Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa
File: 63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa (raw, json)
Hash identifier: 8pFSIMM4SoDW6gh/vy5daJFYfUpxeNhWkBeKkpwmg8M=
Subject key identifier: 71:E8:E2:3C:81:BF:82:64:2B:1D:46:94:47:B7:6F:CA:24:9D:D8:C3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3EAD5C376E28175A6FBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.108.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ea:d5:c3:76:e2:81:75:a6:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=b706dd9c-6b07-433a-a89a-701c6e337720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:9a:e1:e4:bc:ca:1c:cd:6a:ec:fe:09:ca:
46:cf:5e:c6:ba:31:8a:b5:b1:c2:57:7e:47:de:2a:
fc:77:e6:de:51:0e:2f:34:77:23:94:25:c2:de:1a:
3f:ec:a6:43:5d:9f:8d:d9:69:2d:43:e6:6f:a0:3c:
ba:a7:7d:62:30:28:46:31:68:96:27:5b:82:61:21:
7e:80:25:61:76:bd:dc:f9:16:a4:d2:62:8e:fe:41:
47:d9:db:69:b4:85:7e:15:9d:68:31:eb:a1:01:54:
17:47:8a:ee:7b:8f:7d:69:c2:68:28:5e:51:ae:8b:
d3:7e:de:33:e2:79:51:d1:ba:f4:06:b0:ae:2b:d1:
de:eb:6b:c1:98:c0:07:6c:c7:46:43:07:d5:13:ed:
29:20:f0:d7:69:df:95:0c:f6:4b:35:02:9c:cf:ac:
a0:53:cd:a3:e5:f1:de:50:04:9f:0d:3b:19:a1:ea:
14:24:1d:7b:be:7a:80:a6:41:16:9c:88:41:a5:a4:
e0:bd:8f:a3:1f:83:96:2a:90:70:a5:ee:5b:69:bf:
d2:eb:b0:62:a7:48:73:78:64:06:f8:1c:98:b9:b6:
64:a8:9d:ed:14:65:6a:41:2a:57:84:7a:e5:e5:1d:
16:f1:31:e6:bb:00:32:36:50:fe:4d:4f:45:c4:ad:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:E2:3C:81:BF:82:64:2B:1D:46:94:47:B7:6F:CA:24:9D:D8:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63e315a6-b138-3a66-ad2a-0c92cdb1f8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ff:88:96:8b:5e:02:a6:3a:82:77:99:84:1f:1b:0b:db:b3:
da:32:2d:6c:3a:0d:45:35:3f:65:92:c2:88:b1:90:f8:2c:e0:
11:f4:14:a6:a3:b8:68:22:cc:62:08:57:c0:20:fd:94:59:88:
0a:3f:16:d1:02:31:db:59:d7:1b:37:a0:5b:fe:df:7e:2e:5b:
71:af:ed:22:af:65:67:58:77:ec:65:d3:b9:9f:cc:64:e0:58:
20:4d:f0:49:48:1b:95:08:aa:6d:bd:79:ce:3b:e4:84:b1:f3:
d2:c3:9b:1c:87:0f:d5:91:5c:1b:aa:5b:f2:f4:75:35:8f:08:
2f:24:54:16:dc:3b:8e:ae:14:09:02:de:46:a4:9f:d5:42:60:
40:30:0a:e8:5f:5d:16:de:74:66:57:63:97:60:fa:e2:f2:a6:
d9:b1:2c:c8:2b:58:18:75:e8:e4:1a:f0:e3:ee:d0:0d:7c:87:
b7:56:59:1d:b8:b2:14:d3:5b:0c:6b:10:3c:b9:e4:f3:cb:b9:
1c:4f:e3:fc:17:02:4c:2e:58:fc:2a:fd:00:df:cc:f6:46:b0:
ea:39:17:e7:73:c7:1d:f5:ed:a4:61:27:a5:ef:e2:3f:0a:17:
1e:5b:c7:a4:46:0e:ce:29:0d:c1:ac:10:e3:55:66:15:cb:27:
d6:86:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:36 2025 by rpki-client