Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa
File: 9e8467be-7894-3034-8cd4-725b6e057f30.roa (raw, json)
Hash identifier: ihZWIcCVr31lX7G5oOHx+vNDkBUwEeAE3/karLsEnkM=
Subject key identifier: 0C:F2:FB:10:74:74:2E:C0:3B:28:D7:E6:A3:BD:31:90:09:73:16:3E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F3D3A92AA78064D6ABC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 72.90.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f3:d3:a9:2a:a7:80:64:d6:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6af115dc-036e-4278-bde4-316eccd67fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:10:9a:d6:6c:85:0e:75:36:55:f3:66:04:
4f:09:d4:17:15:24:8c:8c:27:f7:2a:03:72:c1:be:
08:71:6e:ab:e7:fe:d5:f8:0f:1a:34:56:0b:d0:d3:
59:54:de:60:63:d7:2a:48:85:06:2f:d0:b9:cc:84:
0d:f2:a6:05:f6:6c:28:24:b8:12:ec:80:5d:9d:20:
ee:dc:81:42:89:44:67:ef:9a:ed:ed:ed:02:87:b5:
26:98:81:8e:5d:c0:12:ad:b5:77:17:34:35:66:1d:
32:32:00:ee:01:8c:0e:98:02:de:eb:24:0d:71:96:
4d:a1:d1:a9:a0:34:ed:ee:54:d0:13:61:a3:ef:9a:
e1:d4:85:07:79:b5:b5:66:ac:fb:f6:ca:a0:a2:0a:
60:98:8a:28:2a:eb:66:9b:74:82:ce:3f:59:bd:3a:
fc:6a:90:0b:14:2b:3a:d1:04:4a:c1:71:19:6e:f3:
38:98:30:1f:3a:5a:68:0e:e8:2a:78:7f:01:af:a8:
e2:12:09:d8:78:fa:1b:95:64:ef:4f:c6:a4:de:c0:
2d:72:6a:a2:ad:93:11:a7:be:7e:d3:05:d5:8a:5b:
de:b5:3a:bb:e0:51:ef:6f:1a:3c:da:5d:96:4b:06:
47:a6:b5:c0:32:79:72:24:b6:65:9c:87:a2:ac:04:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:FB:10:74:74:2E:C0:3B:28:D7:E6:A3:BD:31:90:09:73:16:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.90.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:51:10:78:b1:a6:3d:b8:36:ac:33:63:96:17:b7:cd:45:28:
8b:5a:69:2e:97:57:ab:4e:be:0d:b2:9f:26:d0:ce:02:03:46:
64:fe:33:c8:ba:b5:56:74:bf:fb:66:3d:06:99:4c:c5:7e:a8:
b9:88:5a:f9:8c:b5:67:ca:0b:ae:19:29:43:b2:be:92:ab:5c:
e3:82:c2:d8:62:9a:8b:c9:86:9a:50:1e:c9:58:8b:27:f0:46:
5b:c2:00:31:bd:20:56:7f:f1:0b:10:59:1e:85:9d:18:14:22:
85:b6:93:56:a4:71:3f:6a:fb:64:7f:09:0d:04:b7:5d:8c:25:
70:0e:b7:78:b0:63:1e:ca:e8:71:75:92:67:11:62:97:f5:66:
dc:ee:b2:fb:19:25:d7:37:4e:2e:43:2e:09:69:27:43:fc:29:
6b:21:86:63:07:5e:df:3e:8c:50:82:18:db:48:1a:ce:59:37:
d4:8e:3b:81:b0:c0:f4:7a:be:af:1d:8f:42:25:49:9f:2b:af:
e6:3f:14:ec:d5:d3:8e:c6:4a:cc:cb:73:5c:bf:64:4b:4b:3a:
c9:dd:ef:b3:05:0f:45:54:af:ee:2b:6d:af:e5:62:aa:7c:69:
67:35:24:21:6d:d1:5c:8c:d9:12:c2:53:49:17:e3:04:c3:0c:
03:8e:32:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvPTqSqngGTWq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NmFmMTE1ZGMtMDM2ZS00Mjc4LWJkZTQtMzE2ZWNjZDY3ZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOsQmtZshQ51NlXzZgRPCdQXFSSMjCf3KgNy
wb4IcW6r5/7V+A8aNFYL0NNZVN5gY9cqSIUGL9C5zIQN8qYF9mwoJLgS7IBdnSDu
3IFCiURn75rt7e0Ch7UmmIGOXcASrbV3FzQ1Zh0yMgDuAYwOmALe6yQNcZZNodGp
oDTt7lTQE2Gj75rh1IUHebW1Zqz79sqgogpgmIooKutmm3SCzj9ZvTr8apALFCs6
0QRKwXEZbvM4mDAfOlpoDugqeH8Br6jiEgnYePoblWTvT8ak3sAtcmqirZMRp75+
0wXVilvetTq74FHvbxo82l2WSwZHprXAMnlyJLZlnIeirARJbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzy+xB0dC7AOyjX5qO9MZAJcxY+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWU4NDY3YmUtNzg5NC0z
MDM0LThjZDQtNzI1YjZlMDU3ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSFpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlREHixpj24NqwzY5YXt81FKItaaS6XV6tOvg2ynybQzgIDRmT+M8i6
tVZ0v/tmPQaZTMV+qLmIWvmMtWfKC64ZKUOyvpKrXOOCwthimovJhppQHslYiyfw
RlvCADG9IFZ/8QsQWR6FnRgUIoW2k1akcT9q+2R/CQ0Et12MJXAOt3iwYx7K6HF1
kmcRYpf1ZtzusvsZJdc3Ti5DLglpJ0P8KWshhmMHXt8+jFCCGNtIGs5ZN9SOO4Gw
wPR6vq8dj0IlSZ8rr+Y/FOzV047GSszLc1y/ZEtLOsnd77MFD0VUr+4rba/lYqp8
aWc1JCFt0VyM2RLCU0kX4wTDDAOOMjg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:57:35 2025 by rpki-client