Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
File: 5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa (raw, json)
Hash identifier: uzDilxXHcL2oN5bLgwu4VnyjHQ9ZQJ3+HoFs5J+TnoA=
Subject key identifier: 21:45:DA:E6:24:15:24:36:A3:F9:21:0B:9E:11:62:CA:50:4A:45:FB
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F43285848E9CBE2DD5F422CE21C2B8E80
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 54032
IP address blocks: 72.233.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e2:dd:5f:42:2c:e2:1c:2b:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=65db7fd3-af7a-4fc2-bc68-19dd4f43d2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:cc:ba:58:63:3b:f9:c1:18:93:82:3b:a0:
e7:80:2b:08:59:7e:ac:1e:dc:49:cb:0e:db:7d:63:
25:39:bf:c3:e4:7a:9c:5b:1e:ef:fe:c4:5b:0e:6e:
4f:00:1e:81:90:ba:a9:29:59:2f:0a:d6:3c:78:a6:
c0:a2:28:7d:01:cd:53:3c:13:d9:ba:19:57:2e:05:
f7:e3:51:ee:95:7c:a8:21:b8:56:1d:a8:4e:0b:3b:
7e:20:24:30:e8:1a:bc:88:28:3e:13:29:f5:53:0d:
72:e0:1c:fe:57:a1:cb:f3:2d:ff:15:c2:85:61:02:
28:31:91:52:94:97:13:38:84:3a:e9:9b:b6:36:1c:
49:6c:32:cc:e7:c1:e4:a4:42:79:07:96:38:2d:39:
5a:a6:36:49:13:0b:6d:9e:32:71:99:36:7c:b8:40:
8b:d4:ca:09:d9:77:1b:fb:48:ad:d3:05:2a:db:cc:
a9:51:85:ea:95:ac:11:cf:50:e4:72:19:10:69:f1:
4f:2b:11:a2:12:ca:fb:8e:ca:6a:13:61:8b:85:7c:
d8:3e:54:eb:ee:52:e4:9c:1c:22:41:f0:54:ce:7a:
c4:51:13:ff:7d:49:3c:c6:21:08:72:4f:83:a7:ce:
f4:e1:2a:0c:68:6e:6c:ce:d3:5c:33:8e:2d:32:11:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:DA:E6:24:15:24:36:A3:F9:21:0B:9E:11:62:CA:50:4A:45:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.233.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:da:17:e4:dc:58:df:94:e9:98:96:49:dc:26:5b:87:11:8b:
a5:90:e4:b9:19:21:b5:78:5c:26:a1:bd:6a:05:e3:a3:97:79:
15:b3:9c:d4:55:a9:ef:e4:1e:01:2a:17:82:ff:1a:f3:5d:31:
63:65:3a:4d:18:d1:e1:6e:f0:23:82:ec:4b:c3:14:41:67:7b:
e0:73:fc:29:c0:7c:65:1d:02:11:c3:61:fe:ee:d0:ba:bb:ab:
02:3a:07:0c:7d:5e:6e:ee:c3:fe:2d:b8:30:eb:e7:17:96:c2:
6e:89:71:43:97:80:21:b3:ce:b9:93:ff:12:36:13:5b:39:17:
14:f8:db:94:06:57:1a:f1:7c:61:0f:75:44:c0:0c:51:46:36:
95:7a:e6:05:9e:f2:49:26:51:8c:0a:e2:46:2c:4c:f9:de:aa:
02:63:e1:00:89:1e:4d:91:6b:e4:a7:97:da:e5:ae:32:09:1d:
fa:5f:4f:5a:86:01:f4:3a:9b:91:92:07:ee:95:5a:94:d6:77:
9d:82:a1:48:09:0b:9f:96:43:6f:a6:fb:d8:f5:5e:6a:bf:68:
ed:a8:b9:d9:a7:c9:d8:79:e1:05:f5:12:97:2a:1f:18:db:0f:
de:f5:69:5d:8d:b7:f0:be:c1:a2:12:0f:52:06:49:5e:9f:93:
9c:c3:76:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+LdX0Is4hwrjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz
NzNmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
NjVkYjdmZDMtYWY3YS00ZmMyLWJjNjgtMTlkZDRmNDNkMmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/XMulhjO/nBGJOCO6DngCsIWX6sHtxJyw7b
fWMlOb/D5HqcWx7v/sRbDm5PAB6BkLqpKVkvCtY8eKbAoih9Ac1TPBPZuhlXLgX3
41HulXyoIbhWHahOCzt+ICQw6Bq8iCg+Eyn1Uw1y4Bz+V6HL8y3/FcKFYQIoMZFS
lJcTOIQ66Zu2NhxJbDLM58HkpEJ5B5Y4LTlapjZJEwttnjJxmTZ8uECL1MoJ2Xcb
+0it0wUq28ypUYXqlawRz1DkchkQafFPKxGiEsr7jspqE2GLhXzYPlTr7lLknBwi
QfBUznrEURP/fUk8xiEIck+Dp8704SoMaG5sztNcM44tMhFDnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFF2uYkFSQ2o/khC54RYspQSkX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi
YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWNkNmU4YmEtMjlkMi0z
ZDg4LThjOTktMzMxZTA4M2MzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5
ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj
MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy
OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvaF+TcWN+U6ZiWSdwmW4cRi6WQ5LkZIbV4XCahvWoF46OXeRWznNRV
qe/kHgEqF4L/GvNdMWNlOk0Y0eFu8COC7EvDFEFne+Bz/CnAfGUdAhHDYf7u0Lq7
qwI6Bwx9Xm7uw/4tuDDr5xeWwm6JcUOXgCGzzrmT/xI2E1s5FxT425QGVxrxfGEP
dUTADFFGNpV65gWe8kkmUYwK4kYsTPneqgJj4QCJHk2Ra+Snl9rlrjIJHfpfT1qG
AfQ6m5GSB+6VWpTWd52CoUgJC5+WQ2+m+9j1Xmq/aO2oudmnydh54QX1EpcqHxjb
D971aV2Nt/C+waISD1IGSV6fk5zDdoo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:01 2025 by rpki-client