Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa
File: fac4595a-40a4-39c1-bd5c-b7209f740889.roa (raw, json)
Hash identifier: 2nCdHtv8sFsT17+p7yZChWRgFbe71kC3f/x1JQynCRo=
Subject key identifier: 4C:AE:C4:D7:74:36:BB:EC:91:88:D2:16:A9:F7:F7:2C:2E:12:76:8E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BF6B0771B491C9872A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.108.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bf:6b:07:71:b4:91:c9:87:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=e8a7c543-3a0a-4696-abe7-92efaa4317d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:9f:a0:58:a1:a8:c1:b2:1d:7f:04:65:6f:
14:03:2d:0f:e6:f6:dc:e2:62:7b:56:80:84:cf:1c:
cc:ab:95:1d:21:2b:69:a1:9e:0c:37:cd:2d:bf:e2:
a9:b5:db:18:7c:6b:f5:de:c2:d9:a5:df:a9:6d:38:
9d:0c:3e:75:0f:b5:b1:01:c8:50:a8:18:9e:2e:df:
30:19:25:25:0a:b3:5b:03:af:06:8a:17:d1:bf:87:
5d:80:b2:74:cd:25:8a:55:34:cb:00:5c:8d:17:b9:
20:34:ae:84:d7:3a:1a:22:d2:f3:27:cb:95:ef:77:
f7:52:c2:91:a9:0e:d6:29:fc:87:ac:90:ee:e1:8a:
c7:b9:e1:ab:1a:6b:b1:c6:40:2a:14:20:69:ac:6d:
d5:ca:1d:d2:b3:52:b2:86:a6:3a:d2:b4:17:f9:c6:
12:b7:e7:e2:70:c3:99:5f:70:48:db:80:03:e6:ad:
a0:04:10:61:6e:6e:c6:65:8f:51:68:3a:3b:a2:51:
fb:73:37:60:f9:d5:6e:93:4b:88:69:29:3c:11:32:
27:39:3d:d1:46:47:f2:78:40:2f:be:16:0e:1f:f9:
b0:b2:28:80:67:35:4d:ac:b6:05:38:aa:06:ff:31:
65:77:91:47:5f:12:ed:da:ff:c6:2a:15:f6:73:77:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:C4:D7:74:36:BB:EC:91:88:D2:16:A9:F7:F7:2C:2E:12:76:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8d:f7:95:dc:ff:26:19:8c:22:cd:b6:d0:53:c2:0d:8f:fc:
41:69:29:0a:d5:35:35:b2:42:b5:33:3e:32:b8:bf:73:01:88:
77:3e:97:3f:59:a9:05:5e:23:b2:90:71:50:19:18:c1:ec:61:
24:bd:55:36:90:31:3c:0d:86:33:6e:9c:04:30:b3:70:12:43:
f7:d0:e1:56:55:59:11:e0:3b:e1:96:0e:40:fe:57:b8:e9:91:
ff:dc:61:be:a7:09:56:f4:bb:33:e1:f3:86:10:d7:0d:f3:ad:
06:a2:c0:44:97:34:5f:26:83:84:7e:e3:5f:5d:0f:36:8d:83:
13:6c:99:09:c9:1d:cf:57:1c:84:39:e9:52:05:3c:6c:7c:ed:
e3:e4:90:85:10:5c:71:9c:d4:0a:ec:2d:06:33:2f:1c:3e:8b:
a2:ce:5d:6e:01:05:28:e8:4d:86:c0:22:19:be:bd:76:46:d2:
ac:f0:0d:7a:11:0f:c8:df:80:4c:51:ef:5b:af:bc:40:fb:3e:
b4:c4:7a:6d:8a:eb:87:b4:1a:eb:61:58:c0:b6:cb:8a:d7:bf:
6b:e7:d3:a1:db:65:a4:37:b2:6d:33:1c:74:2a:11:65:9e:1d:
6d:8e:21:37:51:12:c8:fa:26:c0:62:a0:9c:eb:04:be:8b:70:
6e:f3:af:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNb9rB3G0kcmHKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
ZThhN2M1NDMtM2EwYS00Njk2LWFiZTctOTJlZmFhNDMxN2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE+foFihqMGyHX8EZW8UAy0P5vbc4mJ7VoCE
zxzMq5UdIStpoZ4MN80tv+KptdsYfGv13sLZpd+pbTidDD51D7WxAchQqBieLt8w
GSUlCrNbA68GihfRv4ddgLJ0zSWKVTTLAFyNF7kgNK6E1zoaItLzJ8uV73f3UsKR
qQ7WKfyHrJDu4YrHueGrGmuxxkAqFCBprG3Vyh3Ss1KyhqY60rQX+cYSt+ficMOZ
X3BI24AD5q2gBBBhbm7GZY9RaDo7olH7czdg+dVuk0uIaSk8ETInOT3RRkfyeEAv
vhYOH/mwsiiAZzVNrLYFOKoG/zFld5FHXxLt2v/GKhX2c3etiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyuxNd0NrvskYjSFqn39ywuEnaOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFjNDU5NWEtNDBhNC0z
OWMxLWJkNWMtYjcyMDlmNzQwODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeN95Xc/yYZjCLNttBTwg2P/EFpKQrVNTWyQrUzPjK4v3MBiHc+lz9Z
qQVeI7KQcVAZGMHsYSS9VTaQMTwNhjNunAQws3ASQ/fQ4VZVWRHgO+GWDkD+V7jp
kf/cYb6nCVb0uzPh84YQ1w3zrQaiwESXNF8mg4R+419dDzaNgxNsmQnJHc9XHIQ5
6VIFPGx87ePkkIUQXHGc1ArsLQYzLxw+i6LOXW4BBSjoTYbAIhm+vXZG0qzwDXoR
D8jfgExR71uvvED7PrTEem2K64e0GuthWMC2y4rXv2vn06HbZaQ3sm0zHHQqEWWe
HW2OITdREsj6JsBioJzrBL6LcG7zrzA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:02:41 2025 by rpki-client