Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
File: 767dcc9f-4d41-3dc2-8c16-517741247519.roa (raw, json)
Hash identifier: VAXr6pCeSqdFnWKaTpHDqhbCCGzhcBNb2NbJKDpmD6g=
Subject key identifier: 9C:E7:0E:7A:45:47:98:69:34:A4:93:C9:E5:59:84:63:90:78:82:3F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3DC1FC9B71C09453BA940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.108.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:dc:1f:c9:b7:1c:09:45:3b:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=0213953a-8f59-4299-b54a-bb49a98e5a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:dc:1f:89:8e:a0:d3:c2:6b:4c:81:89:b8:
5f:5c:ce:88:7f:c0:00:f9:34:27:3f:2e:49:7f:cf:
40:f6:81:ce:ac:26:aa:51:b0:df:33:2a:2f:83:bc:
c5:2c:c8:f8:95:81:1a:70:7e:17:3c:3b:39:64:a2:
6a:69:a7:75:c1:f0:e3:e4:7b:34:9b:54:20:a8:bc:
35:80:6c:bf:b6:e1:ec:82:c1:af:a7:28:d2:31:8f:
54:24:09:8f:cd:b4:36:45:41:15:ad:3a:b6:2d:35:
1c:e5:31:f1:9f:c9:73:33:a9:6e:02:b9:c1:bd:53:
1a:56:c0:a8:b1:53:4f:a1:30:76:f1:0c:b7:af:00:
22:45:ff:8e:cc:c6:c5:7c:28:b6:1b:7a:17:fb:a6:
98:69:69:82:23:e0:0a:f7:be:d7:2a:7e:27:32:23:
ed:3f:33:c6:07:ad:95:ea:f2:12:99:13:9d:61:58:
75:77:11:25:f8:65:31:35:ed:c1:87:48:65:c6:ec:
d2:d9:0a:ff:4c:47:dc:59:22:6b:d0:b5:2f:13:ce:
c8:42:cf:5a:f0:00:a8:36:b2:b5:7d:01:10:be:66:
08:48:2c:6d:e2:c7:30:bc:cf:d5:47:80:5b:63:86:
4d:79:27:33:a4:02:87:c4:82:b1:d2:a6:34:75:86:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:0E:7A:45:47:98:69:34:A4:93:C9:E5:59:84:63:90:78:82:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:45:a3:ba:47:bb:1b:f9:80:cd:02:6b:52:44:e8:db:7c:14:
a4:e9:19:b0:04:e2:5b:d8:56:ed:e0:93:f6:da:67:59:e4:df:
97:74:69:5c:8b:0a:e8:f0:84:fd:a4:0c:d4:06:54:6e:22:ee:
b0:fb:cc:ed:d1:0a:6d:7f:14:c4:37:2a:ab:95:f2:11:72:ce:
53:07:91:d7:d8:fe:50:ce:ff:2e:b7:cf:80:c6:29:75:1a:24:
02:ad:29:27:46:71:f1:9b:df:23:e4:fd:90:95:9d:aa:fe:44:
e6:b8:49:d3:36:76:d6:4e:36:df:20:c8:45:9c:03:a2:25:cd:
36:c8:3e:24:ca:3c:e7:2c:c6:5c:be:80:66:f0:04:ac:b6:c0:
77:af:5b:76:01:4a:d0:46:d3:a5:dd:5f:26:9d:c1:43:26:ea:
fb:59:63:df:c7:ce:cc:ce:31:af:d1:54:14:d2:f6:5e:53:a9:
0a:4f:68:86:4a:37:2f:69:3c:69:eb:d2:ae:f8:0d:4a:2c:94:
db:bc:1d:10:b4:57:b7:6d:19:ad:35:a2:33:a9:7b:d6:34:c8:
88:3c:0d:be:09:71:42:97:5a:3e:74:c5:6c:fe:03:8b:0d:07:
48:b5:dd:6a:51:73:c7:43:61:54:e6:97:b1:d0:2c:2b:e0:3c:
5f:3f:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:18 2025 by rpki-client