Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
File: 007f1617-e313-3e2f-97b8-0dcc7c385c83.roa (raw, json)
Hash identifier: ieL8DWoTw/RdW8wLqBiIaMsY8wrNYocWkgrA5pSpDSg=
Subject key identifier: AB:C2:2D:64:3E:3C:F2:D1:74:A9:F0:F6:1B:A0:BE:68:B0:E0:1C:48
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848BBBB84BF616C977D5509164B
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 72.35.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:84:bf:61:6c:97:7d:55:09:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=3dbf8072-05b4-4248-bd71-6eea9e7a9eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:9c:3c:ac:5e:09:81:6c:94:66:ba:08:63:
26:bb:19:fd:6b:95:29:f4:6b:47:59:ca:6e:d6:fa:
05:9a:f3:86:68:01:c4:ea:7c:28:47:70:ed:80:b0:
19:bd:5d:cb:67:c0:0d:a1:61:99:10:5a:41:70:d7:
c5:c5:b9:e9:0e:aa:64:04:11:45:f8:b9:e9:d7:79:
fd:ba:f2:61:be:c6:f8:8a:64:0d:56:54:80:c5:c7:
4b:d4:b4:85:7f:19:a2:5b:21:ae:f2:c2:cb:3c:8c:
a3:06:18:fe:b3:ee:a8:82:f9:ce:3c:4c:fc:4b:23:
9d:58:30:ac:85:81:6f:4f:42:ad:e8:ef:ca:95:b2:
9b:1a:7f:e7:c4:f2:65:bb:06:35:fe:8b:d5:61:7e:
b7:75:8c:b6:35:27:16:8d:fe:8a:10:c8:52:5a:d1:
7e:30:d4:53:b9:70:36:c4:12:eb:00:04:bf:e7:ac:
89:01:0c:56:a5:b4:ee:2d:9f:b4:3a:00:40:11:09:
9c:21:e8:87:2d:20:aa:a5:8e:4a:d0:8c:48:06:31:
6f:39:a3:0c:a6:de:28:a4:a0:8b:6c:6c:ea:e1:3c:
02:1b:f1:b5:15:66:cf:63:20:10:2f:05:80:0a:aa:
a1:66:3a:2d:ef:8c:c5:e5:7c:13:c2:7c:70:98:00:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:2D:64:3E:3C:F2:D1:74:A9:F0:F6:1B:A0:BE:68:B0:E0:1C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:2c:c7:e6:b4:a7:51:d4:b3:ab:db:aa:c0:30:18:c6:66:64:
d7:50:bb:7e:92:13:52:da:ea:48:6e:70:a5:33:7b:b6:51:12:
eb:42:db:05:75:f5:d5:5d:f3:8a:ff:e4:a5:38:99:82:7f:c6:
f5:dd:d9:6f:0f:92:eb:d8:87:6f:94:5e:e5:3a:b5:2d:e1:58:
31:b8:e9:40:15:16:00:d0:56:17:22:48:1d:f0:9e:12:5b:b0:
9d:51:f5:c7:55:41:12:5a:4d:19:ef:8f:d5:34:a2:54:bd:82:
41:d9:d1:a1:80:b8:7e:53:6a:99:86:e5:1f:57:b4:af:b6:e6:
50:6f:fd:79:a5:b4:d3:23:b3:6f:0a:fb:74:12:5e:ad:7e:be:
61:98:e6:7f:bc:4e:c2:76:c4:78:1d:52:d8:a8:86:bd:4f:36:
e5:21:39:8e:f3:f3:ba:89:72:79:d7:4c:1b:25:33:24:56:5f:
9f:1f:77:9e:fc:7d:d1:d2:b5:b0:f9:05:34:f6:4a:93:78:df:
d1:8d:04:77:a3:61:77:41:80:f3:90:b3:9c:f2:d7:88:66:c7:
b7:b0:fc:f6:fc:ab:1f:5a:1f:3b:4f:14:8f:04:0f:3f:2a:5d:
ef:68:9e:41:a4:bc:f1:58:f7:cb:a9:24:f9:fb:53:7e:cd:93:
7e:bf:7d:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4S/YWyXfVUJFkswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
M2RiZjgwNzItMDViNC00MjQ4LWJkNzEtNmVlYTllN2E5ZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpWcPKxeCYFslGa6CGMmuxn9a5Up9GtHWcpu
1voFmvOGaAHE6nwoR3DtgLAZvV3LZ8ANoWGZEFpBcNfFxbnpDqpkBBFF+Lnp13n9
uvJhvsb4imQNVlSAxcdL1LSFfxmiWyGu8sLLPIyjBhj+s+6ogvnOPEz8SyOdWDCs
hYFvT0Kt6O/KlbKbGn/nxPJluwY1/ovVYX63dYy2NScWjf6KEMhSWtF+MNRTuXA2
xBLrAAS/56yJAQxWpbTuLZ+0OgBAEQmcIeiHLSCqpY5K0IxIBjFvOaMMpt4opKCL
bGzq4TwCG/G1FWbPYyAQLwWACqqhZjot74zF5XwTwnxwmABfawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvCLWQ+PPLRdKnw9hugvmiw4BxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMDA3ZjE2MTctZTMxMy0z
ZTJmLTk3YjgtMGRjYzdjMzg1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIsx+a0p1HUs6vbqsAwGMZmZNdQu36SE1La6khucKUze7ZREutC2wV1
9dVd84r/5KU4mYJ/xvXd2W8PkuvYh2+UXuU6tS3hWDG46UAVFgDQVhciSB3wnhJb
sJ1R9cdVQRJaTRnvj9U0olS9gkHZ0aGAuH5TapmG5R9XtK+25lBv/XmltNMjs28K
+3QSXq1+vmGY5n+8TsJ2xHgdUtiohr1PNuUhOY7z87qJcnnXTBslMyRWX58fd578
fdHStbD5BTT2SpN439GNBHejYXdBgPOQs5zy14hmx7ew/Pb8qx9aHztPFI8EDz8q
Xe9onkGkvPFY98upJPn7U37Nk36/faQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:27 2025 by rpki-client