Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
File: c953ce00-5708-3380-95dd-20a6bd144e36.roa (raw, json)
Hash identifier: dqXy4ssM4KMtHMqXgJNIwmTRqj8S7rLU8AG+Hjxa35A=
Subject key identifier: B8:15:AB:18:80:4B:6B:28:81:95:BA:BB:F2:D9:F2:10:72:6A:5C:40
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BFAC9BC7BE5CC3851240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.111.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bf:ac:9b:c7:be:5c:c3:85:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=6f80e729-7c85-4003-a385-a7bdbeae1cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:dc:a1:6f:06:31:81:86:6d:05:e9:ad:a0:
19:2e:35:59:cf:c4:dc:cb:52:02:fe:6b:6e:a2:bc:
28:a1:a7:68:5a:44:42:91:80:44:0e:59:a3:02:eb:
1c:62:64:eb:c9:bb:e5:3b:db:45:65:cd:1e:7b:f7:
f0:2e:5b:43:14:6d:5a:90:98:1e:58:a3:bf:29:8d:
18:13:67:37:1a:ec:43:36:47:2b:8c:fe:d7:7e:78:
91:28:8d:01:83:c6:08:f5:8c:fd:93:ce:dd:65:91:
74:eb:13:df:e3:e9:66:1e:6d:68:3b:4b:e6:f4:12:
6c:28:cd:87:cb:7b:0e:ff:48:8c:c5:83:ff:ec:96:
88:43:41:84:0e:40:fc:5d:eb:92:d8:a8:b1:e6:f3:
62:47:75:47:62:d8:cc:e6:9e:85:7e:f1:3f:05:1e:
75:e2:99:49:f8:d7:b9:55:9d:92:1d:95:ab:35:5f:
d7:2e:63:c4:21:94:35:3b:dc:3b:c5:61:27:92:b8:
46:98:33:d9:09:1f:a0:0e:94:4e:5c:03:5d:bb:86:
89:bd:0f:6f:86:43:12:a3:3e:e5:09:84:ca:2e:33:
f4:ca:dd:e4:36:8b:1b:ec:60:53:fb:ad:d5:55:63:
d6:cf:67:55:af:bf:11:3d:53:d0:b6:a6:5a:a8:89:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:AB:18:80:4B:6B:28:81:95:BA:BB:F2:D9:F2:10:72:6A:5C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.111.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:50:0f:58:31:aa:15:92:65:fb:47:5e:7d:a1:85:6c:c7:16:
22:e3:b0:45:f3:c1:bb:ec:28:cf:ce:53:eb:ff:6a:72:bf:0b:
21:88:b5:63:84:1e:e3:61:48:f5:21:77:2c:bd:7e:a4:ed:63:
5c:32:28:dc:34:cb:d7:44:8d:f1:6e:88:7b:90:e6:52:59:0b:
aa:5b:d0:55:7e:2c:3f:40:7e:ec:f6:f8:92:f1:45:9e:0c:a6:
b4:58:56:29:05:d1:7e:33:e3:3d:af:53:56:9f:7d:d3:77:c1:
91:f3:1e:ad:5d:fa:b4:f1:53:cb:f4:4d:d1:f6:e0:c3:3c:75:
5d:f2:43:85:b6:dd:03:79:42:1b:7a:79:b5:50:fe:8c:c4:35:
aa:e6:72:45:42:f3:27:ea:81:c9:71:a4:4b:a1:39:e7:e8:5e:
1f:71:b8:21:48:f0:cc:0c:4d:72:08:93:61:dc:a8:ce:c2:94:
b6:0e:dd:de:1c:08:c7:08:3c:46:7b:e7:12:7c:71:c3:f2:45:
09:0c:17:9f:1c:02:cc:6c:72:c8:18:1e:03:df:3a:4c:35:99:
19:e8:ed:de:fd:22:b1:f8:c4:c4:cb:26:6c:5f:9e:38:9c:87:
06:12:2b:3c:ff:f1:59:68:1f:c7:e8:87:a0:b0:26:c1:b7:08:
19:0b:9b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNb+sm8e+XMOFEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
NmY4MGU3MjktN2M4NS00MDAzLWEzODUtYTdiZGJlYWUxY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTfcoW8GMYGGbQXpraAZLjVZz8Tcy1IC/mtu
orwooadoWkRCkYBEDlmjAuscYmTrybvlO9tFZc0ee/fwLltDFG1akJgeWKO/KY0Y
E2c3GuxDNkcrjP7XfniRKI0Bg8YI9Yz9k87dZZF06xPf4+lmHm1oO0vm9BJsKM2H
y3sO/0iMxYP/7JaIQ0GEDkD8XeuS2Kix5vNiR3VHYtjM5p6FfvE/BR514plJ+Ne5
VZ2SHZWrNV/XLmPEIZQ1O9w7xWEnkrhGmDPZCR+gDpROXANdu4aJvQ9vhkMSoz7l
CYTKLjP0yt3kNosb7GBT+63VVWPWz2dVr78RPVPQtqZaqInwhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgVqxiAS2sogZW6u/LZ8hByalxAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzk1M2NlMDAtNTcwOC0z
MzgwLTk1ZGQtMjBhNmJkMTQ0ZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSG+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1QD1gxqhWSZftHXn2hhWzHFiLjsEXzwbvsKM/OU+v/anK/CyGItWOE
HuNhSPUhdyy9fqTtY1wyKNw0y9dEjfFuiHuQ5lJZC6pb0FV+LD9Afuz2+JLxRZ4M
prRYVikF0X4z4z2vU1affdN3wZHzHq1d+rTxU8v0TdH24MM8dV3yQ4W23QN5Qht6
ebVQ/ozENarmckVC8yfqgclxpEuhOefoXh9xuCFI8MwMTXIIk2HcqM7ClLYO3d4c
CMcIPEZ75xJ8ccPyRQkMF58cAsxscsgYHgPfOkw1mRno7d79IrH4xMTLJmxfnjic
hwYSKzz/8VloH8foh6CwJsG3CBkLm04=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:05 2025 by rpki-client