Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
File: ec68203b-77b6-3b06-9edf-d20bc17949be.roa (raw, json)
Hash identifier: QDS+BGIOw/456aHX3d6cIw7plTJ4R+PH/l/qQ0Kj3sw=
Subject key identifier: B1:46:B1:0B:73:97:A8:D6:17:39:8A:FF:A0:84:A0:C1:DE:7F:08:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584837201BD9CCFAB41F84F7D7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.96.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:1b:d9:cc:fa:b4:1f:84:f7:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=ae47d35b-9ac7-4ab2-a5ec-324c601f4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:1b:32:a4:9c:72:54:a0:a5:7d:d6:dd:b0:
4d:61:ef:83:e2:40:21:38:4c:97:66:1e:2b:ff:6d:
7c:58:7d:af:e6:82:23:ba:7d:61:ad:a4:58:17:ad:
97:39:79:f7:1f:3c:79:6e:3b:f4:c8:0a:e1:01:05:
11:08:e7:83:15:34:c8:51:56:60:ae:55:28:19:9d:
2e:5e:78:fa:d6:b6:1a:50:f0:88:9b:90:a7:1e:6d:
29:39:61:da:e7:e7:da:92:b6:cb:da:e3:e0:00:84:
a1:12:9c:d9:56:86:e3:4d:c2:a0:87:34:7f:b2:04:
40:8a:33:3f:66:df:2b:2b:29:b5:53:4b:61:9f:8e:
84:47:f7:b8:cf:46:b8:93:4c:8f:18:09:83:10:ae:
af:b8:7e:aa:50:6d:eb:30:1a:30:15:12:85:00:b7:
38:33:c8:1f:39:f3:f7:34:66:1c:37:2f:27:82:59:
2d:11:2d:0c:47:05:ff:35:88:35:53:58:47:87:dc:
5e:1a:9e:c8:38:0a:9b:a4:d7:01:1f:34:9c:07:a7:
f2:f8:f6:66:f6:98:11:aa:2e:ca:e9:94:ce:f4:3b:
87:11:ba:94:0d:53:15:8f:4a:0c:24:fb:1d:84:7f:
f3:42:7e:af:0f:16:0f:b5:eb:31:82:6e:f8:5a:50:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:B1:0B:73:97:A8:D6:17:39:8A:FF:A0:84:A0:C1:DE:7F:08:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:26:ae:a1:15:07:b7:17:74:67:a0:69:5b:ea:a3:14:45:9e:
ba:d5:e6:8a:74:2b:0e:df:46:f1:b3:de:e4:eb:34:bc:f6:48:
02:c4:5f:f4:74:cb:c0:b8:df:01:3c:26:85:0f:d3:2f:b7:45:
29:55:be:b2:37:d2:f1:42:41:f8:f4:83:18:41:f2:f7:00:cc:
7c:d8:bb:43:4d:13:24:c9:92:62:e2:83:c8:b4:3f:b3:60:c7:
12:a9:d3:48:ab:55:e6:aa:5b:38:b4:ec:31:0f:03:1f:61:a6:
22:0b:fa:ee:91:7c:7d:10:4a:ef:b9:7b:63:21:2d:8c:2c:76:
8e:e7:b9:74:98:e4:7c:68:af:28:35:df:9b:5f:50:bc:12:4c:
0b:63:62:68:cc:ec:36:c7:57:da:a8:02:be:7a:ff:e4:56:0f:
67:82:79:f0:8b:34:dd:12:5b:09:a7:ad:a7:ea:dc:20:b5:16:
6f:c4:9c:71:0e:28:16:2d:c2:c2:f5:ad:87:a1:85:fb:e9:2a:
ee:27:33:62:e3:55:b3:49:5e:af:a2:57:ac:27:0e:ee:9a:a1:
07:ea:c8:5b:a5:33:9f:bf:70:93:19:6a:4b:a4:ca:de:db:18:
fb:2e:74:9d:e7:0a:c4:a0:37:48:c8:7d:21:91:db:37:14:45:
ba:e9:0e:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg3IBvZzPq0H4T318AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
YWU0N2QzNWItOWFjNy00YWIyLWE1ZWMtMzI0YzYwMWY0YzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolMbMqScclSgpX3W3bBNYe+D4kAhOEyXZh4r
/218WH2v5oIjun1hraRYF62XOXn3Hzx5bjv0yArhAQURCOeDFTTIUVZgrlUoGZ0u
Xnj61rYaUPCIm5CnHm0pOWHa5+fakrbL2uPgAIShEpzZVobjTcKghzR/sgRAijM/
Zt8rKym1U0thn46ER/e4z0a4k0yPGAmDEK6vuH6qUG3rMBowFRKFALc4M8gfOfP3
NGYcNy8nglktES0MRwX/NYg1U1hHh9xeGp7IOAqbpNcBHzScB6fy+PZm9pgRqi7K
6ZTO9DuHEbqUDVMVj0oMJPsdhH/zQn6vDxYPtesxgm74WlDqRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFGsQtzl6jWFzmK/6CEoMHefwi5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWM2ODIwM2ItNzdiNi0z
YjA2LTllZGYtZDIwYmMxNzk0OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwmrqEVB7cXdGegaVvqoxRFnrrV5op0Kw7fRvGz3uTrNLz2SALEX/R0
y8C43wE8JoUP0y+3RSlVvrI30vFCQfj0gxhB8vcAzHzYu0NNEyTJkmLig8i0P7Ng
xxKp00irVeaqWzi07DEPAx9hpiIL+u6RfH0QSu+5e2MhLYwsdo7nuXSY5Hxoryg1
35tfULwSTAtjYmjM7DbHV9qoAr56/+RWD2eCefCLNN0SWwmnrafq3CC1Fm/EnHEO
KBYtwsL1rYehhfvpKu4nM2LjVbNJXq+iV6wnDu6aoQfqyFulM5+/cJMZakukyt7b
GPsudJ3nCsSgN0jIfSGR2zcURbrpDv4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:53 2025 by rpki-client