Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e9ef89b-6e4d-34b2-862c-d3795775e061.roa
File: 3e9ef89b-6e4d-34b2-862c-d3795775e061.roa (raw, json)
Hash identifier: 0yBQmozlNYGp6PMh/FcH9CUXohqLb5bYkkUOgsLeIu4=
Subject key identifier: E4:CD:FB:16:AA:C2:60:7D:DA:F4:3D:71:A4:29:85:7B:3A:13:61:AA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584917DC3BD7169CDF8DEDDA6A20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e9ef89b-6e4d-34b2-862c-d3795775e061.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 12174
IP address blocks: 72.219.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:3b:d7:16:9c:df:8d:ed:da:6a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=2a03ed98-601a-41fd-a214-309ce1f6cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:13:fa:21:11:9f:26:2a:de:e5:69:a0:3d:
60:2f:9d:74:b7:36:e4:38:74:9a:8b:bc:ae:fe:a0:
a5:5a:5b:17:c4:ec:cc:82:0e:aa:7a:cf:9a:1a:32:
61:89:04:6e:c1:93:33:a6:76:52:50:2e:62:34:7b:
b7:d0:ed:ed:3b:5f:59:fd:2a:70:d6:0a:ba:7c:79:
85:fb:cb:cf:ed:b8:19:f1:ae:ff:cf:de:76:9e:32:
d6:dd:54:da:89:d4:71:e4:79:15:83:f7:b3:53:3a:
27:43:df:06:cf:2e:fc:21:24:c2:64:50:a5:cc:aa:
00:d9:be:52:fd:8d:94:b4:b1:13:fd:80:7e:c7:a6:
ce:9b:10:0f:b1:cf:bf:93:e5:61:2c:d8:66:f2:4e:
7a:47:ce:d3:d3:00:02:cc:79:eb:3a:e1:40:30:d3:
49:09:29:c4:6c:88:18:36:58:41:a1:a7:bd:68:79:
65:54:13:fb:e7:ed:18:45:3d:1b:4f:46:b5:c9:84:
9f:d5:22:d2:2f:14:a8:ec:98:4a:1e:46:9c:65:cb:
5b:cb:28:ed:2e:02:86:ab:22:66:e1:ed:79:55:14:
64:8c:d6:99:24:92:d3:a4:d3:28:cb:5a:34:f9:06:
92:b6:d0:08:4a:26:b9:81:c0:cf:7d:ee:c8:14:50:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:FB:16:AA:C2:60:7D:DA:F4:3D:71:A4:29:85:7B:3A:13:61:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e9ef89b-6e4d-34b2-862c-d3795775e061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.219.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f4:2e:6e:87:55:54:d3:77:ff:3e:e0:6f:79:a1:ec:b2:69:
23:74:9f:dc:46:88:a5:f9:bf:9d:d9:2d:3e:a0:5b:6b:03:59:
82:10:19:ea:df:ff:4c:eb:ef:5a:6b:a0:aa:44:87:d5:01:d7:
c4:d3:8a:45:9f:b5:08:3e:92:a6:b2:45:26:bc:4c:6c:98:5a:
3c:aa:9d:d8:7e:a8:19:6b:5a:e4:f5:3f:19:ae:02:7e:c9:09:
82:02:e9:50:8a:64:e4:ab:b7:30:28:90:68:67:8e:71:8e:02:
35:19:9d:1e:ac:3a:a3:0e:af:40:a6:08:8f:b2:5c:b1:30:da:
7f:ba:24:44:5c:d4:0b:f6:d5:61:a3:6f:98:7d:70:54:2b:e5:
10:9e:71:38:f2:20:3d:45:34:ed:59:c4:56:c5:9c:54:a0:3c:
84:1e:f3:0b:05:8f:e0:67:37:a6:69:de:2e:08:64:7b:7d:e6:
2c:78:fa:08:58:5e:58:47:dc:76:69:fb:de:9e:32:34:ee:80:
31:44:0b:06:c8:67:e3:96:ac:d7:4d:bf:7a:fa:a5:c3:79:47:
88:61:0b:3a:a4:3d:1d:18:44:9c:5d:22:c3:5b:ea:93:e8:d8:
8e:86:ef:e3:72:af:92:80:71:f4:60:08:36:07:a5:a4:5b:59:
a0:27:fb:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DvXFpzfje3aaiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MmEwM2VkOTgtNjAxYS00MWZkLWEyMTQtMzA5Y2UxZjZjYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS0T+iERnyYq3uVpoD1gL510tzbkOHSai7yu
/qClWlsXxOzMgg6qes+aGjJhiQRuwZMzpnZSUC5iNHu30O3tO19Z/Spw1gq6fHmF
+8vP7bgZ8a7/z952njLW3VTaidRx5HkVg/ezUzonQ98Gzy78ISTCZFClzKoA2b5S
/Y2UtLET/YB+x6bOmxAPsc+/k+VhLNhm8k56R87T0wACzHnrOuFAMNNJCSnEbIgY
NlhBoae9aHllVBP75+0YRT0bT0a1yYSf1SLSLxSo7JhKHkacZctbyyjtLgKGqyJm
4e15VRRkjNaZJJLTpNMoy1o0+QaSttAISia5gcDPfe7IFFAP2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTN+xaqwmB92vQ9caQphXs6E2GqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U5ZWY4OWItNmU0ZC0z
NGIyLTg2MmMtZDM3OTU3NzVlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNvtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGL0Lm6HVVTTd/8+4G95oeyyaSN0n9xGiKX5v53ZLT6gW2sDWYIQGerf
/0zr71proKpEh9UB18TTikWftQg+kqayRSa8TGyYWjyqndh+qBlrWuT1PxmuAn7J
CYIC6VCKZOSrtzAokGhnjnGOAjUZnR6sOqMOr0CmCI+yXLEw2n+6JERc1Av21WGj
b5h9cFQr5RCecTjyID1FNO1ZxFbFnFSgPIQe8wsFj+BnN6Zp3i4IZHt95ix4+ghY
XlhH3HZp+96eMjTugDFECwbIZ+OWrNdNv3r6pcN5R4hhCzqkPR0YRJxdIsNb6pPo
2I6G7+Nyr5KAcfRgCDYHpaRbWaAn+yc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:28 2025 by rpki-client