Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
File: 2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa (raw, json)
Hash identifier: L6tqzzEwjc6PkxnhxY2zqxlHrTLZhBijxdT6TI5nrEk=
Subject key identifier: B9:60:8B:C1:47:83:EE:EE:71:57:BD:5A:54:36:48:3B:17:29:7C:D4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2CEDF56BEC7B8C6ADE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.72.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2c:ed:f5:6b:ec:7b:8c:6a:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=f3a211b1-c034-4925-b8ed-90125e8be48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:90:e5:ce:b2:f9:70:fb:19:97:44:09:dd:
64:43:5f:8e:71:cf:7f:c9:49:5a:f7:95:00:21:b5:
50:c4:a8:9e:34:36:f2:2c:b0:f4:89:9a:79:dc:af:
69:13:e3:a6:6e:a6:f4:54:36:f9:99:9b:ca:2f:ef:
17:d7:b0:52:67:d7:01:5e:fc:11:34:8f:52:27:63:
d7:7a:0f:30:ad:a0:77:c1:cb:c5:2e:86:f5:7e:7e:
1e:6b:cc:81:6e:d1:7c:ca:c9:a3:43:67:d4:1c:5b:
01:7f:8f:45:44:27:c5:e7:fc:28:ea:bf:2c:91:4d:
58:22:e9:2e:cf:f8:8a:6d:4f:1c:97:71:40:55:24:
4e:2c:3c:75:08:56:e3:b8:14:78:64:f0:55:14:c2:
89:86:ec:e6:77:fe:f6:fb:36:e2:fa:15:ff:f7:f0:
f6:33:cc:9e:e5:da:bf:a6:9f:46:36:d4:ca:71:21:
84:e3:c2:f5:c1:4c:4c:7b:80:45:b6:4d:27:9d:4b:
cf:aa:49:a8:6f:8b:72:85:4d:7d:88:0a:ef:c1:d4:
65:36:08:bd:06:04:b6:e6:1d:ab:50:c2:92:8d:68:
57:4a:7a:0d:a0:d2:f9:1e:99:e5:e6:95:b5:96:44:
67:a3:42:6a:c2:5d:8a:68:4d:b2:24:36:87:b9:7a:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:8B:C1:47:83:EE:EE:71:57:BD:5A:54:36:48:3B:17:29:7C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.72.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:6a:de:91:47:7f:b4:bc:70:b5:8d:e3:46:7f:12:20:40:eb:
ef:55:38:ff:e3:63:b9:12:05:a8:19:af:13:ca:b1:00:98:b3:
64:97:5a:05:c1:5a:d3:da:a6:94:b1:64:54:38:eb:f1:dd:aa:
0c:2b:91:50:5d:ce:56:d8:89:fb:35:5a:50:a6:13:39:97:f8:
bf:14:5d:29:fd:a4:ef:a4:ff:71:eb:bc:2e:d8:61:ff:47:d4:
b1:f8:23:25:f7:5f:ab:35:ba:90:34:62:b4:81:3a:91:15:05:
0f:7c:41:00:74:fe:d2:f4:5b:f5:86:6e:cb:b3:a7:c0:f6:5a:
f4:51:1e:77:6b:be:f7:d4:4a:3f:42:b4:71:f2:b2:53:e2:36:
08:1b:f7:d2:9b:46:4e:ef:93:6b:06:c2:cb:66:da:2f:fa:98:
cc:b0:96:99:13:93:6a:18:af:30:fd:8a:e3:b0:d4:ad:40:2d:
1a:94:ee:49:48:21:9c:96:17:70:36:09:f4:9c:6e:f4:95:ce:
d2:af:2c:8e:19:d3:4d:4d:7f:57:f4:9f:32:8b:95:09:5f:12:
27:5f:85:08:83:fa:cc:a5:19:20:bb:79:0d:6e:55:10:95:76:
b7:bd:b3:f6:e0:5a:21:88:d9:ac:27:48:4e:bd:81:d0:e7:0a:
e0:b6:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:50 2025 by rpki-client