Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa
File: 81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa (raw, json)
Hash identifier: L8Gy3r4Witprk0wV5OgFxSl/IP2mIn/SxhGIvYDG14o=
Subject key identifier: 40:AD:68:D7:B7:7E:03:54:05:E3:29:AC:9B:CC:41:FA:5C:47:95:9A
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847DC64AE7B7C5C1AFB04370100
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 11090
IP address blocks: 72.35.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:ae:7b:7c:5c:1a:fb:04:37:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=98b26508-1ff1-4cad-9e4d-79d56bba863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:9e:9c:6b:72:32:9f:f5:85:82:87:dd:86:
0f:63:b2:21:24:9d:d9:73:93:43:01:10:fd:14:d0:
7d:29:4b:23:85:28:2d:38:23:d3:53:4d:a7:3a:6b:
1d:83:23:6b:96:56:e5:70:05:9e:5b:13:06:31:2d:
f0:30:e7:b7:05:2a:a1:43:e8:dc:8f:00:06:9c:e9:
68:3d:ca:a3:98:4a:f3:6b:6b:d5:4a:dd:a3:35:9d:
04:1f:18:f0:10:21:b6:9d:45:7f:e8:13:4c:57:61:
86:25:6c:2f:b5:6d:71:d4:48:ac:12:9e:55:ca:36:
05:e7:8b:6a:fb:01:ed:ba:67:90:6a:0f:de:0a:e3:
e3:bc:20:26:e0:da:08:71:64:88:8b:60:f0:dc:26:
26:6a:dc:92:ce:45:df:07:ab:ce:0c:d8:b7:58:39:
31:7d:69:88:4e:58:0f:80:cc:f3:51:45:16:d2:10:
eb:4e:c8:33:0d:83:c9:90:a3:93:b0:fb:b6:18:fa:
f3:2a:33:03:e1:ae:74:14:eb:50:4a:90:b3:19:ba:
bd:a1:0a:06:e5:d2:b8:1a:d8:27:1b:29:b1:fc:89:
68:81:67:5e:cb:0f:56:51:52:99:91:78:53:9e:fc:
8b:51:22:30:f4:d0:12:f8:b7:f4:8b:cf:b3:fe:26:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:68:D7:B7:7E:03:54:05:E3:29:AC:9B:CC:41:FA:5C:47:95:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:81:00:91:1b:94:45:2f:12:81:22:4b:fe:52:89:39:05:26:
6a:cc:9a:6c:2c:aa:6b:cf:cf:5e:d9:ab:d2:4a:27:fa:c6:68:
8b:8b:bc:56:bb:90:16:5d:02:04:25:3c:ea:55:c8:5f:a4:62:
4c:94:6d:a0:30:ff:61:3a:3e:85:c6:d0:f5:ca:d2:42:ef:76:
13:d2:7f:5b:ff:4b:1d:ab:87:7a:d5:e0:0e:95:e6:dd:82:4e:
56:ab:5c:4d:89:a9:f6:08:27:14:7d:dc:70:47:1e:88:a0:47:
a7:b2:c3:e6:b8:3d:22:82:14:4d:2d:1b:4a:16:8a:8e:dc:ff:
0a:58:64:ce:db:3a:22:e0:65:c9:84:af:b8:9c:9d:25:3b:78:
f8:a5:bf:cf:a1:25:2a:06:de:af:96:9b:08:c7:55:3a:33:f1:
1e:f6:f2:14:cc:ce:0b:82:72:b3:15:68:d4:2c:59:f0:80:f5:
a9:99:b9:d0:27:f8:12:e3:1a:e3:22:62:2c:f1:a4:4f:03:d2:
42:fc:96:cd:6d:95:0e:4c:1a:1c:d0:4d:a9:cc:3c:46:95:07:
2f:7d:92:b5:4c:3b:72:c3:5f:02:bd:27:66:7e:3e:8c:ed:73:
ad:68:a3:c0:f1:d9:05:f6:c1:a2:47:5f:cb:28:b8:be:d0:37:
a9:ce:56:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK57fFwa+wQ3AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
OThiMjY1MDgtMWZmMS00Y2FkLTllNGQtNzlkNTZiYmE4NjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP+enGtyMp/1hYKH3YYPY7IhJJ3Zc5NDARD9
FNB9KUsjhSgtOCPTU02nOmsdgyNrllblcAWeWxMGMS3wMOe3BSqhQ+jcjwAGnOlo
PcqjmErza2vVSt2jNZ0EHxjwECG2nUV/6BNMV2GGJWwvtW1x1EisEp5VyjYF54tq
+wHtumeQag/eCuPjvCAm4NoIcWSIi2Dw3CYmatySzkXfB6vODNi3WDkxfWmITlgP
gMzzUUUW0hDrTsgzDYPJkKOTsPu2GPrzKjMD4a50FOtQSpCzGbq9oQoG5dK4Gtgn
Gymx/IlogWdeyw9WUVKZkXhTnvyLUSIw9NAS+Lf0i8+z/iaFZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECtaNe3fgNUBeMprJvMQfpcR5WaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvODFkNmI5NmEtNzcyMS0z
MGIzLTgyZWYtM2I2M2NlODM0YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISBAJEblEUvEoEiS/5SiTkFJmrMmmwsqmvPz17Zq9JKJ/rGaIuLvFa7
kBZdAgQlPOpVyF+kYkyUbaAw/2E6PoXG0PXK0kLvdhPSf1v/Sx2rh3rV4A6V5t2C
TlarXE2JqfYIJxR93HBHHoigR6eyw+a4PSKCFE0tG0oWio7c/wpYZM7bOiLgZcmE
r7icnSU7ePilv8+hJSoG3q+WmwjHVToz8R728hTMzguCcrMVaNQsWfCA9amZudAn
+BLjGuMiYizxpE8D0kL8ls1tlQ5MGhzQTanMPEaVBy99krVMO3LDXwK9J2Z+Pozt
c61oo8Dx2QX2waJHX8souL7QN6nOVks=
-----END CERTIFICATE-----
Generated at Mon May 12 16:10:11 2025 by rpki-client