Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34f58c89-14f4-3a68-b6fe-3eabd3332b1d.roa
File: 34f58c89-14f4-3a68-b6fe-3eabd3332b1d.roa (raw, json)
Hash identifier: lPFO9rvixj6J4JqG2Vu01joyCzbO++B9FmxRgmLbonA=
Subject key identifier: 08:71:4F:B5:96:3F:F8:84:E8:23:6B:35:44:AB:A1:7A:9B:00:8F:D3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E77408E0733FD873ED80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34f58c89-14f4-3a68-b6fe-3eabd3332b1d.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.103.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e7:74:08:e0:73:3f:d8:73:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=2c6b8fc8-5cf7-49cb-9d37-ec74990f089c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:77:09:1f:bd:9a:cc:e7:9f:ac:35:7d:08:
bd:55:71:64:a8:54:4c:64:99:26:fb:db:ab:bd:2a:
cb:cb:40:70:36:c2:6b:a7:48:4e:f8:02:9c:fd:73:
73:31:24:6a:89:42:ad:55:05:61:64:2d:d5:51:04:
be:bd:90:cc:23:1f:79:ce:2b:1a:06:c5:26:3f:49:
da:10:9f:0b:d2:40:59:b6:7e:e6:9a:4c:23:cc:ab:
ea:bb:10:43:08:bf:91:5f:6f:ec:23:d9:b1:b2:a2:
06:a8:59:d0:30:a0:ed:22:b2:14:aa:1e:0a:11:fa:
8e:f0:d0:71:9c:5d:73:f4:f4:96:3a:6e:93:46:f7:
58:82:c7:23:e5:a2:e5:a7:0c:5e:cd:16:eb:db:7f:
d2:f4:16:d0:71:15:b1:30:af:63:c7:10:e4:b8:72:
f8:8d:68:13:65:fd:4e:8b:9a:7e:04:61:ff:61:01:
24:99:a2:4b:ff:c5:42:dc:f5:42:33:8e:a7:05:d0:
5c:7a:33:a0:29:dd:f4:23:04:47:06:05:03:d6:1b:
f9:b0:27:d6:9e:3e:ee:d9:70:70:98:e5:87:82:3d:
b8:0c:1c:36:27:ce:a1:e3:02:e8:bc:ee:9f:1a:76:
af:51:3c:89:2d:e3:5a:56:53:9f:0a:14:af:95:b7:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:4F:B5:96:3F:F8:84:E8:23:6B:35:44:AB:A1:7A:9B:00:8F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34f58c89-14f4-3a68-b6fe-3eabd3332b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:26:99:d6:b1:8b:ec:e6:64:14:dd:e3:20:4f:c9:8a:84:43:
45:c3:35:6f:fa:5a:2c:bd:d1:34:d4:ee:8a:40:5d:40:50:13:
02:3c:c9:e4:a6:2d:4a:68:77:b5:cc:84:5f:7b:06:26:4c:3d:
b5:ff:3b:22:1b:1c:02:20:a0:fe:a7:52:c1:b6:2f:4d:f2:9b:
28:fc:5b:b1:68:6f:6c:58:48:f4:3a:0b:e5:14:77:c9:26:c8:
7d:fd:c2:db:29:4c:64:db:5e:ba:02:4e:26:7e:20:7f:1b:14:
4b:5a:6a:cd:42:00:22:eb:d9:45:f4:26:d4:e2:32:16:8b:52:
48:a0:a3:94:d1:d7:37:06:cc:dc:4d:d9:79:7c:27:46:17:8d:
a2:47:60:05:ac:06:5a:7c:c7:fd:ae:72:39:3c:eb:ba:da:58:
1b:d3:50:17:f0:04:d8:3b:65:73:19:9d:d0:07:37:88:bb:8f:
c5:d8:5c:30:dc:14:b2:b5:56:2b:c9:54:98:e8:46:c5:f9:d5:
00:95:46:81:0e:2f:85:84:a0:91:92:59:d7:fd:e0:88:92:81:
81:1e:b8:ee:3c:a6:af:ba:7c:9a:24:dd:6b:ca:d1:a6:53:8a:
dd:2a:77:70:2c:9f:fc:94:5b:e2:fa:f0:e5:64:97:9e:95:a8:
d9:01:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:03 2025 by rpki-client