Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ca0cf67-90b7-3a54-9fbe-48541188e4fb.roa
File: 0ca0cf67-90b7-3a54-9fbe-48541188e4fb.roa (raw, json)
Hash identifier: 61BPGMOCDlPIJM/FEZX3LY2Dbt3S4ALf989xOx2L4lU=
Subject key identifier: A3:5E:06:BF:4B:2F:70:DD:10:2F:36:DF:78:3C:B6:49:63:14:EC:FB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E812DCC4FF731BA6D140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ca0cf67-90b7-3a54-9fbe-48541188e4fb.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.107.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e8:12:dc:c4:ff:73:1b:a6:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=8380a0f8-acc6-4c36-9092-db80bde12ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:59:2f:b1:43:2e:43:3c:23:84:1f:ae:a7:
0a:7b:6a:79:7a:f7:cd:05:e8:40:d9:20:7d:3d:1d:
85:fb:df:7e:c9:55:d5:62:18:0e:97:c9:81:5f:75:
61:a4:33:15:fc:7e:06:21:0a:d3:f6:83:7d:61:4a:
80:0f:32:1c:d4:e3:6d:b3:6f:b4:5d:13:ca:a2:d7:
77:d9:94:ac:d6:bc:6d:bb:87:9d:f2:ac:c8:36:d5:
46:1b:2b:21:ce:62:f0:cc:d3:fa:9d:32:ac:0f:c8:
77:ea:c4:f4:27:8a:02:c3:83:af:72:df:2a:06:30:
e9:3f:a7:36:d0:fb:56:39:5c:bc:9d:f8:98:33:ce:
5c:fc:96:a4:8e:28:b8:d0:ee:8e:1f:88:65:4c:b4:
e7:16:ed:9f:5c:a4:bd:3e:38:7b:22:f6:59:af:21:
82:d3:ee:be:4d:2d:3f:b7:e7:bf:81:8d:5f:35:88:
36:b5:16:d4:c3:91:61:76:ff:fc:4b:a5:27:97:1c:
2d:b7:53:57:64:e1:26:40:b6:35:0b:f6:c0:9c:dd:
02:9b:da:ca:85:07:74:62:9a:bf:98:71:4f:b1:4c:
e3:d8:2f:7c:fc:fa:af:b4:28:91:cf:28:b9:38:03:
a7:f5:b5:99:bd:38:3a:ae:02:2d:a4:94:28:e8:e9:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:06:BF:4B:2F:70:DD:10:2F:36:DF:78:3C:B6:49:63:14:EC:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ca0cf67-90b7-3a54-9fbe-48541188e4fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:91:34:0b:65:03:e3:9b:0f:43:a3:60:7e:5a:df:7d:48:81:
25:f8:8c:e8:99:60:1f:9b:10:1d:01:f2:68:9e:fb:d2:c9:f8:
91:bf:15:13:20:2b:d2:e0:d3:cb:c1:ff:ac:91:af:6d:a4:51:
71:8f:42:3a:3c:d6:ae:87:97:5c:fa:58:87:98:c4:13:b5:99:
9c:9c:55:3c:b3:52:66:5a:ca:63:85:62:f4:cd:9d:8a:bc:bb:
fd:15:42:34:10:7e:31:7c:f5:2f:53:fe:54:16:47:ab:dd:9d:
2d:81:04:03:44:0d:69:40:62:c2:08:47:88:6d:b3:27:4c:f5:
2d:4d:90:be:5b:9c:71:97:cb:32:69:bd:df:15:d2:8d:41:0f:
1c:44:ac:7f:c5:a3:d7:8c:d8:05:34:26:1d:6b:54:25:51:ba:
00:5d:cb:9a:5c:76:5b:93:b2:b7:fd:dc:f8:4c:04:a1:33:21:
a2:20:40:8f:09:e4:03:d6:30:c0:24:6c:3c:fc:4e:ad:a7:44:
f1:2e:b4:22:22:e6:b7:1a:c3:b6:cb:18:9f:82:33:2d:12:1b:
ba:d0:1e:df:32:e9:84:16:37:c8:7b:29:70:43:94:58:bb:6b:
24:a3:e1:04:0c:eb:a4:0e:b6:eb:53:17:cb:b7:5e:43:bf:3e:
db:52:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:59 2025 by rpki-client