Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7157d3f3-2366-3228-bc11-fdc40f86cfe6.roa
File: 7157d3f3-2366-3228-bc11-fdc40f86cfe6.roa (raw, json)
Hash identifier: XcKVvoUmEXg7ixAg1JBVr9IijO4nW9Xccudd/2D0UcY=
Subject key identifier: 21:D5:7B:13:8B:2C:B4:DE:59:D7:AA:BC:1E:F9:58:06:D6:65:CF:31
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BBD315F2EBF7F5AC8D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7157d3f3-2366-3228-bc11-fdc40f86cfe6.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.108.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bb:d3:15:f2:eb:f7:f5:ac:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=a9633b56-efce-4c08-bd25-a18ef1b2e07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:b1:68:f2:24:4c:c8:ed:f7:8e:a6:f3:bb:
45:09:32:be:75:d2:06:36:4a:72:c2:d5:ac:94:25:
da:fc:f1:aa:eb:43:d4:72:a8:c1:d3:51:4d:05:a7:
1e:73:68:44:25:2a:8f:22:00:f1:22:ed:9c:b6:0c:
2f:15:88:f2:0f:91:3e:7f:6a:b7:92:51:c9:3c:ef:
92:a4:c7:a2:22:37:6c:29:d0:4d:6d:d3:ae:1f:46:
3e:aa:2f:61:b9:8e:de:c3:e7:c7:d8:40:0d:5e:b7:
cf:17:75:84:fc:f8:8c:37:71:08:44:f1:94:21:81:
1f:f1:6c:52:a4:cc:76:fb:17:ad:d1:74:bb:bb:02:
95:d8:c5:28:9b:7c:04:17:f1:bb:8a:87:e9:c3:fd:
f6:d9:43:5a:a4:1a:66:0d:ff:19:76:18:bd:b2:07:
58:f4:60:24:8e:fb:71:f0:e7:25:72:13:f0:1b:63:
72:d9:59:46:36:83:ca:2d:db:fe:60:43:ca:a6:af:
b7:38:1f:ec:ea:41:92:99:00:b3:dc:a9:d5:6c:6a:
32:42:f7:e1:4b:f8:6b:65:df:cb:2f:6a:5e:b1:18:
5f:41:d1:07:18:90:db:65:7f:76:ef:ac:0f:b1:af:
85:eb:fd:72:b2:01:f1:74:e1:21:ef:8a:51:23:77:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:7B:13:8B:2C:B4:DE:59:D7:AA:BC:1E:F9:58:06:D6:65:CF:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7157d3f3-2366-3228-bc11-fdc40f86cfe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:57:af:2d:a9:9c:14:cc:98:33:bb:23:db:99:3d:4b:76:4d:
b7:c2:77:e3:5a:f2:6a:21:02:a1:c8:2c:dd:5c:a0:16:cd:2a:
8d:93:ca:af:96:23:8c:7b:01:38:9f:8b:3f:24:49:b7:e3:3b:
14:61:5d:ad:85:b8:60:5d:85:b1:10:11:d2:57:b7:bf:66:d1:
40:80:63:0c:02:25:71:50:5d:85:fb:d8:71:fa:da:86:20:bd:
58:a6:ff:4b:f9:d8:af:f1:ed:16:c3:05:24:0d:fd:70:df:a8:
92:e1:40:7c:a5:c7:92:cf:db:fe:8a:72:b0:60:73:b3:f5:89:
58:26:ec:3a:da:94:1f:1c:5a:80:5f:1d:26:b9:7c:75:09:0f:
19:62:91:c7:05:bf:10:00:d2:3d:1b:76:bc:6b:c1:91:8b:59:
72:2f:91:83:de:4b:19:7e:e8:35:0d:d0:b8:36:1b:9e:11:72:
c0:c0:4d:76:eb:8e:0d:e9:40:83:cb:02:9a:83:bf:a5:c4:a7:
b7:84:cb:b2:10:5a:aa:11:a2:7e:1c:69:e3:cc:6c:52:b5:e8:
2b:c6:e0:5d:17:63:f1:34:06:cd:9d:b2:81:05:76:06:e5:5b:
f2:29:47:15:31:3b:39:26:4d:8b:25:b4:59:9d:a2:e0:65:e6:
17:9b:13:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbvTFfLr9/WsjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
YTk2MzNiNTYtZWZjZS00YzA4LWJkMjUtYTE4ZWYxYjJlMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA542xaPIkTMjt946m87tFCTK+ddIGNkpywtWs
lCXa/PGq60PUcqjB01FNBacec2hEJSqPIgDxIu2ctgwvFYjyD5E+f2q3klHJPO+S
pMeiIjdsKdBNbdOuH0Y+qi9huY7ew+fH2EANXrfPF3WE/PiMN3EIRPGUIYEf8WxS
pMx2+xet0XS7uwKV2MUom3wEF/G7iofpw/322UNapBpmDf8Zdhi9sgdY9GAkjvtx
8OclchPwG2Ny2VlGNoPKLdv+YEPKpq+3OB/s6kGSmQCz3KnVbGoyQvfhS/hrZd/L
L2pesRhfQdEHGJDbZX9276wPsa+F6/1ysgHxdOEh74pRI3f6fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHVexOLLLTeWdeqvB75WAbWZc8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzE1N2QzZjMtMjM2Ni0z
MjI4LWJjMTEtZmRjNDBmODZjZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1Xry2pnBTMmDO7I9uZPUt2TbfCd+Na8mohAqHILN1coBbNKo2Tyq+W
I4x7ATifiz8kSbfjOxRhXa2FuGBdhbEQEdJXt79m0UCAYwwCJXFQXYX72HH62oYg
vVim/0v52K/x7RbDBSQN/XDfqJLhQHylx5LP2/6KcrBgc7P1iVgm7DralB8cWoBf
HSa5fHUJDxlikccFvxAA0j0bdrxrwZGLWXIvkYPeSxl+6DUN0Lg2G54RcsDATXbr
jg3pQIPLApqDv6XEp7eEy7IQWqoRon4caePMbFK16CvG4F0XY/E0Bs2dsoEFdgbl
W/IpRxUxOzkmTYsltFmdouBl5hebE4g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:58 2025 by rpki-client