Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
File: 93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json)
Hash identifier: MuNdb8fWsWXO6EOwfm7g20SpGCxF28l1PHYCWZONqso=
Subject key identifier: DE:BB:30:56:CD:3D:D8:4F:E5:19:0F:25:31:88:92:66:3D:1F:98:10
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848CB164EF491ECF26104954440
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16433
IP address blocks: 72.22.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4e:f4:91:ec:f2:61:04:95:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=a64a0b27-13d3-4ebb-b7e6-4ecb4c90338d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:cd:29:0a:76:05:d4:2d:28:d3:12:bb:0b:
2b:4c:f6:3a:ba:91:98:52:eb:6f:1e:f6:78:b8:9a:
95:98:b1:ff:75:21:7d:5b:11:ca:1f:4c:a2:32:3e:
4d:58:c9:e6:73:8b:22:dc:a5:16:73:b5:52:65:95:
00:92:2f:70:6f:8e:84:64:f5:05:b0:3a:92:9b:02:
40:9d:e5:7e:6c:0d:7c:85:b8:2c:0b:89:f6:95:4f:
de:fc:01:97:a8:f5:a3:8e:9f:8d:27:21:3a:8d:70:
99:e5:f8:b2:a0:3c:4a:b2:3d:1d:3f:24:48:49:84:
dc:0d:cb:90:2a:b2:bb:7c:3d:c9:c1:79:96:5a:4d:
b6:20:1a:00:64:c4:97:08:49:77:9d:5c:9d:f9:9a:
84:05:c7:07:e7:26:47:8b:e9:e6:28:cd:13:5e:b4:
c4:92:c6:3b:51:04:e5:64:39:4a:ed:80:8c:72:ef:
7f:f8:f0:1a:28:09:25:e7:cd:e7:b4:93:dd:35:25:
cc:cd:43:0b:73:1c:04:d5:91:47:22:04:51:e6:07:
2a:64:7a:b3:29:8f:3f:13:cd:7e:0e:4b:ea:58:79:
32:95:99:e3:93:0a:e4:fb:63:48:3e:64:41:75:ab:
cc:45:31:70:e9:0c:cb:04:61:7f:3f:b9:c1:9e:e4:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:30:56:CD:3D:D8:4F:E5:19:0F:25:31:88:92:66:3D:1F:98:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:fb:33:ed:02:d8:99:8e:e3:fe:59:ad:5b:5b:40:9f:f0:02:
ba:be:ba:b3:e1:42:eb:35:de:b2:4b:9d:f4:20:cb:3d:87:e1:
7d:89:1a:5c:c9:5c:dd:e0:0f:ba:d0:3f:f3:71:a4:e2:36:09:
e3:38:25:d9:1c:0a:9c:a2:c4:ff:57:3d:f1:76:55:aa:11:62:
f7:36:ab:c2:77:0a:0f:cc:f7:ce:ca:aa:05:a0:68:02:ff:1f:
ea:ee:d8:bd:d0:f0:e3:b1:fa:ad:98:f2:45:4d:f3:24:55:7a:
4a:0e:2f:0b:cd:07:e4:10:2a:85:ab:3d:f9:86:5a:52:db:c0:
e3:fa:94:5c:0d:a5:e6:2d:1f:82:7b:9a:2d:4e:4d:94:b9:0f:
3a:75:c7:a0:49:8f:f9:a5:ee:1b:34:17:e8:06:41:97:82:d8:
62:49:3e:67:19:45:2d:e8:87:79:ae:e0:4c:00:a8:ab:32:ea:
13:80:5e:7d:df:60:7e:dc:d3:50:a0:84:d2:2d:7c:f8:fb:dd:
ac:3a:f1:23:fc:a2:bc:67:41:d9:15:7f:b0:03:65:ee:e4:fc:
59:d3:2a:18:f1:ca:71:9e:18:b6:90:11:06:0f:d7:9d:73:e9:
c8:45:fd:bf:7e:7a:95:86:c7:b5:c4:ef:ef:d9:4a:7b:df:77:
cf:d5:b4:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFk70kezyYQSVREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1
ZDUwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YTY0YTBiMjctMTNkMy00ZWJiLWI3ZTYtNGVjYjRjOTAzMzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w3NKQp2BdQtKNMSuwsrTPY6upGYUutvHvZ4
uJqVmLH/dSF9WxHKH0yiMj5NWMnmc4si3KUWc7VSZZUAki9wb46EZPUFsDqSmwJA
neV+bA18hbgsC4n2lU/e/AGXqPWjjp+NJyE6jXCZ5fiyoDxKsj0dPyRISYTcDcuQ
KrK7fD3JwXmWWk22IBoAZMSXCEl3nVyd+ZqEBccH5yZHi+nmKM0TXrTEksY7UQTl
ZDlK7YCMcu9/+PAaKAkl583ntJPdNSXMzUMLcxwE1ZFHIgRR5gcqZHqzKY8/E81+
DkvqWHkylZnjkwrk+2NIPmRBdavMRTFw6QzLBGF/P7nBnuQmwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN67MFbNPdhP5RkPJTGIkmY9H5gQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm
NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvOTM1NzljNWEtMWZiYi0z
OTNkLTk0MmYtYjRjMTRjMDEyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw
OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl
NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi
MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv7M+0C2JmO4/5ZrVtbQJ/wArq+urPhQus13rJLnfQgyz2H4X2JGlzJ
XN3gD7rQP/NxpOI2CeM4JdkcCpyixP9XPfF2VaoRYvc2q8J3Cg/M987KqgWgaAL/
H+ru2L3Q8OOx+q2Y8kVN8yRVekoOLwvNB+QQKoWrPfmGWlLbwOP6lFwNpeYtH4J7
mi1OTZS5Dzp1x6BJj/ml7hs0F+gGQZeC2GJJPmcZRS3oh3mu4EwAqKsy6hOAXn3f
YH7c01CghNItfPj73aw68SP8orxnQdkVf7ADZe7k/FnTKhjxynGeGLaQEQYP151z
6chF/b9+epWGx7XE7+/ZSnvfd8/VtIg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:52 2025 by rpki-client