Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
File: 2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa (raw, json)
Hash identifier: XgSfIgcHKpM88vRhtR7lgBVEjx0Ve5uZk/CehqWWaT0=
Subject key identifier: 2B:89:E5:90:C3:AD:36:D5:AC:12:C1:27:7B:27:15:71:E1:87:1A:58
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56163CB7823CD80904C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.72.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:61:63:cb:78:23:cd:80:90:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=cbaf1c34-9fa2-42b2-921f-36baa193fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:a6:42:e9:1c:da:5e:f1:4e:13:46:25:2a:
64:bc:86:78:61:da:05:dd:32:a9:a2:70:b7:e1:80:
5f:c7:42:99:94:87:91:36:c7:b1:56:a4:8d:b1:a5:
01:1b:be:e8:78:11:fb:49:0a:13:8d:67:7e:ee:7b:
68:7b:26:2d:95:9b:25:1c:61:bd:2d:65:39:7b:c7:
f8:d5:08:b5:f6:38:85:85:2b:a2:45:28:3e:ff:78:
67:f3:77:0f:4e:8f:2a:9a:a4:87:a7:f6:f7:8e:eb:
cd:9c:07:8b:7c:73:1f:a9:64:9d:b0:55:d2:e4:e4:
6d:13:cc:1f:d3:26:68:94:ac:19:86:9a:d2:d0:97:
69:99:9b:f8:ce:86:f2:be:a2:17:51:40:98:0b:e9:
b5:10:c8:2f:5f:cd:5c:97:22:17:5a:38:53:1f:2b:
85:1b:5a:78:78:e2:6d:1c:e0:5a:34:ec:2e:aa:5e:
b4:19:77:a4:48:46:24:53:aa:05:d1:5c:6b:c2:e5:
ca:81:ca:41:e3:65:d1:46:5d:aa:d5:96:be:96:70:
9f:07:56:8b:69:cd:48:e6:73:0e:f2:4e:11:86:7e:
e1:c1:31:d3:03:2d:a5:cc:18:0d:82:65:a4:ac:f8:
a6:d9:02:67:16:a4:6b:2b:1f:74:d3:ba:eb:f9:fb:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:E5:90:C3:AD:36:D5:AC:12:C1:27:7B:27:15:71:E1:87:1A:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.72.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2a:f6:38:d9:43:e6:01:64:2a:cd:78:b2:08:de:b9:f9:78:
95:b0:3d:a9:34:3d:cc:08:3f:dd:3b:4a:41:e3:e0:8e:c2:b8:
36:7e:8a:73:f0:8d:9a:a1:cf:fc:16:27:3c:14:6c:1d:1c:61:
71:4b:b9:1d:ca:ac:c0:cb:85:c3:28:4f:76:4a:04:e4:08:84:
9f:25:86:e9:0c:2c:fb:03:43:07:73:05:ed:21:9d:7e:5d:14:
ef:f0:fc:a2:51:0d:63:80:fa:a0:9f:e2:2b:63:bc:e5:52:b9:
e3:1e:18:ba:68:d8:dc:53:ec:06:bb:85:6e:57:01:11:11:f8:
10:a7:bb:1d:30:c4:7e:e3:b6:37:aa:e3:07:d9:91:f7:20:d3:
45:33:ab:86:7e:6e:62:50:68:29:ff:8d:4c:59:ab:54:ff:ff:
a4:da:0b:85:e3:e4:de:f7:bf:a5:bd:ed:7f:b1:87:72:4f:99:
ab:94:a8:9e:2a:d8:0a:81:08:6f:03:d5:57:4c:94:73:dc:3b:
90:b9:3e:4c:8a:7f:bf:2e:34:f1:0e:92:e8:19:81:29:29:8d:
ee:18:a6:3f:8e:41:0e:df:b5:ee:c3:37:91:e2:f9:05:62:46:
aa:00:44:ff:f8:c0:6f:9a:37:18:5f:88:33:38:57:fc:24:44:
de:fc:26:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9WFjy3gjzYCQTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2JhZjFjMzQtOWZhMi00MmIyLTkyMWYtMzZiYWExOTNmZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT6mQukc2l7xThNGJSpkvIZ4YdoF3TKponC3
4YBfx0KZlIeRNsexVqSNsaUBG77oeBH7SQoTjWd+7ntoeyYtlZslHGG9LWU5e8f4
1Qi19jiFhSuiRSg+/3hn83cPTo8qmqSHp/b3juvNnAeLfHMfqWSdsFXS5ORtE8wf
0yZolKwZhprS0JdpmZv4zobyvqIXUUCYC+m1EMgvX81clyIXWjhTHyuFG1p4eOJt
HOBaNOwuql60GXekSEYkU6oF0VxrwuXKgcpB42XRRl2q1Za+lnCfB1aLac1I5nMO
8k4Rhn7hwTHTAy2lzBgNgmWkrPim2QJnFqRrKx9007rr+fsU9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuJ5ZDDrTbVrBLBJ3snFXHhhxpYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmM3ZGVhNWUtYWZkMC0z
ZmVhLWI4YTYtNTI0YjIyMTJlZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoq9jjZQ+YBZCrNeLII3rn5eJWwPak0PcwIP907SkHj4I7CuDZ+inPw
jZqhz/wWJzwUbB0cYXFLuR3KrMDLhcMoT3ZKBOQIhJ8lhukMLPsDQwdzBe0hnX5d
FO/w/KJRDWOA+qCf4itjvOVSueMeGLpo2NxT7Aa7hW5XARER+BCnux0wxH7jtjeq
4wfZkfcg00Uzq4Z+bmJQaCn/jUxZq1T//6TaC4Xj5N73v6W97X+xh3JPmauUqJ4q
2AqBCG8D1VdMlHPcO5C5PkyKf78uNPEOkugZgSkpje4Ypj+OQQ7fte7DN5Hi+QVi
RqoARP/4wG+aNxhfiDM4V/wkRN78JvM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:43 2025 by rpki-client