Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa
File: 44bee86b-9465-34ef-b3a7-23b8a573e38c.roa (raw, json)
Hash identifier: 9QJAOIRz1xD7lh+ruaGTkfu1PcSaCDXHprd5gJYvQ0Q=
Subject key identifier: 0D:EF:42:70:FE:6B:69:DD:9E:D7:30:55:F4:C8:CC:58:37:26:DC:2C
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F432858492D8410DCF2BC71B4770AC4C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa
Signing time: Thu 13 Mar 2025 20:11:18 +0000
ROA not before: Thu 13 Mar 2025 20:11:18 +0000
ROA not after: Wed 11 Jun 2025 20:11:18 +0000
asID: 2914
IP address blocks: 72.9.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:84:10:dc:f2:bc:71:b4:77:0a:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Mar 13 20:11:18 2025 GMT
Not After : Jun 11 20:11:18 2025 GMT
Subject: CN=f582932e-788f-4c4d-a2cb-5cec5d618e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:a7:8e:23:d2:6a:ca:a9:6d:db:10:d7:7b:
ba:52:43:19:24:84:9a:3d:57:35:3a:fb:26:f4:63:
44:6b:08:8a:be:78:9a:0f:cd:79:29:1d:c9:fe:95:
42:f7:0a:c7:28:43:47:66:a6:0c:2b:63:b9:36:d1:
19:70:f1:ff:2a:3c:5d:cf:55:50:a5:f8:d1:50:a8:
1b:23:43:19:67:7b:fa:f6:15:de:c8:09:1b:d3:9e:
05:db:de:eb:db:e3:83:90:70:1c:c9:b3:ef:89:a2:
4f:d6:11:1b:f6:b5:a8:f5:93:d6:43:d2:20:a9:86:
2e:df:ee:c4:23:22:ee:ba:b9:63:ff:f7:a3:4a:ca:
36:19:49:f7:52:60:e4:4d:bc:33:a4:e3:99:20:e7:
58:e4:34:e1:96:fc:dc:e4:bc:56:74:4f:f1:da:06:
c6:05:7f:8f:ed:c9:bb:19:80:59:f7:8c:d7:e6:66:
19:8e:2c:25:9d:cd:0e:10:f6:fd:45:bf:9f:ae:ff:
fc:5e:c7:d1:ea:59:77:61:63:54:0a:8c:32:c9:4a:
4f:41:14:42:38:c8:37:68:c5:48:08:6c:38:b2:42:
58:84:75:54:c0:d0:8c:18:28:f1:9b:cb:ab:40:9a:
4f:ac:13:9f:37:07:21:e4:ca:15:32:88:72:e3:93:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:42:70:FE:6B:69:DD:9E:D7:30:55:F4:C8:CC:58:37:26:DC:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:a6:51:28:29:4e:28:86:0c:ca:d7:3e:2b:ac:50:cf:60:c6:
71:ab:b8:4c:88:cb:e6:94:41:ed:7c:d2:dc:19:0c:f3:1e:3b:
3f:d5:97:d1:9c:ee:32:85:91:64:e4:ea:91:88:8e:95:be:be:
a8:99:26:9d:a8:33:40:34:30:19:3a:bb:12:c3:40:89:fd:27:
ec:91:90:f9:0b:d1:6d:16:38:6d:16:82:11:b8:d9:2d:17:2f:
ca:cf:6f:37:0a:ec:c3:e8:38:7d:36:cf:96:fa:ae:aa:58:d3:
15:1c:94:d5:01:45:47:cc:cd:63:cf:dd:0e:59:4b:1e:c0:a2:
4f:d3:f3:75:0d:e8:cd:00:86:0c:49:36:69:e8:67:92:34:c0:
f1:f2:bc:bf:cb:eb:9f:1c:ba:2e:d0:3a:e5:2d:da:b0:ce:2c:
2f:7b:2c:46:b3:96:20:b7:8f:8a:b9:ae:20:c6:7c:82:58:ed:
73:ce:5b:79:a8:39:fb:83:a3:e8:50:89:b3:24:ad:88:69:c7:
88:25:ba:f0:55:1b:fb:53:5d:94:3e:15:d5:4d:e8:25:32:94:
62:64:7a:93:52:9e:68:06:8d:95:5a:b5:02:59:cd:46:a2:28:
17:69:63:b0:c1:a1:c9:6b:7c:3a:83:0a:ed:1d:d3:8b:37:50:
61:99:ea:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkthBDc8rxxtHcKxMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI1MDMxMzIwMTExOFoXDTI1MDYxMTIwMTExOFowLzEtMCsGA1UEAxMk
ZjU4MjkzMmUtNzg4Zi00YzRkLWEyY2ItNWNlYzVkNjE4ZTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/SnjiPSasqpbdsQ13u6UkMZJISaPVc1Ovsm
9GNEawiKvniaD815KR3J/pVC9wrHKENHZqYMK2O5NtEZcPH/Kjxdz1VQpfjRUKgb
I0MZZ3v69hXeyAkb054F297r2+ODkHAcybPviaJP1hEb9rWo9ZPWQ9IgqYYu3+7E
IyLuurlj//ejSso2GUn3UmDkTbwzpOOZIOdY5DThlvzc5LxWdE/x2gbGBX+P7cm7
GYBZ94zX5mYZjiwlnc0OEPb9Rb+frv/8XsfR6ll3YWNUCowyyUpPQRRCOMg3aMVI
CGw4skJYhHVUwNCMGCjxm8urQJpPrBOfNwch5MoVMohy45OuKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3vQnD+a2ndntcwVfTIzFg3JtwsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNDRiZWU4NmItOTQ2NS0z
NGVmLWIzYTctMjNiOGE1NzNlMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqmUSgpTiiGDMrXPiusUM9gxnGruEyIy+aUQe180twZDPMeOz/Vl9Gc
7jKFkWTk6pGIjpW+vqiZJp2oM0A0MBk6uxLDQIn9J+yRkPkL0W0WOG0WghG42S0X
L8rPbzcK7MPoOH02z5b6rqpY0xUclNUBRUfMzWPP3Q5ZSx7Aok/T83UN6M0AhgxJ
NmnoZ5I0wPHyvL/L658cui7QOuUt2rDOLC97LEazliC3j4q5riDGfIJY7XPOW3mo
OfuDo+hQibMkrYhpx4gluvBVG/tTXZQ+FdVN6CUylGJkepNSnmgGjZVatQJZzUai
KBdpY7DBoclrfDqDCu0d04s3UGGZ6oo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:37 2025 by rpki-client