnbjnPlpfN+3A3esW4d9V0z+KbVG6wZPLc0C2lQVaDNUW
p+dTCgT7H6uVo5HgfeJRFxVvxFws9HM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:12:27 2025 by rpki-client