Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa
File: 5116f738-3a7a-36b6-ac6e-1500d371e106.roa (raw, json)
Hash identifier: x1TmCDdedXi5knMg2wHUkeB81BOeCG3cYykahD8tLl8=
Subject key identifier: 3F:06:DF:37:00:37:65:6B:B3:8C:6C:85:BF:45:72:0C:5F:3F:89:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C34DCA52F07520C73C2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.65.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:34:dc:a5:2f:07:52:0c:73:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=022dbf8c-0573-403a-a6f5-426ad5a95baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:a5:a7:86:2c:76:7b:8e:2d:3a:ed:76:e0:
41:3a:f9:c4:2b:15:1e:99:f8:b8:48:79:59:18:dc:
1f:93:8d:d6:02:f1:8d:c4:62:d9:fe:6f:62:fb:81:
c3:67:80:ad:cb:ee:3e:06:1c:87:f4:66:c8:f5:af:
64:67:73:34:40:3e:41:fa:5a:c2:2d:a1:a6:2d:30:
0c:1e:01:3a:de:c9:16:46:1f:b2:ee:bb:87:a6:0b:
c9:b3:0a:0a:20:c3:a9:e2:05:c6:d2:61:48:71:81:
8e:1e:c5:65:b9:c1:8d:c2:5a:3a:f6:d4:c3:68:73:
2c:20:db:20:8d:99:39:15:68:25:dd:3e:d1:be:a3:
bc:a3:a2:fb:7d:c6:5f:cc:ba:45:75:e1:8e:10:5e:
d3:c4:3d:3f:3a:59:a8:d6:ff:37:f0:16:4c:a2:9f:
b8:23:b0:f9:e1:d8:91:f9:50:e9:45:c6:49:f5:d7:
d0:b4:d8:22:01:ec:a8:93:08:cc:c3:49:be:54:cf:
43:90:49:01:36:83:2f:72:a8:7a:1a:15:91:01:f3:
20:c2:30:cc:21:72:03:84:fa:3a:e3:f9:56:32:1d:
26:75:d6:c7:f8:a4:0f:fe:70:72:d2:6d:cb:79:83:
cf:8b:fa:53:05:67:54:6c:7d:bd:af:b0:51:fd:ad:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:DF:37:00:37:65:6B:B3:8C:6C:85:BF:45:72:0C:5F:3F:89:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.65.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:34:fb:65:86:23:49:fc:d9:c2:19:d5:9d:32:80:83:56:2a:
81:ad:95:c2:3a:3d:6c:48:31:67:8e:9d:70:e9:eb:6d:cf:2b:
a0:22:18:a2:2a:3d:d7:59:d7:67:17:66:ed:6a:6b:39:00:da:
e3:66:28:cd:7e:36:c0:a6:dc:da:ba:37:ca:d7:e7:f1:55:db:
a8:49:08:dd:23:76:08:5b:88:4a:7d:eb:d9:b7:57:69:59:47:
92:de:c9:0e:b3:ef:05:c0:c5:ec:0f:85:5e:34:04:cf:f0:e8:
e9:5d:2a:2f:7b:31:56:92:b5:32:ba:eb:85:df:bc:61:4f:98:
64:87:c3:69:fb:aa:8d:5d:24:0b:0f:cc:9a:cd:73:67:4c:f0:
c2:2c:96:14:88:a7:11:52:de:f0:73:a0:79:27:6b:dc:94:34:
71:58:3c:47:82:c5:fa:c0:37:81:71:42:d7:54:24:e3:c5:96:
3f:b3:a5:ec:b2:1e:a6:d8:71:40:d2:ac:3a:a0:9d:fd:c6:05:
38:68:0d:b8:91:c0:6b:42:b3:f4:33:74:a4:21:08:8d:1f:52:
98:2d:7f:91:d1:f6:d8:d6:8f:bc:00:0c:db:e8:be:e4:45:97:
de:32:97:46:2f:9b:97:8a:fa:40:e8:43:d2:04:af:b9:33:fa:
1c:51:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:53 2025 by rpki-client