Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa
File: fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa (raw, json)
Hash identifier: KBAJcjSh0ibdaIEymPkd+YkzaLuCSl8110g43ljkjHU=
Subject key identifier: 48:0E:46:69:DE:D1:C3:5C:A4:AD:3C:07:64:66:F8:E1:E8:C9:B6:4D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC378E95B75E4861680020
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 71.127.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:37:8e:95:b7:5e:48:61:68:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=28e43419-a6b2-45ef-9bad-6c6623b1ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:3d:2c:51:b1:59:e5:92:8a:7f:34:2a:54:
ae:45:2e:bc:49:05:6e:c8:5c:8d:fb:bf:d8:7a:df:
76:59:77:8b:85:03:b3:0f:7e:90:3d:0d:b8:8a:49:
17:8a:bf:25:af:c8:e5:53:a5:72:2c:a3:5f:1c:74:
7e:68:3f:03:3d:f9:48:67:c4:23:5b:87:91:6e:b2:
f7:b0:4f:3c:31:5a:9e:fa:0a:28:59:34:c7:7a:0b:
4b:c6:10:91:ad:f0:7b:bd:d3:ca:2f:b1:33:18:77:
b9:e7:ca:71:7a:0c:e3:66:f8:b0:17:d6:42:7e:f9:
50:0a:9e:ca:9b:9f:69:04:72:47:31:82:6e:da:b3:
b9:bf:cf:23:e9:ec:0f:50:46:48:0c:a0:2b:6d:09:
99:fc:b9:3f:b3:eb:50:2f:e3:44:38:bd:dc:ef:b5:
28:ca:67:07:20:bd:72:e8:26:b2:fa:40:cd:2f:47:
8e:5c:0e:9c:7e:cd:76:01:0e:e4:bc:81:12:4c:a5:
50:2b:d5:c1:80:ce:3e:bd:df:d4:07:7f:d5:a6:f9:
89:5c:78:76:fe:69:ed:48:d5:27:2a:46:ae:d5:b7:
42:b3:3a:5f:ba:3d:ea:cb:7a:d0:e4:43:5c:de:f2:
c4:f4:7e:c7:69:41:99:17:fe:83:73:52:57:92:d8:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:46:69:DE:D1:C3:5C:A4:AD:3C:07:64:66:F8:E1:E8:C9:B6:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.127.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:35:17:f6:fa:37:24:9c:7b:54:79:81:46:ca:4b:10:84:aa:
4b:30:82:e7:a9:3d:51:e7:8b:ec:28:77:c3:ed:f0:b0:83:31:
f4:42:dd:87:36:07:05:9c:c2:fb:c8:32:d3:07:e7:0f:b4:e2:
88:dd:91:b3:0f:c5:cc:c0:d7:a1:52:b5:e8:46:8f:a6:dc:20:
ae:0d:6d:d0:58:4c:89:6f:db:9e:50:67:85:15:73:3a:a7:d7:
52:4a:b4:8a:db:31:b0:45:df:a0:cd:af:1e:ad:1a:62:48:9a:
80:1d:3e:15:95:c7:56:e0:f4:0a:ce:a6:11:c5:38:4b:5e:4b:
20:dd:9f:a4:a6:39:05:63:88:c5:f9:3b:69:51:48:86:43:25:
79:72:82:d0:d0:2b:97:79:6c:e3:5f:4c:df:ff:27:79:fc:2b:
4f:5f:66:54:69:ac:2e:a8:9b:1f:e4:2c:08:bb:cd:25:bf:cc:
a9:3b:db:1a:60:65:1f:10:d9:03:a7:fa:68:a3:08:6c:af:1d:
1d:20:1e:59:cd:b0:3c:88:cc:de:3e:a2:d3:4e:59:90:d7:c4:
ff:42:03:ce:18:31:f7:e9:6e:9f:ea:80:ec:8b:b4:58:ef:1e:
f6:31:36:d7:b3:d4:ac:0f:a6:8c:ab:0c:60:6f:24:16:8e:e7:
9b:52:59:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DeOlbdeSGFoACAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MjhlNDM0MTktYTZiMi00NWVmLTliYWQtNmM2NjIzYjFlZDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxc9LFGxWeWSin80KlSuRS68SQVuyFyN+7/Y
et92WXeLhQOzD36QPQ24ikkXir8lr8jlU6VyLKNfHHR+aD8DPflIZ8QjW4eRbrL3
sE88MVqe+gooWTTHegtLxhCRrfB7vdPKL7EzGHe558pxegzjZviwF9ZCfvlQCp7K
m59pBHJHMYJu2rO5v88j6ewPUEZIDKArbQmZ/Lk/s+tQL+NEOL3c77UoymcHIL1y
6Cay+kDNL0eOXA6cfs12AQ7kvIESTKVQK9XBgM4+vd/UB3/VpvmJXHh2/mntSNUn
Kkau1bdCszpfuj3qy3rQ5ENc3vLE9H7HaUGZF/6Dc1JXktj9lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgORmne0cNcpK08B2Rm+OHoybZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE5NTZjYTMtN2M2ZC0z
Y2YwLWIyMTMtOGIxMmUxMmFiMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALM1F/b6NySce1R5gUbKSxCEqkswguepPVHni+wod8Pt8LCDMfRC3Yc2
BwWcwvvIMtMH5w+04ojdkbMPxczA16FStehGj6bcIK4NbdBYTIlv255QZ4UVczqn
11JKtIrbMbBF36DNrx6tGmJImoAdPhWVx1bg9ArOphHFOEteSyDdn6SmOQVjiMX5
O2lRSIZDJXlygtDQK5d5bONfTN//J3n8K09fZlRprC6omx/kLAi7zSW/zKk72xpg
ZR8Q2QOn+mijCGyvHR0gHlnNsDyIzN4+otNOWZDXxP9CA84YMffpbp/qgOyLtFjv
HvYxNtez1KwPpoyrDGBvJBaO55tSWR4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:17 2025 by rpki-client