Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa
File: f10f9aa9-c230-3e13-974d-a698f402248c.roa (raw, json)
Hash identifier: FDobjQPvQ8FCTpSTiT48szWgdPd7vO4x3U2l50IF7TQ=
Subject key identifier: 3E:1C:B0:C5:DF:8B:39:27:56:DE:7C:BD:86:DB:5E:AC:8F:37:7D:86
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C025845B8CC13D8C3700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.107.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c0:25:84:5b:8c:c1:3d:8c:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=a511b234-7e11-4492-a192-5a2aaeceed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:a5:8d:45:29:f3:71:79:7f:c7:b3:fd:fe:
b2:97:bd:4a:a6:2c:ac:70:2e:64:c0:d1:fc:73:fe:
93:ac:fa:75:fc:6c:d8:eb:23:51:65:e3:7d:b3:8a:
a8:0a:12:c1:ce:3a:33:d9:cc:d5:ce:92:29:8a:f3:
6b:d7:86:03:3c:7b:a0:1b:df:80:3b:d6:e5:6f:7f:
9c:7f:b9:a6:a7:aa:88:4c:27:ac:ff:fa:80:05:0e:
c0:21:d9:da:3e:db:15:04:a3:e0:1d:64:1c:b6:3a:
24:1a:26:ca:b0:4a:90:cf:37:8f:f0:19:77:c8:01:
bb:73:d5:3c:60:a0:84:03:91:5d:94:f5:8d:47:73:
f5:36:67:97:cd:ff:ff:31:24:45:6d:39:2c:ea:dc:
21:67:9c:a0:20:4f:dd:69:c5:89:d9:1d:5e:46:4c:
91:51:a4:c9:9e:bf:51:89:21:35:78:c5:5a:39:fb:
89:18:80:75:b7:46:27:e0:0e:0d:c1:14:9f:3b:29:
ea:c9:08:6e:98:44:f5:0a:bc:04:c0:e3:b0:02:c0:
dc:1b:82:69:23:98:94:85:13:ab:c4:e7:1f:4a:73:
0d:cd:9a:b8:d1:12:7b:e7:55:93:71:9d:bf:d4:aa:
99:72:a6:18:72:c6:55:2c:42:6b:05:84:2b:20:05:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1C:B0:C5:DF:8B:39:27:56:DE:7C:BD:86:DB:5E:AC:8F:37:7D:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b9:fe:d6:3f:6f:be:86:5d:9a:f2:38:41:b3:55:d1:ed:0a:
5a:50:55:d7:91:38:f8:32:c8:d9:5d:51:43:3e:a7:2b:ac:be:
cb:a5:70:06:e0:d9:46:4d:f7:a0:46:0f:7f:fd:40:a4:a9:23:
07:23:9e:78:bf:16:ce:a9:2d:c0:c3:94:a6:2b:a7:c6:ff:97:
93:1f:b5:3b:f4:32:4d:c9:20:47:aa:1e:b0:d3:e4:df:46:71:
0e:0e:21:c3:5b:6b:17:ff:0f:1f:2b:c9:87:aa:f5:84:e5:f9:
d0:e0:2d:52:8e:c8:46:f0:c4:bc:5c:d9:da:d2:ac:57:66:7e:
19:24:10:a6:4e:70:8a:e7:05:b9:eb:09:4b:6a:5d:b5:1c:f8:
95:87:ea:52:e9:da:90:0b:65:15:84:57:77:74:f3:a8:a0:13:
79:57:8c:ba:c5:01:f7:43:09:20:b7:14:3a:ab:f7:7a:35:6d:
92:89:5d:7a:83:ec:61:82:e9:8f:b6:b7:89:c4:0a:02:a4:da:
c3:f7:a0:05:e7:be:97:58:69:85:cd:78:5a:52:b4:43:1f:9c:
53:88:6b:0d:75:37:e3:02:33:f2:bc:a2:93:7a:31:5c:fd:71:
18:94:94:eb:39:dc:28:0a:59:68:b4:cc:1a:aa:4d:0b:4c:ba:
c7:31:03:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNcAlhFuMwT2MNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
YTUxMWIyMzQtN2UxMS00NDkyLWExOTItNWEyYWFlY2VlZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL6ljUUp83F5f8ez/f6yl71KpiyscC5kwNH8
c/6TrPp1/GzY6yNRZeN9s4qoChLBzjoz2czVzpIpivNr14YDPHugG9+AO9blb3+c
f7mmp6qITCes//qABQ7AIdnaPtsVBKPgHWQctjokGibKsEqQzzeP8Bl3yAG7c9U8
YKCEA5FdlPWNR3P1NmeXzf//MSRFbTks6twhZ5ygIE/dacWJ2R1eRkyRUaTJnr9R
iSE1eMVaOfuJGIB1t0Yn4A4NwRSfOynqyQhumET1CrwEwOOwAsDcG4JpI5iUhROr
xOcfSnMNzZq40RJ751WTcZ2/1KqZcqYYcsZVLEJrBYQrIAXfLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4csMXfizknVt58vYbbXqyPN32GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjEwZjlhYTktYzIzMC0z
ZTEzLTk3NGQtYTY5OGY0MDIyNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADy5/tY/b76GXZryOEGzVdHtClpQVdeROPgyyNldUUM+pyusvsulcAbg
2UZN96BGD3/9QKSpIwcjnni/Fs6pLcDDlKYrp8b/l5MftTv0Mk3JIEeqHrDT5N9G
cQ4OIcNbaxf/Dx8ryYeq9YTl+dDgLVKOyEbwxLxc2drSrFdmfhkkEKZOcIrnBbnr
CUtqXbUc+JWH6lLp2pALZRWEV3d086igE3lXjLrFAfdDCSC3FDqr93o1bZKJXXqD
7GGC6Y+2t4nECgKk2sP3oAXnvpdYaYXNeFpStEMfnFOIaw11N+MCM/K8opN6MVz9
cRiUlOs53CgKWWi0zBqqTQtMuscxAxY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:08 2025 by rpki-client