Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3780d20c-3ce9-3088-82cd-c70a6fec783d.roa
File: 3780d20c-3ce9-3088-82cd-c70a6fec783d.roa (raw, json)
Hash identifier: vOqR3OkK3QHkoaQxZPoKfkyexrSkF3ABUInBveyZ6aU=
Subject key identifier: E4:C2:59:E3:79:6A:A2:C5:8E:91:57:70:BD:63:D7:EE:04:E6:A4:D1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0494692E029698584080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3780d20c-3ce9-3088-82cd-c70a6fec783d.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.103.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:04:94:69:2e:02:96:98:58:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=3ef85f12-9a16-40f6-b9ab-794e53661171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:f1:1b:70:35:af:a6:52:f4:1e:4d:cd:2f:
83:51:c9:de:e4:11:b6:c0:a4:25:77:f3:92:fc:ab:
7e:d6:8d:cc:b2:61:57:c1:bb:8c:dd:b9:96:00:5a:
03:76:95:19:05:21:a9:fd:e3:0f:90:32:59:aa:3d:
a0:58:e2:5b:85:1d:45:98:52:5b:96:62:c6:97:3b:
75:9a:1a:4a:b4:32:b8:1f:19:24:4b:50:ea:5d:28:
dd:2a:1d:9b:9e:3a:de:23:87:53:65:a5:33:75:ef:
57:b4:b6:38:ae:29:01:09:94:73:ca:a6:e1:f3:96:
cc:f1:40:78:03:d6:33:48:f2:61:cd:c5:35:01:5f:
52:d1:d6:c4:b1:73:09:a7:f0:8f:e4:13:35:2d:f0:
01:26:6f:f8:95:48:79:f0:a1:79:97:e2:06:81:9d:
a9:7f:2f:ff:48:6d:9e:bd:50:f1:89:17:aa:20:1a:
c2:e3:18:1e:c4:bb:7b:d3:22:e0:3d:a6:94:5c:25:
17:09:43:e1:07:d0:cc:47:c3:0f:41:ca:66:36:c2:
5c:b5:27:79:db:17:08:06:65:e8:5d:65:01:36:bd:
df:8d:ee:6f:36:85:98:14:57:10:f1:a8:33:c9:1e:
76:b6:be:c4:c3:a5:18:2f:75:c0:a1:c7:3a:78:c1:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:59:E3:79:6A:A2:C5:8E:91:57:70:BD:63:D7:EE:04:E6:A4:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3780d20c-3ce9-3088-82cd-c70a6fec783d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3c:a9:c5:b4:7d:b2:c1:34:f8:fd:ee:bd:1b:90:2f:96:10:
18:45:2b:23:81:4e:00:35:c7:01:fb:bc:a3:3f:e2:8a:e3:76:
93:a3:34:a3:23:9f:2d:9d:e0:52:98:4a:08:c9:c6:1a:bd:ba:
5d:e4:97:5c:76:74:7e:84:05:60:30:01:4a:c0:9c:91:6e:ca:
47:0a:f1:87:a7:59:30:7f:c6:8c:85:c8:19:c0:5c:7c:88:17:
c9:e0:fa:ac:08:4d:da:30:36:4f:32:bf:62:58:d7:ec:72:09:
d1:d9:23:66:34:fc:71:f0:f2:cc:a5:23:0c:47:04:89:62:4e:
3a:69:00:c9:8b:31:62:91:0b:27:40:14:e8:f0:5a:35:fb:d9:
ee:e6:28:4b:9a:6a:0e:71:42:a1:55:e2:dd:d1:ab:4d:d8:d2:
bc:55:48:2f:84:eb:a9:07:6e:55:a6:59:20:db:61:3f:85:04:
72:51:40:40:48:8f:98:ce:3a:f2:6c:03:04:fb:b9:7d:92:1d:
25:6e:63:08:b9:b5:2d:d5:bc:16:90:29:99:cc:77:6d:f7:d1:
d7:1d:27:23:d3:46:ef:c4:17:ed:08:e1:91:e4:74:08:4f:48:
ab:21:ed:b1:9a:fd:66:1b:2f:66:8a:be:08:e8:fa:03:75:3b:
3e:c5:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:48 2025 by rpki-client