Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29a9e15d-c97d-3975-aca5-31f6a91e2b62.roa
File: 29a9e15d-c97d-3975-aca5-31f6a91e2b62.roa (raw, json)
Hash identifier: h0/bsf7ApuT5Ngn81h6z1SBXCtvM6loGATFVW+n/mqg=
Subject key identifier: D2:75:C2:E6:46:D4:2A:AF:AB:6E:AD:10:BA:3B:05:8A:24:A8:C4:E5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0E6258AB7B85F12B7A20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29a9e15d-c97d-3975-aca5-31f6a91e2b62.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.104.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0e:62:58:ab:7b:85:f1:2b:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=95bfddcc-f2b7-4d45-89bd-99ae6f4764bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:e7:8a:0a:12:c5:fa:08:d5:66:8f:15:73:
8e:1d:64:c7:b4:c0:ec:14:ba:66:fb:4b:4b:58:74:
0e:5c:4b:5d:f8:2b:59:c4:8c:66:26:6b:70:fd:70:
25:49:2c:dc:a7:ad:07:c2:b7:cf:9e:2e:88:b6:d0:
d0:f1:e7:43:a2:66:13:b3:48:7e:7d:bc:c6:b2:bf:
47:f1:14:4f:58:3e:63:d8:77:f7:19:fe:3f:ac:1b:
49:12:ba:e4:ec:4d:09:ab:93:ec:b3:64:99:9f:f5:
d1:74:84:05:27:28:b5:ca:b1:df:4f:de:df:7d:26:
b9:b9:5f:5b:8e:c8:a0:cc:2d:38:fc:f5:4a:e0:34:
df:56:2c:37:d5:f2:13:5a:18:44:e2:4a:61:ba:85:
8d:d5:7e:aa:61:22:47:d4:95:30:b5:99:10:a1:11:
1c:5b:31:cb:4e:fb:75:77:8b:aa:6e:ee:2f:10:e8:
8a:4e:49:17:8c:5d:e3:a4:9b:b4:e6:0b:1f:e3:89:
88:bb:4f:f1:52:89:17:4b:23:41:e3:1c:bc:94:f3:
79:a2:88:44:87:b5:f7:cb:2d:c7:a7:eb:55:85:bc:
dd:2e:2b:89:73:62:f6:d7:49:60:f0:d9:0c:8a:bb:
ab:33:0d:a4:b6:31:26:2e:9c:db:20:5c:c4:26:8f:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:C2:E6:46:D4:2A:AF:AB:6E:AD:10:BA:3B:05:8A:24:A8:C4:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29a9e15d-c97d-3975-aca5-31f6a91e2b62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:33:b8:0f:d8:19:1c:ef:50:02:fe:48:26:f4:e2:80:52:50:
04:49:8a:b5:d4:e4:4c:93:66:fd:cd:47:12:2a:8d:2c:fd:9e:
90:95:b3:53:ab:4a:f6:05:93:c6:f8:57:45:8d:ae:74:cd:ca:
c7:ee:ce:c0:e0:98:a9:79:9b:86:eb:f9:30:0e:b6:32:8e:02:
76:22:64:f8:89:0b:8c:2f:ac:44:75:92:53:26:09:f0:08:07:
45:77:b7:1a:06:f0:e8:18:7c:94:ce:26:20:fe:c8:bd:63:30:
cb:dc:f9:be:11:75:b3:a4:47:06:22:05:06:03:86:b6:7d:25:
ea:f8:ea:f9:1a:ca:41:47:fd:fa:ae:a8:7a:77:11:8b:f7:35:
ff:52:24:31:62:1a:1d:49:1e:a0:6c:81:61:f2:ee:08:d8:d1:
10:e2:0a:fe:65:b5:2e:64:19:fb:f2:f1:e0:f4:a9:37:41:3a:
da:09:1f:62:85:00:c7:69:fa:88:5e:c8:77:86:82:d3:b8:06:
7a:2f:01:4d:f0:eb:ec:d3:7f:83:a3:53:87:ea:13:40:b1:16:
2d:5d:79:cc:59:5d:df:4d:f8:43:f9:fa:f2:57:8f:8b:8d:01:
ed:ca:d2:c4:61:9c:35:f0:7d:78:c3:ca:c0:69:5f:28:e7:a4:
02:f5:02:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A5iWKt7hfEreiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTViZmRkY2MtZjJiNy00ZDQ1LTg5YmQtOTlhZTZmNDc2NGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGznigoSxfoI1WaPFXOOHWTHtMDsFLpm+0tL
WHQOXEtd+CtZxIxmJmtw/XAlSSzcp60HwrfPni6IttDQ8edDomYTs0h+fbzGsr9H
8RRPWD5j2Hf3Gf4/rBtJErrk7E0Jq5Pss2SZn/XRdIQFJyi1yrHfT97ffSa5uV9b
jsigzC04/PVK4DTfViw31fITWhhE4kphuoWN1X6qYSJH1JUwtZkQoREcWzHLTvt1
d4uqbu4vEOiKTkkXjF3jpJu05gsf44mIu0/xUokXSyNB4xy8lPN5oohEh7X3yy3H
p+tVhbzdLiuJc2L210lg8NkMirurMw2ktjEmLpzbIFzEJo/AMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ1wuZG1Cqvq26tELo7BYokqMTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjlhOWUxNWQtYzk3ZC0z
OTc1LWFjYTUtMzFmNmE5MWUyYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALUzuA/YGRzvUAL+SCb04oBSUARJirXU5EyTZv3NRxIqjSz9npCVs1Or
SvYFk8b4V0WNrnTNysfuzsDgmKl5m4br+TAOtjKOAnYiZPiJC4wvrER1klMmCfAI
B0V3txoG8OgYfJTOJiD+yL1jMMvc+b4RdbOkRwYiBQYDhrZ9Jer46vkaykFH/fqu
qHp3EYv3Nf9SJDFiGh1JHqBsgWHy7gjY0RDiCv5ltS5kGfvy8eD0qTdBOtoJH2KF
AMdp+oheyHeGgtO4BnovAU3w6+zTf4OjU4fqE0CxFi1decxZXd9N+EP5+vJXj4uN
Ae3K0sRhnDXwfXjDysBpXyjnpAL1AsE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:39 2025 by rpki-client