Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b1ee253-c754-3d13-94ab-7503a2ba3869.roa
File: 8b1ee253-c754-3d13-94ab-7503a2ba3869.roa (raw, json)
Hash identifier: Bzhnqkp0LcWW02qSjOf/cTQykvnWJa6ONPMyDh2wi3M=
Subject key identifier: E2:BC:DF:DF:D4:A3:AB:31:74:D8:F6:85:8E:D5:B6:ED:5F:29:51:FE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC06EA62743FCC8FEF1480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b1ee253-c754-3d13-94ab-7503a2ba3869.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.96.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:06:ea:62:74:3f:cc:8f:ef:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=ba5e7e6d-4aa2-498d-a0f3-e809f665f4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:b8:b8:69:a0:a4:9f:0e:36:25:9e:85:df:
fb:24:6d:e2:ff:62:35:1d:63:aa:e6:ac:35:de:81:
67:06:9d:8f:e0:89:8f:a2:c4:f3:12:0f:e6:77:37:
b9:b6:7f:3d:4c:fb:2a:78:f5:d3:8d:02:9b:60:ad:
98:91:cf:32:58:f2:47:2a:1d:b6:b6:fe:bc:a3:2a:
fe:eb:7b:26:5d:9d:f5:78:b5:b6:96:92:3e:76:b6:
f0:68:04:5f:a9:c8:ff:ec:f2:f3:3b:90:1f:fc:56:
9f:d2:ab:82:84:d0:32:3a:84:7d:75:82:1f:8e:0a:
8e:e6:95:0f:d1:3b:a1:e1:62:65:9d:7e:f4:e5:35:
f7:3e:78:49:40:21:fd:f1:5f:46:df:8d:33:fe:c7:
07:e5:d8:a6:a5:cf:44:2c:3b:6d:bc:89:b8:dd:0e:
bb:8d:2f:80:b7:73:ad:24:96:e1:f7:1a:b3:0a:2e:
04:f0:e3:0f:fd:0a:91:97:27:de:b7:77:fc:a6:55:
7f:fa:ee:f6:0a:65:95:35:91:6e:90:2e:bb:51:0b:
cd:38:68:3f:dc:31:59:f8:b1:a8:ae:52:28:62:b5:
d5:a1:c7:b3:01:e7:e5:ef:da:cd:65:14:e6:34:b7:
72:e9:4e:bf:8b:a6:7a:b9:a1:65:b5:da:98:bd:46:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:DF:DF:D4:A3:AB:31:74:D8:F6:85:8E:D5:B6:ED:5F:29:51:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b1ee253-c754-3d13-94ab-7503a2ba3869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c2:83:20:e6:81:40:87:c4:7b:3a:51:c8:72:bc:6a:3f:0d:
e8:e6:e0:6f:72:40:b0:73:b0:87:5d:dd:1c:fd:0a:9d:16:1e:
32:62:fa:2b:09:68:d0:28:90:f2:fe:ed:88:1d:d2:04:d4:a7:
16:76:c5:d6:2f:56:a8:de:d6:ae:c5:20:d7:8c:87:ff:94:51:
20:ca:09:97:7b:3e:9b:56:69:88:e5:67:6e:d8:6e:f0:19:96:
40:56:f7:ed:0d:eb:9c:37:f7:33:a7:e9:46:09:f6:61:4b:77:
ca:d5:cc:4d:c8:8e:fa:de:ba:f7:77:c9:2c:72:e5:b3:ef:6b:
d6:b1:f1:81:28:18:37:cf:1f:e2:50:57:cb:b7:17:a3:0e:0e:
d5:5d:b0:0b:63:f2:e6:64:7f:6c:1c:b3:1f:77:ef:f9:7e:bc:
59:05:c2:c6:46:50:c3:07:d7:2e:77:ff:ff:fa:2f:74:ad:c1:
44:a2:51:56:0a:f5:be:31:0a:b9:e0:08:8a:7c:e8:5d:92:eb:
28:59:f8:30:0c:54:16:61:a6:9c:aa:ce:f1:d0:78:5c:a4:84:
28:9a:26:cd:b6:71:b1:89:b2:ce:9b:1b:13:11:6b:3a:91:4d:
14:6b:17:5c:26:5a:7b:2a:4f:73:c1:5b:0f:3b:62:15:47:b5:
3c:36:b3:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AbqYnQ/zI/vFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YmE1ZTdlNmQtNGFhMi00OThkLWEwZjMtZTgwOWY2NjVmNGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwm4uGmgpJ8ONiWehd/7JG3i/2I1HWOq5qw1
3oFnBp2P4ImPosTzEg/mdze5tn89TPsqePXTjQKbYK2Ykc8yWPJHKh22tv68oyr+
63smXZ31eLW2lpI+drbwaARfqcj/7PLzO5Af/Faf0quChNAyOoR9dYIfjgqO5pUP
0Tuh4WJlnX705TX3PnhJQCH98V9G340z/scH5dimpc9ELDttvIm43Q67jS+At3Ot
JJbh9xqzCi4E8OMP/QqRlyfet3f8plV/+u72CmWVNZFukC67UQvNOGg/3DFZ+LGo
rlIoYrXVocezAefl79rNZRTmNLdy6U6/i6Z6uaFltdqYvUYJvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOK839/Uo6sxdNj2hY7Vtu1fKVH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGIxZWUyNTMtYzc1NC0z
ZDEzLTk0YWItNzUwM2EyYmEzODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTCgyDmgUCHxHs6UchyvGo/Dejm4G9yQLBzsIdd3Rz9Cp0WHjJi+isJ
aNAokPL+7Ygd0gTUpxZ2xdYvVqje1q7FINeMh/+UUSDKCZd7PptWaYjlZ27YbvAZ
lkBW9+0N65w39zOn6UYJ9mFLd8rVzE3Ijvreuvd3ySxy5bPva9ax8YEoGDfPH+JQ
V8u3F6MODtVdsAtj8uZkf2wcsx937/l+vFkFwsZGUMMH1y53///6L3StwUSiUVYK
9b4xCrngCIp86F2S6yhZ+DAMVBZhppyqzvHQeFykhCiaJs22cbGJss6bGxMRazqR
TRRrF1wmWnsqT3PBWw87YhVHtTw2s6g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:44:23 2025 by rpki-client