Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa
File: 101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa (raw, json)
Hash identifier: 3lz4Q/FfCWsxXsHZEl7sHE8evk/vublFRsMokUJOoHk=
Subject key identifier: 40:27:39:00:5B:9E:C4:E8:8C:B3:CD:80:2F:8E:EE:87:F1:44:FC:1E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2D3AEF86FF77394B7700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.88.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2d:3a:ef:86:ff:77:39:4b:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=da494881-d0a3-4b39-9a94-b25adfa71f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:6a:fb:d6:66:56:44:37:d4:f6:9d:ed:05:
6e:70:ca:ca:81:57:c1:6f:db:a7:3d:64:86:fb:f9:
5e:f3:64:61:bc:bb:aa:78:e3:dd:ed:0b:26:8d:aa:
ba:2a:3a:a9:f2:51:1d:e0:b3:26:f8:b4:0b:b8:15:
5f:f0:20:7b:e6:fc:f1:60:5f:b3:9a:66:92:e9:5b:
11:2a:e7:8e:d4:3d:d7:ec:29:38:ef:66:ba:d1:4f:
c1:f9:3d:6d:39:02:99:f2:95:4e:7d:d2:b5:75:08:
8d:92:0d:07:32:94:82:62:a8:82:5f:ef:2b:fa:a4:
22:ad:5f:e5:2d:7d:17:15:31:55:12:ec:95:68:2e:
1a:74:ae:55:d6:31:3e:07:59:a1:de:17:03:a6:21:
ac:43:cc:3b:1d:ff:88:ed:98:bd:63:d8:9d:3c:45:
0b:a8:25:f4:85:55:89:77:8e:f1:23:89:77:65:9a:
bb:ef:eb:61:b1:56:ab:a3:f0:7d:30:24:ea:6f:e8:
9b:fe:e2:06:29:1f:d3:1e:78:91:dc:ad:37:57:53:
70:0a:4e:0d:ed:09:72:57:5e:8c:aa:b6:36:e9:19:
13:40:54:3b:53:65:cc:8a:ff:cd:2f:e7:23:25:a9:
e0:6a:aa:e8:15:79:4e:c6:a0:8d:57:ca:30:67:44:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:39:00:5B:9E:C4:E8:8C:B3:CD:80:2F:8E:EE:87:F1:44:FC:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.88.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:78:12:ec:f4:f4:05:c9:28:29:4d:8f:c1:41:e4:00:bc:ce:
68:0d:da:5b:2f:18:82:f1:12:82:c9:48:c0:d8:4f:6f:2a:ea:
fd:b8:63:1e:bf:8b:58:d7:4d:f9:9d:72:d6:67:10:65:dd:b5:
59:98:fe:a8:3c:c3:09:e1:ac:e2:1a:fd:a9:7f:e0:57:d0:b1:
8a:28:4c:e5:5d:fb:d3:01:69:ae:d3:ad:fd:e2:de:01:68:58:
64:00:be:b6:fc:15:0d:39:58:ab:e0:18:3b:88:da:c2:fd:ff:
5b:fd:6d:33:0d:b3:5b:ea:02:1b:75:a7:16:0a:f6:22:d0:30:
c7:93:4e:27:08:3f:91:2c:14:3e:f3:db:ec:81:67:70:50:09:
31:79:df:4d:7c:0d:07:ca:5f:c4:59:2a:5c:0d:3e:65:6a:af:
a7:06:b3:e7:d0:39:95:46:b6:c4:c3:d5:de:b8:5c:8d:30:0c:
9c:03:dc:59:70:4d:33:e4:59:cb:54:cd:2d:92:1f:74:8d:66:
35:bd:f1:11:78:cb:9e:58:98:2a:77:ed:ad:37:8a:24:55:5c:
23:0b:3f:a9:18:3d:b2:70:6c:35:15:1d:25:61:d0:67:97:11:
0a:46:11:8b:e7:40:40:4a:a7:c6:92:a6:85:96:3a:13:67:a2:
ba:18:a8:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTC0674b/dzlLdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZGE0OTQ4ODEtZDBhMy00YjM5LTlhOTQtYjI1YWRmYTcxZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF9q+9ZmVkQ31Pad7QVucMrKgVfBb9unPWSG
+/le82RhvLuqeOPd7Qsmjaq6Kjqp8lEd4LMm+LQLuBVf8CB75vzxYF+zmmaS6VsR
KueO1D3X7Ck472a60U/B+T1tOQKZ8pVOfdK1dQiNkg0HMpSCYqiCX+8r+qQirV/l
LX0XFTFVEuyVaC4adK5V1jE+B1mh3hcDpiGsQ8w7Hf+I7Zi9Y9idPEULqCX0hVWJ
d47xI4l3ZZq77+thsVaro/B9MCTqb+ib/uIGKR/THniR3K03V1NwCk4N7QlyV16M
qrY26RkTQFQ7U2XMiv/NL+cjJangaqroFXlOxqCNV8owZ0R4XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAnOQBbnsTojLPNgC+O7ofxRPweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTAxZjRhOGUtZTgzZC0z
YWVmLWI4ZWEtZGY4MjNjODYyNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZ4Euz09AXJKClNj8FB5AC8zmgN2lsvGILxEoLJSMDYT28q6v24Yx6/
i1jXTfmdctZnEGXdtVmY/qg8wwnhrOIa/al/4FfQsYooTOVd+9MBaa7Trf3i3gFo
WGQAvrb8FQ05WKvgGDuI2sL9/1v9bTMNs1vqAht1pxYK9iLQMMeTTicIP5EsFD7z
2+yBZ3BQCTF53018DQfKX8RZKlwNPmVqr6cGs+fQOZVGtsTD1d64XI0wDJwD3Flw
TTPkWctUzS2SH3SNZjW98RF4y55YmCp37a03iiRVXCMLP6kYPbJwbDUVHSVh0GeX
EQpGEYvnQEBKp8aSpoWWOhNnoroYqL0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:50:13 2025 by rpki-client