Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
File: 9d4a5872-06fd-3b49-9181-214a58a6db46.roa (raw, json)
Hash identifier: tUvWVlxjRbSxb+F56v/nm2y2qjRVZzJAYqf+bIH5+E8=
Subject key identifier: 2C:74:2B:C0:97:80:2D:EA:82:B6:0E:7C:B7:D0:1B:70:10:55:62:05
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C14A4192BC3A54B27380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.109.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c1:4a:41:92:bc:3a:54:b2:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=7edd4e7d-6ae1-46ad-ac1d-165c66e632c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:ef:12:77:22:3f:d3:c0:aa:d3:8b:8e:a6:
13:b4:66:e8:2b:22:31:75:1c:0c:20:e9:f0:5d:81:
b9:37:43:38:5d:05:ee:df:f6:4a:61:a4:5c:c4:fb:
67:00:2d:39:7a:5d:27:8d:74:0a:c4:e5:d5:a0:15:
f1:6b:e7:32:29:6c:6c:28:57:6a:b9:3f:88:ae:3c:
ee:7b:f7:03:6b:31:f5:8a:5e:8c:b4:dd:ac:03:c0:
06:e3:55:f0:ea:0f:cb:d6:c6:89:c7:a3:de:c6:25:
74:83:0c:bf:37:66:41:5c:34:10:fa:a2:a5:39:72:
27:cc:ae:e7:bd:83:b4:ad:0d:c1:e1:e3:1a:19:ca:
20:fc:f1:d5:9d:ad:0b:10:1f:b3:af:62:33:fb:11:
02:b3:98:49:81:7c:3e:50:67:1e:18:df:02:72:04:
ed:a6:ca:2d:99:8d:d7:99:c4:27:1b:7e:75:28:1e:
43:64:4e:d6:05:e0:8e:b9:14:57:67:25:08:b1:fd:
7e:87:8a:8a:23:30:93:37:72:0e:92:fe:78:28:e6:
98:f4:ec:06:c5:04:33:7f:67:1e:fe:36:33:2b:c3:
d8:4c:e2:59:72:71:d1:09:0e:37:e1:94:d7:98:f3:
18:66:4e:d9:79:f3:80:a1:ff:9b:6a:ed:28:2a:c7:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:2B:C0:97:80:2D:EA:82:B6:0E:7C:B7:D0:1B:70:10:55:62:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:b6:19:99:b4:8b:f1:d2:b9:09:23:03:1a:bd:02:28:be:8b:
b1:10:49:57:15:6e:52:53:ac:0c:4f:0d:e5:39:3f:02:89:c8:
ed:c9:1d:0b:36:a2:82:f3:9c:e5:6b:0f:eb:ff:7b:30:9b:5b:
83:e6:b7:4d:88:1e:92:d4:94:90:7f:c3:24:67:20:2f:92:35:
b7:ec:71:a0:2b:f8:da:85:e3:d5:44:27:aa:c8:17:70:9d:32:
37:4d:4e:ab:ce:7a:6f:47:77:2a:3f:8f:a0:fc:51:37:40:77:
fb:a4:93:7c:c8:ed:e8:4c:00:25:d3:e1:0b:9c:6f:3c:8a:7b:
62:bd:1d:4f:12:1a:7c:89:c0:c9:b1:e7:bc:dc:6e:00:e4:f4:
18:76:ad:60:1b:9e:b1:6e:8e:d9:90:1e:9f:5a:82:be:3e:5d:
24:03:be:81:21:a1:1d:0a:9a:01:aa:dc:e5:be:d6:35:e6:2b:
65:67:97:d9:f4:7c:61:2a:bd:94:10:86:e0:da:4d:e6:1c:f0:
76:bf:19:5c:7e:5d:cc:70:cc:13:eb:eb:ce:7b:ca:a5:7b:d9:
91:23:d1:70:ea:c3:ff:9b:84:c6:59:d7:ff:1d:c1:28:c8:59:
1c:5a:9f:57:7e:2d:1d:e4:39:88:52:a6:3b:61:64:4f:d1:3a:
91:4b:ae:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNcFKQZK8OlSyc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
N2VkZDRlN2QtNmFlMS00NmFkLWFjMWQtMTY1YzY2ZTYzMmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinTvEnciP9PAqtOLjqYTtGboKyIxdRwMIOnw
XYG5N0M4XQXu3/ZKYaRcxPtnAC05el0njXQKxOXVoBXxa+cyKWxsKFdquT+Irjzu
e/cDazH1il6MtN2sA8AG41Xw6g/L1saJx6PexiV0gwy/N2ZBXDQQ+qKlOXInzK7n
vYO0rQ3B4eMaGcog/PHVna0LEB+zr2Iz+xECs5hJgXw+UGceGN8CcgTtpsotmY3X
mcQnG351KB5DZE7WBeCOuRRXZyUIsf1+h4qKIzCTN3IOkv54KOaY9OwGxQQzf2ce
/jYzK8PYTOJZcnHRCQ434ZTXmPMYZk7ZefOAof+bau0oKsegIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCx0K8CXgC3qgrYOfLfQG3AQVWIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWQ0YTU4NzItMDZmZC0z
YjQ5LTkxODEtMjE0YTU4YTZkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKO2GZm0i/HSuQkjAxq9Aii+i7EQSVcVblJTrAxPDeU5PwKJyO3JHQs2
ooLznOVrD+v/ezCbW4Pmt02IHpLUlJB/wyRnIC+SNbfscaAr+NqF49VEJ6rIF3Cd
MjdNTqvOem9Hdyo/j6D8UTdAd/ukk3zI7ehMACXT4QucbzyKe2K9HU8SGnyJwMmx
57zcbgDk9Bh2rWAbnrFujtmQHp9agr4+XSQDvoEhoR0KmgGq3OW+1jXmK2Vnl9n0
fGEqvZQQhuDaTeYc8Ha/GVx+XcxwzBPr6857yqV72ZEj0XDqw/+bhMZZ1/8dwSjI
WRxan1d+LR3kOYhSpjthZE/ROpFLrm4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:55:58 2025 by rpki-client