Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa
File: 5a98cc2c-b12d-361c-be77-b97d0601456c.roa (raw, json)
Hash identifier: VZITWq78Ph25w5FdPoOGDAD6jRQspUt9wK4aNvXekIw=
Subject key identifier: DE:39:52:FA:C5:CA:26:E7:58:70:88:52:0D:DD:70:AD:A1:21:01:16
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C5B59ED70312D82354C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.102.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c5:b5:9e:d7:03:12:d8:23:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=0475a1e6-be09-4dc2-9733-fb4f979d391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:69:32:41:ff:18:58:d9:83:d0:51:f7:42:
69:39:e5:12:b6:f6:a6:8a:37:de:26:4a:66:64:ac:
0c:71:f3:fb:90:b9:f7:12:87:a8:4f:bf:f4:bc:c6:
80:d5:3e:10:55:03:82:9e:64:2e:f7:4a:6a:ce:42:
fc:a0:ea:d7:01:ba:28:06:80:c6:19:ea:a7:33:5b:
97:f5:de:8b:92:a3:a2:d1:3d:38:e4:81:d2:c4:e4:
ec:64:a2:dc:12:55:86:4b:20:bb:75:f4:02:24:50:
7e:54:d5:42:19:4b:8a:e5:f7:b3:48:34:ad:52:b2:
3c:08:d2:c0:10:3b:ee:2d:6f:98:ad:c1:cc:39:0d:
19:12:06:d9:77:c2:17:ee:4c:e1:bd:93:03:10:88:
a7:51:02:d2:da:7e:f0:57:43:80:dc:a2:68:3c:7b:
86:ed:7d:20:9a:71:06:d2:8f:49:94:18:f8:5d:84:
7f:12:6e:65:a6:87:be:2e:93:f4:9e:9d:bc:8a:00:
7b:bf:1f:ce:8e:03:7a:10:0a:9d:67:2c:d6:7c:6e:
2e:66:bf:c4:e9:db:8f:89:c8:51:14:2b:de:46:86:
6d:fa:f6:68:1d:68:a4:9e:fa:b3:38:0e:4e:20:2e:
c4:79:f7:96:ee:87:70:e7:da:5b:f3:73:2e:4e:da:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:52:FA:C5:CA:26:E7:58:70:88:52:0D:DD:70:AD:A1:21:01:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.102.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:91:42:95:9c:77:8a:db:e6:97:65:62:e8:ef:4b:4f:fd:54:
eb:89:b6:d9:15:7b:5a:b4:22:f5:eb:0c:c0:68:4a:79:4e:64:
24:eb:a4:9a:28:4e:95:c0:07:52:88:8c:24:17:27:34:94:fe:
77:93:13:65:8d:da:b4:be:49:ff:67:81:a0:32:a5:9d:e7:71:
cc:b6:90:1f:c6:5f:b3:42:ff:b8:6b:fb:5f:58:10:47:b6:4c:
86:6c:70:31:76:5c:8e:e1:42:b2:32:13:59:fd:79:2a:9f:a2:
fd:73:93:ec:3a:43:97:2a:d1:a6:cd:ad:a3:3f:0b:d9:71:46:
c6:fd:da:62:91:4b:95:91:27:9e:03:55:0b:65:1a:66:19:5e:
8d:4b:87:d4:71:f2:c8:40:62:60:ed:37:ba:21:3a:b4:86:53:
a6:da:ea:19:5e:fd:c5:29:38:36:ee:fe:31:74:f2:98:45:50:
e4:23:c6:08:d6:5b:a4:1f:1c:39:94:58:7c:25:2c:2c:e0:a3:
09:13:ad:99:92:ec:0c:d9:cd:28:78:e0:87:cc:cb:ac:05:6c:
51:f5:e7:59:b4:d1:89:53:10:14:76:3a:37:cc:b7:c2:95:a2:
b3:90:be:2e:da:c3:83:b4:9e:a1:d1:5c:d2:c6:cf:44:88:b0:
20:90:b3:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNcW1ntcDEtgjVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
MDQ3NWExZTYtYmUwOS00ZGMyLTk3MzMtZmI0Zjk3OWQzOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLlpMkH/GFjZg9BR90JpOeUStvamijfeJkpm
ZKwMcfP7kLn3EoeoT7/0vMaA1T4QVQOCnmQu90pqzkL8oOrXAbooBoDGGeqnM1uX
9d6LkqOi0T045IHSxOTsZKLcElWGSyC7dfQCJFB+VNVCGUuK5fezSDStUrI8CNLA
EDvuLW+YrcHMOQ0ZEgbZd8IX7kzhvZMDEIinUQLS2n7wV0OA3KJoPHuG7X0gmnEG
0o9JlBj4XYR/Em5lpoe+LpP0np28igB7vx/OjgN6EAqdZyzWfG4uZr/E6duPichR
FCveRoZt+vZoHWiknvqzOA5OIC7EefeW7odw59pb83MuTtpUvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN45UvrFyibnWHCIUg3dcK2hIQEWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWE5OGNjMmMtYjEyZC0z
NjFjLWJlNzctYjk3ZDA2MDE0NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2RQpWcd4rb5pdlYujvS0/9VOuJttkVe1q0IvXrDMBoSnlOZCTrpJoo
TpXAB1KIjCQXJzSU/neTE2WN2rS+Sf9ngaAypZ3nccy2kB/GX7NC/7hr+19YEEe2
TIZscDF2XI7hQrIyE1n9eSqfov1zk+w6Q5cq0abNraM/C9lxRsb92mKRS5WRJ54D
VQtlGmYZXo1Lh9Rx8shAYmDtN7ohOrSGU6ba6hle/cUpODbu/jF08phFUOQjxgjW
W6QfHDmUWHwlLCzgowkTrZmS7AzZzSh44IfMy6wFbFH151m00YlTEBR2OjfMt8KV
orOQvi7aw4O0nqHRXNLGz0SIsCCQs1I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:33 2025 by rpki-client