Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
File: 71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa (raw, json)
Hash identifier: lgXFMst1shsPX8fWKVPqAlo57I03zstfSfGKhW8gZAI=
Subject key identifier: E0:07:58:03:57:B1:27:3E:22:40:AE:B6:FE:78:D4:9E:A1:C8:B8:17
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E1DDF845B723638FB380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.109.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e1:dd:f8:45:b7:23:63:8f:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e37a3de2-3b45-4dcc-92e1-d6d55fbbeec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:10:52:79:05:6d:6d:02:f0:73:80:ca:67:
74:ed:5d:7e:f3:90:cd:dc:b6:d8:cb:08:6d:6c:7e:
60:73:0c:ae:d3:bd:66:d7:cf:fc:39:d4:7f:b7:bb:
3e:f0:74:54:3b:e7:18:ff:b4:97:ea:f8:d1:5b:a0:
4c:41:cf:88:6d:e0:7f:db:d2:a0:bf:c5:d1:4e:5a:
99:d4:f1:1f:80:5f:e8:bd:c2:be:51:18:c9:64:8f:
3c:c7:89:26:c3:57:f0:b2:70:ae:37:5d:a9:cc:ba:
36:cb:96:b7:64:88:c8:fd:cb:a0:e7:bb:d5:f3:8e:
67:84:e2:37:e6:e8:a3:db:c1:4d:bd:6e:5b:43:d6:
c0:2b:be:28:84:75:63:bb:f8:f3:c6:9f:77:02:7d:
0c:86:3e:b2:56:99:e8:a1:a6:75:a3:52:42:6c:5d:
da:94:25:ed:e2:1a:ff:77:f3:00:10:9f:3b:8f:45:
c8:20:5e:c0:6b:35:1e:c8:21:7e:5c:78:1a:01:c6:
70:a6:14:03:77:98:3f:c6:46:b0:59:5f:23:e1:3b:
14:a1:4c:12:1a:57:77:98:57:dc:11:b7:80:4f:ec:
0b:8a:a1:8b:56:13:4c:88:cd:8a:27:39:72:ac:61:
9c:11:53:24:40:15:2f:69:12:87:2c:64:4e:71:2c:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:58:03:57:B1:27:3E:22:40:AE:B6:FE:78:D4:9E:A1:C8:B8:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f8:3b:73:52:b1:7f:b9:07:13:bd:f5:e3:57:7d:6c:87:55:
11:9d:a3:54:61:38:3a:01:30:06:1a:7a:18:de:d4:b9:5a:24:
52:4c:ff:29:32:ec:08:fd:12:b0:01:2a:f7:aa:94:32:9a:1d:
66:f2:2c:d4:fa:81:45:fa:67:11:a6:4d:cd:0d:54:34:b4:85:
bc:cc:f9:06:6d:68:70:e7:82:ec:1c:57:82:a2:f5:a9:4c:fb:
ca:d5:05:f0:8a:6a:10:ae:22:56:98:e2:97:4b:36:83:b0:0e:
91:d5:6b:a3:a6:b2:a6:7e:8a:6b:af:f9:f7:3f:b1:d1:5f:08:
0d:32:09:47:71:80:d1:52:e4:cd:a6:c2:0a:1f:6c:20:8e:44:
09:f6:3e:d8:da:e8:31:e2:db:a1:b6:99:e7:20:bb:66:b8:ef:
1f:b1:03:0c:87:e8:b3:d4:69:46:7d:81:6a:40:a2:2e:c7:9d:
dc:a0:7a:4b:45:a1:81:c2:1f:37:71:85:0a:9e:6b:cf:68:55:
53:05:e6:ad:ce:48:fa:ed:f4:bd:5a:62:cd:21:73:9e:21:f8:
7f:72:e6:01:b0:00:eb:f1:86:c3:86:98:0a:db:d8:5c:9c:61:
9d:a3:a0:09:cb:1b:fc:2d:63:2a:82:3e:af:c5:5c:c6:61:17:
91:c0:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:47:34 2025 by rpki-client