Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa
File: 1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa (raw, json)
Hash identifier: /BXlU/e9ZZ5DW/y34GlPMUe+4tpx8gvFokw3djQTQis=
Subject key identifier: B1:BD:8D:E6:8A:46:F8:26:97:1A:44:61:ED:3C:D7:73:1E:01:04:0B
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F43285848E9CBE81B10CC11F20CEBE340
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 54032
IP address blocks: 72.233.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e8:1b:10:cc:11:f2:0c:eb:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=8718dc41-c681-454f-95c2-1b14245380d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:d3:f9:40:5c:a9:af:66:74:03:02:3e:c2:
f0:df:e7:b1:60:05:0d:03:26:27:99:2a:26:2a:69:
8c:fa:c0:41:78:43:95:a5:c5:1b:bf:1e:d4:d8:71:
25:6a:d7:53:ec:be:7a:a9:a9:78:23:d6:71:ab:ef:
1c:7e:11:35:a9:47:77:f6:6a:ae:97:3c:04:eb:7b:
79:92:f4:75:cb:78:9c:10:8f:bb:3d:23:a5:62:b4:
e2:a9:53:76:9f:7f:c2:68:76:8a:cd:d2:58:54:22:
53:00:c5:5f:ff:88:2a:26:87:53:7e:46:07:fb:ce:
26:49:56:15:43:1b:8c:cf:0d:64:47:93:14:15:dd:
87:d0:d5:cd:b8:65:ea:c4:09:92:32:e1:99:04:c2:
06:3b:17:a4:40:47:e3:36:36:e9:60:c6:d7:01:71:
ba:80:c2:b8:ae:51:69:86:ea:05:99:0c:21:85:a0:
87:2b:90:79:15:4e:ff:50:33:41:5d:26:40:2e:61:
88:e3:0f:6c:29:c6:5a:11:3d:34:d7:90:9b:98:4b:
f9:86:28:49:20:8a:bb:c3:6f:12:55:9d:25:f6:eb:
cd:59:13:4e:bc:8e:92:e9:42:c6:90:12:93:27:b2:
4a:a8:ac:b8:f9:72:96:86:0f:23:ff:36:2b:5f:3c:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:8D:E6:8A:46:F8:26:97:1A:44:61:ED:3C:D7:73:1E:01:04:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.233.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b7:e9:b0:4f:db:33:fa:9a:b3:ed:f9:24:13:80:e4:4c:4c:
c6:d2:1c:a1:f6:96:8d:e0:63:7c:18:33:32:25:32:c5:91:67:
40:1e:61:1f:c6:03:ef:60:e1:60:22:ca:77:c8:06:b8:18:0d:
72:1d:56:b5:7e:c3:bc:2f:03:68:e0:68:96:ad:60:bd:d2:97:
7e:45:1a:52:3f:80:f3:b3:d3:66:a9:2d:f4:90:ab:b6:f0:6b:
32:e4:ba:5a:d5:65:ac:39:e0:3f:f6:fd:70:e9:e4:51:3b:a8:
22:f7:a0:f4:b0:b3:43:2b:43:f0:9a:b0:ae:ef:44:cf:9d:e9:
be:d5:02:00:d9:44:d7:60:6b:15:83:85:ea:c9:4d:ca:ad:a4:
e4:27:43:c3:1f:a0:2e:f7:59:ee:11:a5:f6:ed:07:f8:a1:ba:
d9:78:02:c4:a2:03:90:6f:a4:a7:a5:57:4e:92:bf:89:29:22:
5d:26:0b:db:9f:c8:3c:43:27:1b:07:9a:29:8e:e9:fe:24:c2:
0c:18:bd:68:ad:98:ca:c6:01:a7:99:ce:6b:5c:b1:b3:c1:79:
23:1b:ee:33:2a:f8:85:24:9e:4a:29:fb:8f:4c:96:da:68:9b:
5b:41:7b:50:a5:1f:38:7c:f8:08:a1:7e:52:78:1d:f0:87:1f:
7b:e2:06:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+gbEMwR8gzr40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz
NzNmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
ODcxOGRjNDEtYzY4MS00NTRmLTk1YzItMWIxNDI0NTM4MGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxPT+UBcqa9mdAMCPsLw3+exYAUNAyYnmSom
KmmM+sBBeEOVpcUbvx7U2HElatdT7L56qal4I9Zxq+8cfhE1qUd39mqulzwE63t5
kvR1y3icEI+7PSOlYrTiqVN2n3/CaHaKzdJYVCJTAMVf/4gqJodTfkYH+84mSVYV
QxuMzw1kR5MUFd2H0NXNuGXqxAmSMuGZBMIGOxekQEfjNjbpYMbXAXG6gMK4rlFp
huoFmQwhhaCHK5B5FU7/UDNBXSZALmGI4w9sKcZaET0015CbmEv5hihJIIq7w28S
VZ0l9uvNWRNOvI6S6ULGkBKTJ7JKqKy4+XKWhg8j/zYrXzx8HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLG9jeaKRvgmlxpEYe0813MeAQQLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi
YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMWE1MjI5YjQtMDZiOS0z
MWM2LThjNDEtOWNjYzhkMDc2MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5
ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj
MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy
OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFW36bBP2zP6mrPt+SQTgORMTMbSHKH2lo3gY3wYMzIlMsWRZ0AeYR/G
A+9g4WAiynfIBrgYDXIdVrV+w7wvA2jgaJatYL3Sl35FGlI/gPOz02apLfSQq7bw
azLkulrVZaw54D/2/XDp5FE7qCL3oPSws0MrQ/CasK7vRM+d6b7VAgDZRNdgaxWD
herJTcqtpOQnQ8MfoC73We4RpfbtB/ihutl4AsSiA5BvpKelV06Sv4kpIl0mC9uf
yDxDJxsHmimO6f4kwgwYvWitmMrGAaeZzmtcsbPBeSMb7jMq+IUknkop+49Mltpo
m1tBe1ClHzh8+AihflJ4HfCHH3viBjc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:06 2025 by rpki-client