Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
File: 6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa (raw, json)
Hash identifier: xK2BofuxSM//5ThQf1F5aktR+wpV2HEvjfXNi2JRry0=
Subject key identifier: 6E:28:A5:B6:A2:57:61:13:6E:2C:91:BB:6D:04:46:42:B0:D3:EA:C9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F201700E094E87B7FEA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 72.92.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f2:01:70:0e:09:4e:87:b7:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=439fcc6b-6f46-4131-bf8d-bcfb6b85dd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:12:a4:67:8f:28:3f:c5:bd:96:18:32:bc:
bd:70:e0:a1:6e:ea:67:bb:18:f7:4c:8c:8f:15:29:
53:42:7d:4c:16:0d:c6:f1:cf:bb:03:64:13:97:9f:
e3:9d:8f:73:ed:3a:4b:2a:7c:f4:4a:96:49:d0:3e:
bc:79:0e:34:ba:d3:f4:ba:62:1e:bd:b8:4b:cf:63:
b5:bf:fd:d7:c1:02:5b:2e:12:e5:eb:b0:08:45:9b:
b5:27:5e:f1:d0:e4:84:dd:0b:29:15:5b:47:81:33:
83:86:14:90:75:01:ef:5f:54:58:e8:ca:28:75:f6:
ab:1b:3f:47:44:51:6b:19:55:8b:ec:33:78:df:62:
6a:1b:c3:a4:13:99:d3:88:d7:38:e4:ac:c5:c3:57:
92:a1:52:64:d3:66:1c:be:c7:1a:8b:8c:cb:bd:0f:
4c:2b:aa:4e:cf:57:04:4c:52:8c:4b:da:27:e1:12:
ec:f6:ec:47:53:af:d1:28:74:ff:e8:1e:5f:8a:78:
ad:df:4e:09:00:f7:8a:97:8b:02:cc:31:86:24:d7:
48:22:7b:e7:21:40:1c:af:c3:bb:04:1a:51:d6:20:
16:36:3d:33:b6:11:25:a4:ea:bc:60:02:49:6e:ca:
c7:9a:51:39:18:0a:e1:63:39:1b:25:c9:13:a3:ce:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:A5:B6:A2:57:61:13:6E:2C:91:BB:6D:04:46:42:B0:D3:EA:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.92.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:43:27:e0:6d:15:19:e3:de:06:4c:f7:5a:ba:24:92:af:fb:
a6:8c:14:30:d9:e7:8a:4a:53:4b:1d:6f:18:86:3e:8a:1e:5a:
64:9c:ab:ba:82:d8:e6:5c:0a:e3:bc:dd:2d:90:5d:ba:a6:2b:
59:a6:fa:45:d4:8f:3b:74:e2:14:1f:9b:00:2f:94:7f:bd:7d:
67:e7:00:4d:60:1f:ab:58:f4:1f:d3:5c:b9:6e:b5:47:e0:af:
96:d4:1b:10:e3:2f:7a:59:db:16:69:e3:96:6e:93:03:d2:c6:
59:07:ad:13:3c:e3:20:35:5c:bd:56:fa:df:dc:c0:93:57:59:
4a:eb:4b:b8:49:13:1d:e9:73:7e:5e:81:47:b1:08:a0:b7:4e:
ee:11:54:6b:6c:41:7c:5c:c3:4b:4a:78:76:5e:dc:8b:19:bf:
84:15:c1:b7:61:8a:35:08:59:f1:37:1b:44:2c:b4:69:0c:47:
86:cf:b4:c1:2c:43:53:14:5e:c6:b2:db:ce:59:cd:70:7f:3e:
a1:fd:36:84:eb:73:bd:0d:c8:d8:3a:6e:c6:e4:a9:97:b2:11:
5b:19:a6:e1:b4:23:7b:72:48:d7:1e:b7:57:46:2d:aa:01:b6:
a0:8b:42:28:02:9f:d9:ae:e8:f1:7a:42:87:f4:17:cb:e5:3c:
05:ed:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:19 2025 by rpki-client