Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4d2e09-0b28-3778-a68f-b2d8685c74c3.roa
File: 9d4d2e09-0b28-3778-a68f-b2d8685c74c3.roa (raw, json)
Hash identifier: 3U+LWry4ohMNLcaqj5QvmuODVs1p0oj3q/qwuvtGOVI=
Subject key identifier: D7:84:25:38:D9:62:4E:F4:6E:0B:22:C1:B5:01:9B:E3:84:BB:FB:DB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0E1E9810FA150ACA8AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4d2e09-0b28-3778-a68f-b2d8685c74c3.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.105.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0e:1e:98:10:fa:15:0a:ca:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=c309dd3e-e227-4ff8-ba96-88c66eea8e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:fc:e3:26:19:68:dd:2d:75:96:ac:7a:50:
6d:d7:ae:45:ba:3b:6c:78:dc:40:61:fd:8c:75:70:
50:6b:02:65:79:2b:33:c3:c6:c4:a6:58:4a:1b:9b:
2c:f7:f9:76:e2:be:72:32:f6:93:46:7c:78:9c:91:
76:73:79:26:0c:e2:6b:c0:7b:cc:04:2f:46:29:d6:
a1:0f:5c:7f:ce:41:a1:65:99:86:6d:f9:90:80:82:
2f:7c:c4:28:24:cf:53:15:00:51:30:12:a7:37:92:
ab:27:3e:2d:19:c4:47:ff:e1:80:99:fd:20:b5:6a:
dd:a6:a8:10:76:c9:00:71:8e:6b:c0:82:4f:b7:48:
67:04:e6:11:77:db:01:3e:0d:3f:f7:17:ce:13:1f:
87:52:34:dd:73:6e:c9:1a:50:05:b1:27:9b:f1:ea:
95:75:3d:21:42:d7:a4:11:5f:55:63:9c:47:39:f1:
cf:10:e7:25:5e:c0:9a:56:e0:71:a4:ee:57:ca:43:
be:02:a4:ca:7d:b8:62:73:21:d2:d5:95:43:b8:ef:
28:de:ca:be:e7:32:fb:5f:d0:91:31:bc:b6:c3:53:
b9:4b:cf:e6:40:93:2c:ec:c1:12:73:99:2c:34:7c:
82:a4:8b:0a:ff:a0:5d:91:de:d6:65:19:de:1d:74:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:25:38:D9:62:4E:F4:6E:0B:22:C1:B5:01:9B:E3:84:BB:FB:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4d2e09-0b28-3778-a68f-b2d8685c74c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.105.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:27:72:f3:94:a1:9b:3c:24:09:44:a6:d3:d6:a9:a5:fa:31:
5a:a7:25:f2:ff:4f:91:de:cc:28:6f:f7:a1:ab:0d:61:91:d0:
28:5d:22:0c:9d:25:c6:01:51:47:e3:9a:1d:36:87:15:07:1f:
39:5d:63:ed:08:1b:60:94:ef:fb:67:f6:6e:37:d2:1a:e5:53:
c1:eb:db:ad:4c:7d:1e:d7:01:48:bf:0c:11:b1:75:b7:3f:6e:
53:21:e3:d8:76:5c:0e:a0:8d:97:a8:c6:6c:47:03:30:c9:9a:
13:27:65:f2:66:25:ef:7d:eb:cf:a0:ee:eb:ac:7d:5b:2e:d7:
fd:6f:47:2a:c5:0c:ec:33:82:10:8c:b3:bb:4d:df:01:c8:76:
9f:30:32:74:ee:08:26:a6:7d:11:bb:81:28:3c:ce:96:3c:5d:
98:01:4d:b5:cf:fe:76:e0:2a:38:e4:ee:81:41:6b:45:fb:54:
99:08:2f:2a:df:14:25:86:39:ac:5a:80:5f:5f:58:20:05:3f:
ff:64:20:4a:ad:70:24:2c:fa:f9:dd:3c:cc:d9:1b:90:9d:75:
44:ba:68:2c:bd:c4:36:f0:a6:47:e7:c2:ab:be:e7:34:8d:87:
a3:3e:6e:76:5f:af:7d:ac:d5:ee:ab:83:41:0a:c4:65:e7:64:
7e:8b:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:24 2025 by rpki-client