Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa
File: 3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa (raw, json)
Hash identifier: cdEb9F4C1Qf6BS5Qo7Lny2Xg2rNok0ORkCHBOidJ3Qg=
Subject key identifier: DB:10:DA:AA:E9:4E:58:61:9F:30:16:7F:DB:A1:7E:AA:29:52:27:14
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3EA4D2750E0F66614B340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.107.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ea:4d:27:50:e0:f6:66:14:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=ccc79339-e829-44b7-843d-b51d32fd1db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:c8:5f:23:d8:16:0b:0a:9f:8d:34:20:e9:
61:a8:d6:6d:c4:ba:db:dd:fa:c4:82:a3:0b:df:78:
dc:9c:9b:b3:4e:c7:fb:29:cf:e2:68:f8:9d:2c:ea:
36:7d:2c:a0:8d:ce:bb:b5:32:eb:9b:d9:08:cf:dc:
6c:f9:9f:a9:ac:ef:0a:cf:03:d8:0e:3a:e8:69:9a:
ba:82:eb:10:26:07:7e:91:ef:4c:51:ca:f6:ec:d0:
12:ff:a5:f2:f5:ff:22:7f:3d:bf:07:40:7d:6a:8f:
c2:89:90:3c:10:08:45:f0:b6:9f:1c:aa:71:90:61:
d2:c4:e0:53:77:71:07:40:68:41:d4:53:23:f5:65:
14:46:ef:71:6d:5f:8b:27:29:56:99:bf:a1:ec:54:
2b:64:f4:3d:84:f2:bd:a0:26:c3:64:28:21:b7:3c:
0a:b9:6b:42:6d:29:c6:d1:d8:cd:0f:c3:85:44:63:
89:b9:c4:05:e7:bf:7a:7e:23:ad:57:ff:7e:84:50:
e8:47:b5:f0:6c:7d:a1:e7:38:06:7f:fa:0d:b0:da:
5c:12:38:5d:2f:b4:7a:a5:ff:cf:01:01:76:84:42:
43:1d:ca:8c:39:59:9f:44:36:f7:0f:fd:d8:66:35:
6c:cc:80:26:ea:f9:72:c2:1e:6d:1a:e3:a0:83:94:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:10:DA:AA:E9:4E:58:61:9F:30:16:7F:DB:A1:7E:AA:29:52:27:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:8a:4d:33:fa:08:9b:67:81:0d:3c:07:94:c5:a3:9e:90:8b:
05:88:35:94:0f:69:93:de:6b:e1:e6:7d:e9:58:cf:a0:2d:42:
d7:62:ff:f0:21:fc:76:ae:8a:94:c5:1f:79:cb:3c:65:13:ef:
e8:9f:3c:a6:b1:d6:7e:f3:08:44:e9:e2:7f:14:a0:56:33:06:
1c:5e:e3:35:d7:7e:95:69:3b:92:99:08:20:33:e0:30:bb:08:
fc:64:8a:b3:1e:38:19:10:89:9e:9b:50:14:07:3b:8c:05:f9:
d1:84:13:01:d3:e1:53:10:bd:74:1a:cb:51:d2:d8:6d:52:c3:
e9:d9:1d:a1:50:cd:a9:73:ea:88:6b:fd:8b:1e:32:c9:99:5b:
5f:49:33:a3:0a:88:ff:76:bf:74:f0:ba:56:a3:9f:cf:98:63:
5a:ff:f3:3c:61:5c:b3:74:0a:39:3f:c1:45:c8:ad:fd:e5:60:
83:da:66:db:39:4e:73:65:85:b4:8e:d0:0c:b5:3f:67:30:9c:
1c:dc:9a:b1:da:e8:19:8f:53:d4:93:1a:6f:76:d8:ea:3b:c4:
4e:35:f1:7e:28:50:49:89:10:72:1d:3e:62:ad:8c:6d:28:28:
e4:a7:64:c5:0e:36:a3:fb:71:94:ae:5e:e0:36:c7:ea:4b:26:
b1:6d:85:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+pNJ1Dg9mYUs0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
Y2NjNzkzMzktZTgyOS00NGI3LTg0M2QtYjUxZDMyZmQxZGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPIXyPYFgsKn400IOlhqNZtxLrb3frEgqML
33jcnJuzTsf7Kc/iaPidLOo2fSygjc67tTLrm9kIz9xs+Z+prO8KzwPYDjroaZq6
gusQJgd+ke9MUcr27NAS/6Xy9f8ifz2/B0B9ao/CiZA8EAhF8LafHKpxkGHSxOBT
d3EHQGhB1FMj9WUURu9xbV+LJylWmb+h7FQrZPQ9hPK9oCbDZCghtzwKuWtCbSnG
0djND8OFRGOJucQF5796fiOtV/9+hFDoR7XwbH2h5zgGf/oNsNpcEjhdL7R6pf/P
AQF2hEJDHcqMOVmfRDb3D/3YZjVszIAm6vlywh5tGuOgg5RXLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsQ2qrpTlhhnzAWf9uhfqopUicUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTdiMzAtN2U4YS0z
YjkwLTkyYWItNWQ4ZDA1NDkxMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSKTTP6CJtngQ08B5TFo56QiwWINZQPaZPea+HmfelYz6AtQtdi//Ah
/HauipTFH3nLPGUT7+ifPKax1n7zCETp4n8UoFYzBhxe4zXXfpVpO5KZCCAz4DC7
CPxkirMeOBkQiZ6bUBQHO4wF+dGEEwHT4VMQvXQay1HS2G1Sw+nZHaFQzalz6ohr
/YseMsmZW19JM6MKiP92v3Twulajn8+YY1r/8zxhXLN0Cjk/wUXIrf3lYIPaZts5
TnNlhbSO0Ay1P2cwnBzcmrHa6BmPU9STGm922Oo7xE418X4oUEmJEHIdPmKtjG0o
KOSnZMUONqP7cZSuXuA2x+pLJrFthQA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:53 2025 by rpki-client