Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
File: 254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa (raw, json)
Hash identifier: zEygbsLLC31VeqCUP/lxQoafIXaiGFHDjRIZHsoSJJU=
Subject key identifier: B0:10:88:D2:CC:58:37:FA:4A:D0:41:BB:4B:BE:FF:1F:D6:51:E8:83
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858494CC944112D08CE855A2BBB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 6830
IP address blocks: 72.9.160.0/22 maxlen: 22
72.9.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:44:11:2d:08:ce:85:5a:2b:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=a457702e-a448-4407-b130-e3efac31d91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:67:27:2e:5e:ba:ef:89:73:1e:b3:c9:69:
9e:15:16:90:b7:12:ef:88:8b:43:a9:7e:cf:1d:99:
ac:cb:9e:45:ed:f5:c9:d0:63:ce:71:90:56:dc:b7:
16:72:62:03:a7:a2:65:68:e0:da:68:38:ab:d0:12:
0c:1b:99:5e:83:ab:ed:61:37:c2:72:31:b4:75:d1:
9e:78:b4:7f:09:b2:f4:4e:e5:0f:45:4d:3c:db:7c:
31:65:e9:66:f3:bb:ba:37:75:44:c8:56:61:72:71:
6b:07:78:51:87:1d:f9:72:12:e0:1f:f4:48:a4:4e:
df:24:c4:8d:0a:6a:74:89:4d:e7:98:91:37:29:54:
ac:3d:4d:00:18:68:25:b5:4c:a7:7f:32:ea:65:77:
82:62:1e:3c:1f:30:22:82:13:ad:d7:da:6e:43:6d:
f3:01:4b:3c:e4:57:f2:f4:8e:6f:ea:f7:32:28:4e:
c6:c4:a7:5c:95:46:95:4b:20:74:5a:85:35:d3:d8:
05:7c:7d:b3:78:fe:90:5c:72:39:91:70:0e:15:12:
48:15:4b:06:f8:1e:a8:c8:1e:a6:5c:7b:af:15:ad:
3e:cc:39:bc:8b:c7:fa:7d:b2:00:7d:3d:b2:3d:ea:
bb:de:4f:fb:f8:72:5d:ab:16:e6:c5:99:0e:f7:31:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:88:D2:CC:58:37:FA:4A:D0:41:BB:4B:BE:FF:1F:D6:51:E8:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9e:c7:5e:8b:aa:66:fe:c1:59:02:5b:13:92:37:ec:a1:48:
dc:4f:eb:79:2c:e4:5f:72:46:a5:32:c4:85:38:4a:64:50:18:
02:e2:52:9f:fb:99:dd:96:f8:57:c7:84:16:17:ac:d7:84:30:
b7:06:3f:6c:95:93:8c:7d:cb:2d:1c:e8:5f:ff:eb:2e:bd:04:
e5:85:72:ef:a1:93:31:7b:69:e1:fe:5f:03:bc:d8:f5:91:4a:
2e:78:57:4d:0b:a4:36:78:ee:54:97:d4:2d:d8:47:16:66:e3:
65:83:d9:56:7c:fb:56:24:b7:42:4f:fe:41:dd:ac:95:df:34:
f7:3f:a5:6b:b4:aa:d3:4b:03:57:b6:bb:ca:e8:02:35:d0:e1:
f7:ce:11:bd:d9:f6:f1:d7:78:7a:3a:10:1f:09:39:80:d1:6a:
d5:23:46:64:a3:94:39:d5:ed:a5:3e:50:9a:10:41:bb:66:5a:
af:91:9d:ad:f6:79:ae:92:ef:4c:13:50:26:b8:3e:a1:3d:6d:
b4:bc:bb:1f:42:b7:50:fa:dd:a6:84:f6:8a:63:ef:7d:44:93:
9b:d6:a8:db:72:64:75:e9:3c:f8:cf:82:6e:74:17:30:61:6c:
16:8a:31:37:c4:47:10:fc:77:cc:56:f5:0e:4d:8d:40:30:4a:
97:29:45:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUQRLQjOhVoru4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YTQ1NzcwMmUtYTQ0OC00NDA3LWIxMzAtZTNlZmFjMzFkOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyspnJy5euu+Jcx6zyWmeFRaQtxLviItDqX7P
HZmsy55F7fXJ0GPOcZBW3LcWcmIDp6JlaODaaDir0BIMG5leg6vtYTfCcjG0ddGe
eLR/CbL0TuUPRU0823wxZelm87u6N3VEyFZhcnFrB3hRhx35chLgH/RIpE7fJMSN
Cmp0iU3nmJE3KVSsPU0AGGgltUynfzLqZXeCYh48HzAighOt19puQ23zAUs85Ffy
9I5v6vcyKE7GxKdclUaVSyB0WoU109gFfH2zeP6QXHI5kXAOFRJIFUsG+B6oyB6m
XHuvFa0+zDm8i8f6fbIAfT2yPeq73k/7+HJdqxbmxZkO9zGb5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAQiNLMWDf6StBBu0u+/x/WUeiDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjU0Njg1ZTItYzQwYi0z
Nzc3LTlhMWQtNGZkODQxOWVjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaex16Lqmb+wVkCWxOSN+yhSNxP63ks5F9yRqUyxIU4SmRQGALiUp/7
md2W+FfHhBYXrNeEMLcGP2yVk4x9yy0c6F//6y69BOWFcu+hkzF7aeH+XwO82PWR
Si54V00LpDZ47lSX1C3YRxZm42WD2VZ8+1Ykt0JP/kHdrJXfNPc/pWu0qtNLA1e2
u8roAjXQ4ffOEb3Z9vHXeHo6EB8JOYDRatUjRmSjlDnV7aU+UJoQQbtmWq+Rna32
ea6S70wTUCa4PqE9bbS8ux9Ct1D63aaE9opj731Ek5vWqNtyZHXpPPjPgm50FzBh
bBaKMTfERxD8d8xW9Q5NjUAwSpcpRf4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:43 2025 by rpki-client