Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cae785d-ee8b-3e2e-9abd-6eca372ac0a4.roa
File: 1cae785d-ee8b-3e2e-9abd-6eca372ac0a4.roa (raw, json)
Hash identifier: 4HM5QI/EsL2YdVZl6zz9Ysy6URFjL1NuFL7L+3ggXEQ=
Subject key identifier: 9F:B8:E9:D3:32:C2:EF:19:20:6B:A7:DF:35:C9:3C:77:C5:BB:5D:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC089EC9C81C5A77B67D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cae785d-ee8b-3e2e-9abd-6eca372ac0a4.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.106.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:08:9e:c9:c8:1c:5a:77:b6:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=af16342b-d698-4526-ad31-1ade2dcc0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:ed:bd:22:16:1e:64:9f:ff:4f:58:90:d5:
a5:dd:8f:dd:d9:94:35:6e:1b:78:0a:8a:3a:8e:a7:
67:eb:e2:6b:0f:6c:9e:c1:76:bc:bf:06:b3:a5:6e:
ef:58:52:59:7b:a9:29:34:91:bc:98:c9:a4:24:13:
9a:e9:63:58:75:6a:d6:98:2d:5d:25:6c:1f:e4:12:
73:17:ae:e6:97:7d:c9:b7:71:c7:c1:be:b9:49:0c:
a5:c3:1e:f1:ec:a2:77:0c:1b:93:1d:07:3e:3f:c9:
c7:8b:af:00:22:a5:7c:dd:cf:21:9d:75:76:d2:df:
dd:ea:42:87:7d:87:5e:fe:c0:1e:63:01:25:07:ad:
71:94:ca:aa:e7:63:b5:27:ac:62:75:3f:b6:4b:89:
cf:62:e4:74:5c:20:c4:36:4b:1f:4f:d9:e4:27:8e:
21:73:2c:bf:0e:22:b3:cd:53:26:80:05:c9:bd:16:
0f:5a:5e:f1:db:56:c6:82:80:87:7b:65:75:76:c2:
37:b3:c6:a7:dd:20:1d:3c:c8:2e:d6:c4:da:27:6e:
b5:8f:4a:db:ff:53:25:4f:c3:9d:cf:7a:97:ab:c9:
87:d2:38:e8:b5:ab:76:ab:c0:d4:4a:a1:b3:b6:5a:
e0:1a:1a:44:4f:5b:0a:16:97:f5:d3:2f:65:c1:8f:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:E9:D3:32:C2:EF:19:20:6B:A7:DF:35:C9:3C:77:C5:BB:5D:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cae785d-ee8b-3e2e-9abd-6eca372ac0a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.106.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b5:d3:fb:f6:55:42:6c:b7:f0:1a:df:9b:0d:19:d7:2c:42:
5a:06:0d:14:d3:fc:22:ca:9c:c5:49:c1:d5:84:b4:bd:87:6e:
96:ef:c0:a0:c6:79:46:b9:68:8a:b3:a1:4a:02:18:75:2b:97:
db:de:98:25:3e:54:18:19:92:56:b2:db:2a:82:76:00:a8:29:
70:8b:7a:24:50:d6:a6:ad:a1:f4:68:85:ec:5c:ea:f1:b3:62:
ff:47:9f:5d:f4:08:d0:8f:9e:90:44:fc:dd:c3:38:cb:5b:0b:
3c:b5:5c:1c:6d:c6:e7:61:e4:b1:c0:d9:83:4d:4a:04:e1:25:
f7:f6:8e:fd:b1:30:4e:6f:e5:84:45:bf:60:e8:e4:31:91:6e:
17:36:41:1c:29:6e:cc:66:fa:ba:c4:30:f5:1b:3b:2a:97:c8:
b0:a6:9d:3c:c5:3e:ec:4c:e9:17:22:19:d2:0e:d2:e4:f5:a2:
74:05:6e:e8:e2:93:b8:6e:da:14:43:56:33:42:8a:d3:d6:ce:
f2:b0:c2:92:0b:1e:21:b2:aa:92:ca:3e:fb:c8:e5:5d:10:73:
5a:17:75:4a:c6:7e:c0:f0:c0:62:c9:07:15:52:09:11:29:93:
83:87:a5:7b:1d:e9:34:a7:b1:a9:2e:c8:68:80:07:4d:da:ae:
83:3d:16:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AieycgcWne2fQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YWYxNjM0MmItZDY5OC00NTI2LWFkMzEtMWFkZTJkY2MwYzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh/tvSIWHmSf/09YkNWl3Y/d2ZQ1bht4Coo6
jqdn6+JrD2yewXa8vwazpW7vWFJZe6kpNJG8mMmkJBOa6WNYdWrWmC1dJWwf5BJz
F67ml33Jt3HHwb65SQylwx7x7KJ3DBuTHQc+P8nHi68AIqV83c8hnXV20t/d6kKH
fYde/sAeYwElB61xlMqq52O1J6xidT+2S4nPYuR0XCDENksfT9nkJ44hcyy/DiKz
zVMmgAXJvRYPWl7x21bGgoCHe2V1dsI3s8an3SAdPMgu1sTaJ261j0rb/1MlT8Od
z3qXq8mH0jjotat2q8DUSqGztlrgGhpET1sKFpf10y9lwY8kRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+46dMywu8ZIGun3zXJPHfFu135MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWNhZTc4NWQtZWU4Yi0z
ZTJlLTlhYmQtNmVjYTM3MmFjMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+10/v2VUJst/Aa35sNGdcsQloGDRTT/CLKnMVJwdWEtL2HbpbvwKDG
eUa5aIqzoUoCGHUrl9vemCU+VBgZklay2yqCdgCoKXCLeiRQ1qatofRohexc6vGz
Yv9Hn130CNCPnpBE/N3DOMtbCzy1XBxtxudh5LHA2YNNSgThJff2jv2xME5v5YRF
v2Do5DGRbhc2QRwpbsxm+rrEMPUbOyqXyLCmnTzFPuxM6RciGdIO0uT1onQFbuji
k7hu2hRDVjNCitPWzvKwwpILHiGyqpLKPvvI5V0Qc1oXdUrGfsDwwGLJBxVSCREp
k4OHpXsd6TSnsakuyGiAB03aroM9Fjo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:47 2025 by rpki-client