Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa
File: c95c4186-fec5-30b2-b84d-a3a444066ebb.roa (raw, json)
Hash identifier: i0TzftQDBNf3T08atMg5BHpLPq6edc6ISowS0uA1vJM=
Subject key identifier: 5B:8E:95:42:A0:38:F7:F9:9F:66:84:D4:09:3C:5F:0F:FF:27:C7:B7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342E2550743B8AE13B3B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa
Signing time: Sun 09 Mar 2025 10:20:38 +0000
ROA not before: Sun 09 Mar 2025 10:20:38 +0000
ROA not after: Sat 07 Jun 2025 10:20:38 +0000
asID: 577
IP address blocks: 72.28.64.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2e:25:50:74:3b:8a:e1:3b:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:38 2025 GMT
Not After : Jun 7 10:20:38 2025 GMT
Subject: CN=6d2b8d34-7792-4893-adab-5fb8784d9634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:79:c9:64:81:00:c6:06:b7:0d:8c:90:22:
5f:eb:d7:0b:61:b5:3f:37:ef:ae:4c:e8:d5:e5:ce:
04:97:0f:2c:aa:49:1e:99:f2:f6:89:2e:69:f5:85:
c7:f8:4b:58:ca:3a:99:fe:1b:22:3d:22:0c:f5:a5:
9a:09:44:ef:a6:21:21:26:f5:fd:a6:3e:6e:02:44:
9a:61:b6:09:54:fe:df:a0:3b:47:48:29:a7:a4:97:
16:60:c7:22:2e:0c:9c:9e:98:d7:0e:8c:e4:61:4d:
a6:3c:68:77:cc:1f:e1:2c:eb:0e:c1:b5:d5:d0:17:
75:03:0e:0f:4d:75:29:b8:c8:e7:8a:23:22:7e:7c:
c0:16:c7:56:05:74:3a:be:6e:a9:c8:ff:f7:c5:f6:
e5:b6:e1:b9:1e:81:b0:2f:45:4f:8a:67:d2:59:18:
0a:ec:67:e8:9c:c5:64:ca:b2:99:ad:22:f8:15:27:
0b:b1:f8:bf:20:cd:1e:76:78:67:2f:d5:38:9f:a1:
6c:cb:d4:61:68:83:c0:2c:8f:14:db:86:36:46:8d:
47:1d:1b:89:07:20:3a:51:de:30:48:78:d5:2c:14:
26:98:ad:f3:16:d5:bd:c0:05:89:3a:65:4f:6f:e5:
8a:c3:fc:a9:ae:4f:dd:1c:6b:65:06:8a:72:19:c7:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:95:42:A0:38:F7:F9:9F:66:84:D4:09:3C:5F:0F:FF:27:C7:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c95c4186-fec5-30b2-b84d-a3a444066ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:77:bc:f9:3b:c2:aa:e0:e0:9b:01:29:d1:bd:80:d2:75:68:
b3:1f:1f:48:dd:79:54:7e:65:1f:31:5c:01:08:79:17:22:77:
9c:68:b5:78:fe:27:8e:3d:03:40:03:7a:8c:0f:5c:d0:af:3a:
02:50:7d:b8:77:99:b5:8b:bc:ba:61:d0:7c:f1:02:7c:c5:4e:
a3:5c:cc:3f:3e:9d:fe:a4:17:31:5b:96:ac:1e:dd:78:99:c0:
a3:74:1f:c2:0a:49:01:af:20:13:3b:3d:01:74:c4:98:24:e4:
c1:c5:aa:ea:30:db:a3:11:38:06:6d:48:e4:67:8c:9a:54:da:
91:56:ea:3e:4b:14:58:43:9a:ff:b7:aa:e5:ae:61:66:03:34:
8e:08:b1:70:a5:6f:00:ca:2d:e3:e5:25:f0:31:9a:ed:d3:52:
b5:bc:74:46:29:f5:92:c0:62:06:0e:61:65:21:5a:8e:38:0c:
ce:e3:ba:e7:79:80:75:1a:11:27:a8:28:3a:ef:fd:09:60:e5:
97:8e:71:90:5e:78:9e:9c:3b:bc:2a:df:67:9b:d4:8f:c1:ef:
cc:fc:5b:fe:5d:50:50:f0:6c:58:e5:3b:4d:b6:46:2d:01:07:
ea:80:23:61:8e:a3:8f:79:d1:a8:e7:a8:64:33:35:a9:7f:c8:
91:14:c4:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNC4lUHQ7iuE7O4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzOFoXDTI1MDYwNzEwMjAzOFowLzEtMCsGA1UEAxMk
NmQyYjhkMzQtNzc5Mi00ODkzLWFkYWItNWZiODc4NGQ5NjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnl5yWSBAMYGtw2MkCJf69cLYbU/N++uTOjV
5c4Elw8sqkkemfL2iS5p9YXH+EtYyjqZ/hsiPSIM9aWaCUTvpiEhJvX9pj5uAkSa
YbYJVP7foDtHSCmnpJcWYMciLgycnpjXDozkYU2mPGh3zB/hLOsOwbXV0Bd1Aw4P
TXUpuMjniiMifnzAFsdWBXQ6vm6pyP/3xfbltuG5HoGwL0VPimfSWRgK7GfonMVk
yrKZrSL4FScLsfi/IM0ednhnL9U4n6Fsy9RhaIPALI8U24Y2Ro1HHRuJByA6Ud4w
SHjVLBQmmK3zFtW9wAWJOmVPb+WKw/yprk/dHGtlBopyGccV2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuOlUKgOPf5n2aE1Ak8Xw//J8e3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzk1YzQxODYtZmVjNS0z
MGIyLWI4NGQtYTNhNDQ0MDY2ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH13vPk7wqrg4JsBKdG9gNJ1aLMfH0jdeVR+ZR8xXAEIeRcid5xotXj+
J449A0ADeowPXNCvOgJQfbh3mbWLvLph0HzxAnzFTqNczD8+nf6kFzFblqwe3XiZ
wKN0H8IKSQGvIBM7PQF0xJgk5MHFquow26MROAZtSORnjJpU2pFW6j5LFFhDmv+3
quWuYWYDNI4IsXClbwDKLePlJfAxmu3TUrW8dEYp9ZLAYgYOYWUhWo44DM7juud5
gHUaESeoKDrv/Qlg5ZeOcZBeeJ6cO7wq32eb1I/B78z8W/5dUFDwbFjlO022Ri0B
B+qAI2GOo4950ajnqGQzNal/yJEUxIk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:46 2025 by rpki-client