Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
File: 3c653d29-3ae2-334a-a734-b80722690ac3.roa (raw, json)
Hash identifier: 0yPtd9MJ0XXH41Sr1QaSSgK6SpfeyvspubxENaqS/Qg=
Subject key identifier: 00:BE:A5:E5:34:60:C2:50:BA:92:9C:24:47:A7:EA:5F:D2:B0:44:01
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC067F8E51233FA88C9F20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.104.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:06:7f:8e:51:23:3f:a8:8c:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=d88d3a57-b7de-48c9-bfb8-23d6cbf372c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2e:ae:bf:71:53:41:b9:14:04:06:c9:aa:59:
00:53:ec:ae:7f:91:26:62:c0:f2:5b:c8:76:4a:c3:
a1:f0:76:1c:95:c5:8b:91:cc:0c:4c:99:a4:05:1b:
4b:bf:08:3c:15:41:d8:14:a7:af:b6:29:43:c3:59:
76:f9:e0:2a:2a:bd:66:cb:19:47:5e:23:76:85:8f:
d7:89:c2:b6:05:01:38:39:4c:3e:9e:6c:16:7c:7e:
25:ea:04:36:3d:c4:d7:e3:d1:fe:79:e9:6a:bb:6f:
94:97:b8:39:10:97:a4:59:af:c2:45:8e:41:b1:a4:
64:25:13:62:14:f3:f5:6c:5a:10:01:27:ae:1e:e7:
d8:5c:c9:f5:05:1c:aa:d2:39:e2:37:28:ce:ba:5a:
6e:a3:38:02:29:d9:2e:e7:83:17:83:0b:08:40:b9:
38:d2:07:4e:3e:5f:c9:ad:72:38:84:a8:2e:86:eb:
88:09:b7:bd:f4:1a:2c:2b:98:31:6a:9e:6a:07:14:
3b:03:c0:b2:ae:5d:6a:f5:c3:1c:72:ff:1d:7e:ba:
db:ef:c0:09:ca:27:9b:50:63:c3:8a:57:8f:52:7d:
80:2e:5f:e4:ed:b6:a2:73:81:db:b6:ad:fe:c2:5c:
08:58:67:c9:e8:39:fa:3b:6d:88:19:4f:07:9d:ec:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:A5:E5:34:60:C2:50:BA:92:9C:24:47:A7:EA:5F:D2:B0:44:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:63:78:28:06:64:c4:b4:78:f3:60:e9:93:c6:ae:08:ef:a3:
1f:32:04:dc:1e:20:32:7c:c0:af:63:fe:2b:22:46:01:c9:a5:
5f:38:77:86:d0:91:4f:62:5c:0e:72:3a:e7:9b:16:25:06:bc:
bd:6c:07:2a:af:ae:ec:2c:78:d8:91:41:5b:98:d7:bc:15:cc:
9b:f7:25:ee:63:3e:f4:22:29:48:96:03:24:fe:b8:4a:75:0d:
00:2c:96:35:a9:a6:32:27:11:24:0b:5c:ff:e4:c5:82:44:3a:
a7:6d:4a:e9:47:74:d6:a5:83:a4:b7:30:b6:91:42:15:8b:2d:
9c:4d:bf:d8:b9:ba:8e:78:78:9b:28:f1:af:13:3d:6c:48:98:
e2:63:a7:ed:6f:74:77:b4:93:e3:a4:35:29:70:67:1e:c2:34:
3e:56:a4:dd:4c:2a:58:9d:e1:62:65:7e:13:f3:d9:9d:8a:ba:
de:6c:82:4c:14:db:ce:21:1a:74:fd:8d:be:30:51:c1:cf:6f:
3d:a7:7d:4d:a2:1a:f9:fb:60:8d:76:b0:b3:73:d7:39:5a:06:
49:d3:9f:5d:c5:e6:74:45:1e:e3:f0:89:b5:d6:e5:3a:eb:71:
41:f8:da:97:1a:63:63:c7:4f:a8:66:7d:8b:99:21:2f:a6:01:
69:2c:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:17 2025 by rpki-client