Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
File: 9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa (raw, json)
Hash identifier: I9ZNAiBS0fVFVVfEy/TFcYgC65Qybzg/5RTMrFaup8o=
Subject key identifier: 48:7A:98:7E:8B:AE:5D:9C:F3:A3:58:80:D0:BE:85:F0:99:CE:8B:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C36027B58FF56E6578D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.76.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:02:7b:58:ff:56:e6:57:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=d30cf351-6880-43ee-a2da-6a09741638b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:4a:92:2c:dc:25:23:13:ff:3d:93:88:ef:
22:be:0e:94:1c:ea:f7:35:d2:ac:3c:b0:91:f3:d2:
42:5b:0e:72:ce:73:94:16:60:77:d5:dc:a8:ea:9a:
2c:a8:22:7a:3e:e1:5d:f3:be:15:d9:27:3e:0f:09:
03:3f:2f:9a:88:39:4c:e8:20:5a:b4:cd:0c:fe:d9:
5c:b7:c1:0d:eb:e7:0f:2a:ea:81:e3:36:50:28:9c:
7b:93:65:7a:bd:9a:e6:25:21:8f:7a:61:4d:bf:8b:
40:64:04:f3:93:36:44:33:58:4e:58:12:7f:a6:bb:
5c:53:a9:bc:1d:68:07:60:51:ca:28:29:c5:cf:0f:
7b:63:60:af:3a:b9:02:78:6b:77:a5:f5:7d:c8:34:
76:52:fd:08:a2:df:0c:b1:57:a5:df:74:5e:6a:e7:
ed:44:4e:8d:30:af:f2:da:ae:1f:9f:23:c5:a2:cd:
94:20:82:6b:7d:6d:c2:79:d3:f2:b0:20:1a:73:a5:
49:f8:9f:8b:72:01:bb:51:72:58:32:63:5d:81:c8:
26:37:ed:05:8d:ba:0a:fe:e5:6b:e5:ea:e3:ee:17:
52:7b:ad:f2:7b:d4:32:a9:cc:2e:e6:5a:c7:83:ae:
70:3f:94:81:80:2b:88:b5:0e:97:4f:28:97:57:42:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:98:7E:8B:AE:5D:9C:F3:A3:58:80:D0:BE:85:F0:99:CE:8B:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.76.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:31:40:2f:38:d9:4a:73:34:29:a7:cd:9e:4a:63:2d:43:76:
ef:f2:cd:bf:01:57:6d:c9:06:69:6a:00:ab:2c:a1:40:24:83:
61:cb:ce:93:a6:6c:4b:1f:d5:e1:60:3b:5d:46:17:cf:23:30:
1a:6e:d5:84:94:30:1c:58:c6:c0:f2:e4:85:c5:53:34:84:04:
46:94:94:39:12:81:57:02:f1:da:bb:85:5f:98:0c:88:66:0b:
75:c3:d2:cc:84:fd:c7:95:49:c7:7d:d6:1a:2a:41:aa:0f:d7:
de:fb:dd:e5:f2:db:79:dc:e7:0c:df:ff:b6:eb:52:7d:26:79:
19:f7:53:be:21:d1:87:0e:f3:df:58:e6:56:35:53:03:db:66:
37:f6:dc:ae:9b:8d:0b:f7:e2:fc:75:4b:2f:71:dc:ab:05:7b:
70:62:2a:84:c8:ad:38:e6:9a:71:f1:64:a6:06:dc:6a:6e:b7:
72:90:bf:bd:c9:00:6f:52:e8:8d:6a:3b:29:69:5a:20:9e:92:
24:8b:8c:d6:e0:22:ab:e2:12:c1:b8:95:77:d8:f7:a4:37:e7:
65:27:09:49:cb:37:69:e1:b9:a0:7f:2c:24:89:05:1a:64:3b:
26:27:87:b6:3b:ce:6d:ad:14:65:7b:cb:2d:89:b1:d6:c4:8e:
01:4d:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:10:01 2025 by rpki-client