Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
File: 3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json)
Hash identifier: 9UKVdBgQmm9MdYArYjVTJBtDsQYKLyhefGqQ7qBtfJg=
Subject key identifier: 34:C1:CE:6B:B0:6B:6C:F0:76:D0:4A:EB:50:8F:F0:AE:7E:4E:AB:8F
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006901A2D280A0DEF842C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 72.31.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:90:1a:2d:28:0a:0d:ef:84:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=f0ea14d8-ea3e-41f9-9079-d4f36a7fb236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:2f:86:0c:07:2d:2c:ae:a8:e2:ec:97:0d:
41:db:63:f3:6a:ef:03:e5:24:94:b5:5f:44:6d:90:
2b:64:a5:c0:cb:a0:f7:e6:65:50:c9:0d:40:8c:5f:
34:b1:3a:9d:5b:83:36:de:35:b2:54:71:1b:6a:a9:
9b:76:01:8f:8e:0b:82:09:ee:bc:03:7c:a1:b8:8b:
53:ff:e2:06:c3:b3:a6:92:e3:47:4f:cb:68:c9:c3:
a3:7a:3b:a4:65:89:e1:3b:af:a3:29:38:3f:f3:af:
23:28:80:6a:33:43:35:43:e6:ef:b3:8a:fa:01:e7:
4f:74:59:b4:5c:b9:9f:a1:a5:2a:78:9a:64:e6:94:
4e:ab:65:5e:0c:41:17:cd:55:79:68:a2:4d:b8:2a:
7b:b3:27:7b:71:d0:f1:61:3b:e1:07:84:d1:a4:bd:
a6:e7:fe:d8:2c:84:b6:cd:69:90:84:33:00:e8:d4:
99:a8:06:c7:6d:61:e4:fe:d2:37:bc:b1:f4:55:43:
b2:76:da:1f:99:bf:65:dc:ba:87:24:92:ea:b8:39:
d9:c9:89:72:21:9a:97:50:b1:ee:25:82:ae:bd:47:
57:e8:15:d1:c7:09:b7:e9:17:14:fe:0b:0f:d5:9e:
c5:16:2b:7a:a5:d2:80:c6:3a:8f:b1:d7:e4:4c:22:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:CE:6B:B0:6B:6C:F0:76:D0:4A:EB:50:8F:F0:AE:7E:4E:AB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e4:98:16:49:48:09:1f:85:e0:72:bc:4b:5a:15:c7:15:bd:
67:76:f5:5b:71:8d:0d:af:de:a7:6e:2b:f5:bf:1b:30:8a:01:
17:00:ea:29:ea:cd:06:e8:3e:17:d2:88:38:1d:3c:a3:cb:fe:
13:a5:c2:da:0f:5d:8a:18:62:c5:85:4b:8f:4b:ee:58:5b:75:
a8:0f:cf:9f:e9:d0:db:e2:ed:0b:ca:90:fe:41:bf:08:1d:c1:
51:29:14:b2:e9:77:56:44:46:45:d4:67:a7:9b:1e:67:4b:1d:
b8:d7:be:4e:d3:d7:0a:73:db:bc:bd:4e:7a:dd:7b:28:ff:6d:
c8:3f:1e:4e:6d:76:f1:74:11:52:a9:fb:e0:27:75:7d:35:14:
eb:77:71:e3:59:18:cd:c9:5f:68:c6:b6:72:21:38:5e:1c:da:
98:cd:5b:1c:a2:8b:05:01:83:42:36:69:a5:6d:9a:8f:da:fd:
33:fa:d7:a3:46:1f:7e:6f:83:34:d8:59:86:c4:d2:65:86:0c:
d7:6d:8a:aa:b1:42:14:49:bf:b9:52:ed:4b:00:96:b9:c5:f7:
7f:ac:03:44:30:45:76:04:53:3e:ca:f4:51:22:03:a2:12:ce:
96:62:96:4f:41:c3:a0:87:43:53:21:a7:0e:26:26:20:2b:88:
9a:20:14:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBpAaLSgKDe+ELAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjBlYTE0ZDgtZWEzZS00MWY5LTkwNzktZDRmMzZhN2ZiMjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2kvhgwHLSyuqOLslw1B22Pzau8D5SSUtV9E
bZArZKXAy6D35mVQyQ1AjF80sTqdW4M23jWyVHEbaqmbdgGPjguCCe68A3yhuItT
/+IGw7OmkuNHT8toycOjejukZYnhO6+jKTg/868jKIBqM0M1Q+bvs4r6AedPdFm0
XLmfoaUqeJpk5pROq2VeDEEXzVV5aKJNuCp7syd7cdDxYTvhB4TRpL2m5/7YLIS2
zWmQhDMA6NSZqAbHbWHk/tI3vLH0VUOydtofmb9l3LqHJJLquDnZyYlyIZqXULHu
JYKuvUdX6BXRxwm36RcU/gsP1Z7FFit6pdKAxjqPsdfkTCL8ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTBzmuwa2zwdtBK61CP8K5+TquPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z
ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzkmBZJSAkfheByvEtaFccVvWd29VtxjQ2v3qduK/W/GzCKARcA6inq
zQboPhfSiDgdPKPL/hOlwtoPXYoYYsWFS49L7lhbdagPz5/p0Nvi7QvKkP5Bvwgd
wVEpFLLpd1ZERkXUZ6ebHmdLHbjXvk7T1wpz27y9Tnrdeyj/bcg/Hk5tdvF0EVKp
++AndX01FOt3ceNZGM3JX2jGtnIhOF4c2pjNWxyiiwUBg0I2aaVtmo/a/TP616NG
H35vgzTYWYbE0mWGDNdtiqqxQhRJv7lS7UsAlrnF93+sA0QwRXYEUz7K9FEiA6IS
zpZilk9Bw6CHQ1Mhpw4mJiAriJogFBY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:15 2025 by rpki-client