Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f14a2a7c-5517-3aa8-81b9-100b95fa0485.roa
File: f14a2a7c-5517-3aa8-81b9-100b95fa0485.roa (raw, json)
Hash identifier: GLzRiEjMtPiiSnoV+zFF7StNWv0lY1AUjT/sctwxkl4=
Subject key identifier: 2F:4C:A2:FC:77:51:E1:23:11:11:98:65:C6:64:FE:96:6B:58:09:0D
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F432858481E47EF7074AD5F9CB49B8D00
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f14a2a7c-5517-3aa8-81b9-100b95fa0485.roa
Signing time: Fri 06 Dec 2024 16:26:05 +0000
ROA not before: Fri 06 Dec 2024 16:26:05 +0000
ROA not after: Thu 06 Mar 2025 16:26:05 +0000
asID: 209
IP address blocks: 72.1.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1e:47:ef:70:74:ad:5f:9c:b4:9b:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Dec 6 16:26:05 2024 GMT
Not After : Mar 6 16:26:05 2025 GMT
Subject: CN=ff6296c0-fb62-49cf-81d7-b01be6f45888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:57:c6:a4:aa:e3:d7:ce:8a:a4:27:b3:b5:
92:67:cc:c1:6e:c0:0f:2b:a0:e1:73:8d:04:8b:e5:
97:a3:d7:15:6a:96:65:aa:0d:13:ca:47:ea:6a:69:
b6:04:04:de:19:ca:5b:15:97:ec:80:42:64:37:9c:
29:1a:12:6f:32:1a:11:22:b7:5a:76:71:62:b8:a0:
82:f3:d9:13:c2:be:65:53:45:bd:2c:dc:97:6a:30:
f4:2d:c7:f7:e3:8a:e4:2a:5a:3f:7c:7b:fb:d4:08:
2d:e1:4e:ab:6e:aa:8a:23:2c:4e:4c:0e:cf:93:00:
9c:ce:7a:0d:74:6c:a5:fc:31:96:f5:a4:bb:07:32:
05:0f:32:6b:a7:15:c0:8d:e1:71:22:38:f5:4b:87:
db:bb:07:50:fb:7e:d8:31:08:88:1d:22:08:a9:b4:
0c:a4:2b:cf:a2:f2:44:72:2c:8f:6a:e6:33:1a:1d:
08:a9:e6:83:60:ff:55:26:4d:da:96:f3:bd:20:4d:
d7:d6:ba:c7:84:8d:47:98:72:f4:19:69:69:16:e2:
fe:f0:13:08:5d:74:03:51:3e:33:23:d7:e1:8d:88:
e1:7b:ab:53:57:9e:70:2f:7c:6d:28:3f:33:cc:5f:
35:fe:2d:58:14:06:5b:c0:0c:a2:f6:9f:5f:bd:1b:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:A2:FC:77:51:E1:23:11:11:98:65:C6:64:FE:96:6B:58:09:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f14a2a7c-5517-3aa8-81b9-100b95fa0485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:08:18:83:04:c8:78:1e:3c:7e:f0:4b:34:a4:6f:39:d4:e6:
96:73:fa:8c:fe:5c:78:55:a4:ad:27:86:01:0c:da:4b:86:5c:
e5:52:4d:31:e4:ae:ae:10:54:b3:8a:19:2b:67:1a:86:65:59:
a2:9c:57:49:87:be:58:61:0a:fc:4e:1c:2b:27:d8:52:21:46:
57:3c:57:5d:1f:0c:b6:7f:68:63:a4:fb:60:72:4e:e7:7e:5c:
ba:51:dd:d6:a3:00:e3:73:34:09:07:c1:6f:d9:af:05:c3:6e:
a4:5c:72:6f:39:61:cd:ae:cb:5a:36:fa:2f:6d:6a:b9:d8:0e:
94:16:82:89:02:da:6e:3a:06:0f:8c:4c:86:5e:f9:69:0c:64:
7b:7a:6b:87:af:ff:e5:ac:e0:17:2d:2c:c7:da:a7:ea:6e:4e:
62:47:f6:16:b9:22:b4:8a:3b:ca:b0:94:4d:6f:2c:b7:47:c3:
a7:98:e3:db:7b:5d:2a:42:da:2a:07:ae:41:fd:bd:36:64:e5:
b5:c9:65:ec:bf:fa:62:e3:dc:50:87:26:08:11:9d:7e:49:f4:
97:4e:46:a9:00:31:59:52:32:62:ab:7e:24:5b:c1:56:de:35:
c9:0b:39:d2:7a:c9:3a:0d:e4:61:78:b5:9b:f1:bd:4c:65:56:
49:fa:b0:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgeR+9wdK1fnLSbjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1
Zjk1MB4XDTI0MTIwNjE2MjYwNVoXDTI1MDMwNjE2MjYwNVowLzEtMCsGA1UEAxMk
ZmY2Mjk2YzAtZmI2Mi00OWNmLTgxZDctYjAxYmU2ZjQ1ODg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpXxqSq49fOiqQns7WSZ8zBbsAPK6Dhc40E
i+WXo9cVapZlqg0Tykfqamm2BATeGcpbFZfsgEJkN5wpGhJvMhoRIrdadnFiuKCC
89kTwr5lU0W9LNyXajD0Lcf344rkKlo/fHv71Agt4U6rbqqKIyxOTA7PkwCcznoN
dGyl/DGW9aS7BzIFDzJrpxXAjeFxIjj1S4fbuwdQ+37YMQiIHSIIqbQMpCvPovJE
ciyPauYzGh0IqeaDYP9VJk3alvO9IE3X1rrHhI1HmHL0GWlpFuL+8BMIXXQDUT4z
I9fhjYjhe6tTV55wL3xtKD8zzF81/i1YFAZbwAyi9p9fvRuf9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9Movx3UeEjERGYZcZk/pZrWAkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll
NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvZjE0YTJhN2MtNTUxNy0z
YWE4LTgxYjktMTAwYjk1ZmEwNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw
MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy
NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk
YzRiMjVmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSAGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4IGIMEyHgePH7wSzSkbznU5pZz+oz+XHhVpK0nhgEM2kuGXOVSTTHk
rq4QVLOKGStnGoZlWaKcV0mHvlhhCvxOHCsn2FIhRlc8V10fDLZ/aGOk+2ByTud+
XLpR3dajAONzNAkHwW/ZrwXDbqRccm85Yc2uy1o2+i9tarnYDpQWgokC2m46Bg+M
TIZe+WkMZHt6a4ev/+Ws4BctLMfap+puTmJH9ha5IrSKO8qwlE1vLLdHw6eY49t7
XSpC2ioHrkH9vTZk5bXJZey/+mLj3FCHJggRnX5J9JdORqkAMVlSMmKrfiRbwVbe
NckLOdJ6yToN5GF4tZvxvUxlVkn6sK4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:54 2025 by rpki-client