Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813c6b9d-c45f-3212-9b48-5505f8aac6ff.roa
File: 813c6b9d-c45f-3212-9b48-5505f8aac6ff.roa (raw, json)
Hash identifier: 8KgvJksn/P7n2GoF+tZyyKEAIIwDqGzgxCBy0etV6k8=
Subject key identifier: 98:D1:93:27:48:96:3B:87:9C:BC:70:2A:F1:9B:FC:E7:33:E7:98:D7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC050CCEEA7298FCCC7B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813c6b9d-c45f-3212-9b48-5505f8aac6ff.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.103.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:05:0c:ce:ea:72:98:fc:cc:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=4f54864f-0ac6-44ca-8fc6-4ba6ce7f6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:1c:dd:41:1b:58:b2:b1:da:cf:30:47:66:
01:3f:03:ef:4d:fd:00:7d:8f:9b:9b:61:49:d3:0f:
23:b2:bb:92:e0:62:81:82:6a:25:36:4b:5c:e9:93:
59:8a:44:07:af:de:9d:19:8a:31:53:10:49:b9:0e:
3c:b1:51:5e:8c:ca:f8:7c:43:b1:84:68:81:86:ce:
ad:53:d4:31:20:e5:fc:cc:70:ae:27:bf:e0:3a:06:
6f:25:9e:78:c9:bb:f8:0e:97:0f:7d:e1:8a:60:6e:
2c:d4:a2:27:b1:78:fe:50:75:1e:81:46:a5:1b:8c:
ff:d0:c2:57:65:59:2f:a4:a0:4b:26:29:34:b4:17:
52:fd:90:7b:0e:85:27:5d:62:ae:3a:0a:31:93:1e:
60:22:f3:60:71:2f:42:b1:e6:06:01:b6:af:e7:1a:
78:45:d9:ab:11:1a:0a:f8:61:1d:56:b7:87:7d:81:
ad:e7:96:98:04:c6:70:f4:e3:1c:ae:99:0b:56:08:
22:04:99:35:fe:e0:63:6e:70:be:1d:19:d2:c1:a3:
d6:00:bf:4d:a0:5c:65:ca:7c:87:ba:90:38:55:ae:
f0:54:17:e0:d1:e8:80:44:00:96:fa:1e:c8:e6:f8:
53:90:5d:c0:73:fa:ec:fd:c8:7f:68:07:fc:e9:c8:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:93:27:48:96:3B:87:9C:BC:70:2A:F1:9B:FC:E7:33:E7:98:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813c6b9d-c45f-3212-9b48-5505f8aac6ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:92:74:b3:a8:ad:5c:e9:e7:88:91:59:5e:83:1c:89:bb:12:
21:77:51:88:bf:e0:09:e5:d7:3e:6d:6d:fb:96:29:8e:c8:c6:
b2:7a:b5:20:35:2d:d4:07:02:6f:ab:f1:fb:92:b1:1d:3e:e5:
75:d3:5c:46:4f:65:7d:e7:fc:1b:56:fc:92:2d:6f:d1:c0:80:
5e:15:70:9f:ae:cd:bf:5a:f1:35:0c:12:85:dc:d9:64:60:eb:
e5:39:7d:db:32:d7:8e:50:4d:6c:68:cb:39:87:51:fa:c6:30:
68:b1:aa:20:f0:52:d1:84:cc:a7:dc:1e:07:70:18:4d:1b:df:
e5:c8:e9:b0:b8:49:f4:f8:31:14:87:63:07:e7:06:c5:9e:70:
ab:dc:e7:d1:0a:39:8a:31:ea:b4:2b:a4:93:a3:2c:1e:54:26:
0c:59:6a:dd:8f:07:01:a5:94:fe:bb:14:09:b4:4e:80:0c:80:
3b:41:22:58:40:cc:67:c7:0b:2d:f6:70:e0:24:1d:0e:1b:31:
af:b9:a7:7a:58:80:9a:a0:4f:5a:d3:60:f6:15:e0:54:a3:9d:
0d:80:31:c5:3b:68:81:94:d4:da:73:4a:93:f8:2c:48:ba:7a:
81:ce:23:f2:88:fd:cd:de:7a:86:d5:bc:bd:1f:d1:c9:13:58:
c1:d5:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:32 2025 by rpki-client