Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
File: 4a52b50e-f663-35cc-b050-67dcd5392302.roa (raw, json)
Hash identifier: fSfpoxHNUMdPomlUERKLacUuFPqhF8c+IJHDEc8LbE0=
Subject key identifier: 28:E3:53:19:CC:B7:85:06:69:02:A1:10:EE:37:17:4D:3B:2F:7B:8C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3639C3EB252887CB6A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.83.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:39:c3:eb:25:28:87:cb:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=b40228f3-741a-433c-84d6-abe3d798c3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:d9:0f:7b:6d:49:7c:2e:c2:2b:a8:2d:8e:
07:9b:88:f7:d5:ec:19:a3:31:0b:58:a2:c9:09:63:
37:99:80:c7:b4:3c:17:86:dc:41:6b:d3:b3:53:4a:
30:a7:da:a0:d2:02:8f:63:02:e1:bf:8b:3e:39:b4:
fe:ca:ee:83:7b:17:5b:f4:51:22:8f:84:72:25:02:
03:69:aa:67:08:03:ed:20:d0:8b:74:14:39:00:cf:
c9:75:e9:f8:77:ab:68:e4:a4:62:4d:ca:2a:a9:4a:
eb:a2:38:a5:3a:64:a4:98:67:0d:5a:d3:89:0d:22:
17:cc:8b:4a:f1:fc:92:66:e5:47:b1:46:c2:ba:a9:
d6:aa:8d:ca:3f:10:e5:e9:08:35:7f:d1:c8:6e:a4:
b4:02:c0:0b:ca:72:af:e3:6c:20:a6:45:ac:65:84:
0f:7b:0c:7c:f8:df:f1:fb:d0:96:3e:57:f9:81:fd:
c2:f0:1e:8b:f0:d7:f5:ba:b3:fa:a0:ed:88:e2:10:
a0:1b:5b:96:0c:80:82:ec:92:2a:f4:5c:d4:df:e4:
c0:12:60:36:ff:ab:ca:0a:c0:eb:70:1c:45:68:14:
e8:e8:d1:c4:16:06:ce:4a:62:34:36:42:b1:a7:13:
8e:ba:22:d8:75:7f:e5:7c:37:57:6d:fb:44:b4:fd:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:53:19:CC:B7:85:06:69:02:A1:10:EE:37:17:4D:3B:2F:7B:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.83.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f6:51:0f:c1:e2:52:58:66:48:4e:b9:a7:08:fe:5d:f6:52:
f3:c2:2a:00:63:ac:08:e1:c9:2c:25:f2:77:97:c4:47:9e:0f:
ba:19:64:a7:a9:66:45:30:3f:56:68:41:29:eb:24:31:ec:c7:
3b:da:cb:c6:d1:53:f8:43:4c:33:c5:5e:08:ed:ba:6a:89:d1:
be:c6:3d:55:48:ab:c8:d8:d4:ca:93:1d:37:58:3c:e3:0d:28:
18:72:c6:8c:a5:f9:ce:8e:1c:ef:24:fb:47:ac:24:f6:51:af:
a1:44:5a:16:34:ea:2e:2c:d1:e3:a7:ea:7c:d8:41:54:6a:42:
9c:7a:11:d3:d7:c7:b1:cb:d2:df:fd:a8:df:07:7c:19:98:fb:
0f:d4:e0:28:3d:ae:dd:be:9c:0b:4c:53:ad:f9:ae:a9:69:f4:
78:9c:47:14:9a:a6:8e:2e:b8:66:4d:87:02:22:83:fe:80:a1:
2a:8d:15:7e:7c:7a:67:a3:14:3f:75:98:fa:ba:3e:eb:28:a5:
16:e0:b8:4d:71:02:91:aa:74:76:57:04:b1:ab:9e:42:c1:a0:
34:da:80:18:49:7c:33:d2:fd:7a:c9:a6:94:15:90:de:76:23:
8c:25:40:51:d5:3b:26:14:fb:45:08:d2:79:ae:09:9b:21:14:
78:39:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:55 2025 by rpki-client