Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
File: 35060332-7e9f-3cbe-964f-8702fe08db28.roa (raw, json)
Hash identifier: PEUXX7P5qk6ijgKvchDxxVEzsd2QMqQ9QuXUsNyoeBI=
Subject key identifier: 93:91:A3:E8:A9:5E:C3:A9:CE:B3:A1:C4:47:D4:21:76:3D:F0:31:89
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E1662CA4CD65BFF99A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.108.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e1:66:2c:a4:cd:65:bf:f9:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=c7403aac-d399-4d86-8ae7-026039671de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:9a:a0:4e:56:b0:d0:97:81:c0:33:dc:aa:
06:d5:40:7d:73:62:8a:96:57:e9:12:88:0a:55:92:
e6:b2:89:53:50:9c:ec:18:43:b0:ea:4d:f3:cf:61:
d0:d4:d8:21:da:84:91:82:2c:f7:22:fb:a6:e3:8f:
ce:bb:de:69:e8:a0:61:cd:47:85:03:d9:f7:14:91:
a6:a4:0d:06:e9:d5:b0:00:ec:5a:25:e2:14:fc:f3:
57:cd:fc:01:79:d4:63:9f:4c:e1:2d:7a:9b:d3:92:
88:01:30:d3:ea:c1:d4:5c:a2:b2:25:8d:a9:a8:27:
a6:12:18:60:37:74:c5:87:5f:a7:71:f3:31:49:1b:
9d:91:3b:cc:79:64:00:cd:ca:77:1e:d9:e8:42:cc:
34:71:f1:c0:95:c1:36:be:ce:a8:fe:a8:2f:40:3c:
79:8e:c1:62:20:fc:75:27:65:68:87:5b:e2:80:80:
18:7a:a1:4c:c8:36:35:f8:bf:36:1a:84:3a:11:5a:
52:fd:f4:c9:5e:f4:1c:93:53:a7:24:74:22:f7:76:
b3:93:a8:2f:d1:82:30:ba:0d:0c:75:65:55:be:66:
9e:74:87:9d:d5:db:0f:28:7b:ca:d6:78:b7:49:bc:
b0:55:66:7b:b5:0d:ea:54:2f:46:35:4c:33:aa:23:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:A3:E8:A9:5E:C3:A9:CE:B3:A1:C4:47:D4:21:76:3D:F0:31:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f5:7d:26:5c:df:a3:67:5d:7b:a2:31:54:4f:f2:e7:0c:33:
d5:3b:0e:80:be:7e:c1:25:00:1b:47:9a:26:76:0f:3b:4d:26:
60:8c:c8:cd:12:a1:c0:22:39:c9:a5:c7:86:e2:4b:ba:c0:61:
0b:86:e8:f1:82:74:f8:da:3c:1a:a0:25:8f:ac:af:bd:f4:ca:
c8:3e:11:08:52:5f:98:03:24:03:f2:50:a6:d5:e4:12:41:d5:
25:37:a7:b1:9b:83:d4:1d:92:bf:6d:3e:50:f2:a2:24:31:3b:
93:22:73:82:5b:26:e5:84:5f:84:33:5a:9c:9b:fd:91:9f:8b:
d4:85:0a:cd:dd:07:ad:74:d9:11:89:6c:c1:1c:16:fa:dd:8a:
53:96:72:6a:86:f7:3e:b8:32:ea:63:1d:64:99:4f:6a:b0:32:
9c:ef:94:0e:c4:72:0e:96:1e:4e:11:ea:47:76:55:9a:5a:83:
04:d4:4f:f7:bf:a6:57:ec:12:0e:66:e9:27:61:e5:3e:43:57:
d6:38:59:05:13:bb:2b:89:cf:76:50:8a:06:e4:b6:b8:77:04:
a4:47:f1:b6:71:1b:8e:85:c8:06:27:23:b8:1d:a8:d1:0c:a0:
fd:21:5e:df:6f:d6:ad:73:d3:44:05:07:51:22:5b:bd:f8:1f:
8c:3e:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:00 2025 by rpki-client