Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa
File: db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json)
Hash identifier: U6R8aYR8P9J3sOlI+Kv0jY+uH2APSW7tdodZ2uoDaAc=
Subject key identifier: 76:83:F8:00:E0:7D:37:69:A1:54:76:6E:82:5F:64:4D:C4:6B:61:2F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56E19FA15B3F1039296A8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.85.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6e:19:fa:15:b3:f1:03:92:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a2a3f0dd-58eb-4d01-80e7-12e19c007829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:6b:62:99:85:6d:cd:a6:09:38:61:ff:0b:
f8:f5:ea:24:59:91:c2:f4:b4:63:a5:30:9a:98:01:
cc:b7:96:92:ff:72:7d:3f:b5:4f:cc:3c:f2:81:6c:
29:61:7b:95:e2:12:0d:e4:8b:ea:51:d5:df:3d:42:
c2:5a:8a:25:b2:f6:e0:08:6d:d8:a4:b1:b4:48:78:
1a:2d:13:43:11:b4:42:67:6c:92:32:7c:58:69:92:
69:c3:7c:dd:54:10:d6:2f:dc:e4:cf:8c:bb:8b:09:
da:36:5e:f8:62:a7:8f:d9:f3:6d:9c:89:e6:b5:75:
a8:c7:fe:30:3c:c7:27:00:83:49:cb:71:7d:55:26:
5e:03:35:8d:7b:63:53:f6:ca:8f:b6:af:af:d6:43:
15:93:b9:da:05:ae:c6:4c:99:00:2b:c8:45:4b:62:
73:77:ec:6d:12:02:3f:34:20:f1:fd:b3:44:75:cd:
3c:95:47:24:bc:e5:d9:90:20:54:38:82:05:97:c9:
da:09:f4:0c:cd:1c:01:2b:5c:c8:06:d0:ab:b0:fb:
eb:67:08:9c:95:b0:df:9a:da:0a:fc:ec:75:ee:41:
42:e4:47:47:6f:95:ed:cd:73:2c:83:a9:cf:14:bd:
b6:0e:f0:af:10:43:5c:5d:cd:22:03:3a:7b:6a:ba:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:F8:00:E0:7D:37:69:A1:54:76:6E:82:5F:64:4D:C4:6B:61:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.85.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:1d:1b:72:e6:65:e6:bc:47:e5:cf:8c:5c:3d:f5:f5:70:ea:
cd:61:a1:4d:78:78:9f:3b:0f:63:a6:02:60:6c:fa:9d:17:87:
bd:5a:f6:e2:41:8d:c9:be:ae:43:aa:36:43:3f:2a:e0:d1:e8:
63:d5:90:08:07:17:46:4e:ce:bd:50:0f:62:95:7a:32:47:29:
73:1f:52:14:8f:0a:d7:e9:56:15:69:19:d6:59:b0:db:c7:78:
26:a6:ed:c1:72:07:4c:02:a4:fc:89:e8:b8:3f:c0:83:1a:72:
f6:54:cf:31:76:ae:e2:c5:0e:af:fa:ba:08:71:71:36:6f:c6:
5c:95:2d:7a:4c:5f:fb:6f:c4:81:73:bb:33:8e:17:e8:54:64:
4f:af:84:4e:16:ce:30:12:4d:ff:3e:b0:36:87:7f:2a:db:31:
81:45:be:f2:54:40:1a:c2:2e:27:c5:4a:79:af:6f:f5:d7:f1:
ea:48:95:63:ae:df:80:72:9e:07:6d:67:4b:d5:72:f0:36:30:
16:a8:d1:b0:aa:c6:07:61:fd:c3:ca:19:9b:a8:96:ca:e2:48:
e9:73:f6:b8:57:ec:ac:ba:8f:c6:15:16:73:93:36:05:80:34:
33:01:87:55:5f:ce:3f:a4:ec:90:c0:4f:e5:f7:3a:2c:73:40:
02:51:c8:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9W4Z+hWz8QOSlqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTJhM2YwZGQtNThlYi00ZDAxLTgwZTctMTJlMTljMDA3ODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh9rYpmFbc2mCThh/wv49eokWZHC9LRjpTCa
mAHMt5aS/3J9P7VPzDzygWwpYXuV4hIN5IvqUdXfPULCWoolsvbgCG3YpLG0SHga
LRNDEbRCZ2ySMnxYaZJpw3zdVBDWL9zkz4y7iwnaNl74YqeP2fNtnInmtXWox/4w
PMcnAINJy3F9VSZeAzWNe2NT9sqPtq+v1kMVk7naBa7GTJkAK8hFS2Jzd+xtEgI/
NCDx/bNEdc08lUckvOXZkCBUOIIFl8naCfQMzRwBK1zIBtCrsPvrZwiclbDfmtoK
/Ox17kFC5EdHb5XtzXMsg6nPFL22DvCvEENcXc0iAzp7arqvPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaD+ADgfTdpoVR2boJfZE3Ea2EvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDQxMjgtZmEyNy0z
YTE4LWJmYjItNjRjZjk2YzgzMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEdG3LmZea8R+XPjFw99fVw6s1hoU14eJ87D2OmAmBs+p0Xh71a9uJB
jcm+rkOqNkM/KuDR6GPVkAgHF0ZOzr1QD2KVejJHKXMfUhSPCtfpVhVpGdZZsNvH
eCam7cFyB0wCpPyJ6Lg/wIMacvZUzzF2ruLFDq/6ughxcTZvxlyVLXpMX/tvxIFz
uzOOF+hUZE+vhE4WzjASTf8+sDaHfyrbMYFFvvJUQBrCLifFSnmvb/XX8epIlWOu
34ByngdtZ0vVcvA2MBao0bCqxgdh/cPKGZuolsriSOlz9rhX7Ky6j8YVFnOTNgWA
NDMBh1Vfzj+k7JDAT+X3OixzQAJRyOk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:35 2025 by rpki-client