Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5dacbb1-b926-337b-9f7b-67d44f745392.roa
File: a5dacbb1-b926-337b-9f7b-67d44f745392.roa (raw, json)
Hash identifier: PHKfGyNViKASVSL4zsp/WswWz9be6NRbtWw9KCue5CE=
Subject key identifier: 6A:19:DA:27:03:D8:F9:6F:E1:09:BA:CE:DB:06:EC:9F:4E:11:F6:A5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E04C3DA15503BEBC2268
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5dacbb1-b926-337b-9f7b-67d44f745392.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.111.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e0:4c:3d:a1:55:03:be:bc:22:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e9ccf385-a08c-4107-9ae9-0873f532e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:8d:2e:af:72:8c:ee:7f:da:d0:2a:41:28:
ec:2f:78:83:4a:18:b2:30:31:33:3b:94:43:03:75:
69:af:11:9c:a2:43:59:d6:8d:43:2d:f0:9d:64:90:
87:72:18:13:80:fb:1a:33:b1:ca:87:0d:28:1a:a0:
bd:81:d9:de:b3:3e:f5:d2:d0:b2:03:38:ed:4a:ed:
9e:6b:fe:79:9a:69:30:dc:4e:1c:53:06:5f:8e:ca:
97:16:4e:e7:c9:02:7f:56:d6:cc:a1:89:0f:33:5e:
8a:3a:fc:3e:74:e6:a5:71:10:31:36:af:27:88:f4:
b5:1e:37:e4:7d:5b:3f:17:c7:35:61:98:05:9c:d9:
50:ec:e5:0f:38:88:a4:e9:7d:94:43:ee:35:a7:f0:
4f:b1:c3:a1:1b:a8:00:e7:0c:af:27:b8:d0:c5:2d:
89:8f:f9:86:86:25:30:b4:26:27:26:a1:52:2d:16:
09:8c:ed:82:5d:b6:16:77:34:aa:0c:64:c0:07:be:
a5:5f:3f:d9:7e:c2:6e:f1:bb:c3:fe:6a:86:0c:b8:
ff:0e:be:ee:b4:38:9a:dc:39:4f:0b:a3:be:2b:25:
05:78:8c:f4:ab:6c:3b:df:bf:49:16:55:29:5f:05:
3e:ab:4e:c7:04:d6:28:50:34:a6:43:f5:5b:73:de:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:DA:27:03:D8:F9:6F:E1:09:BA:CE:DB:06:EC:9F:4E:11:F6:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5dacbb1-b926-337b-9f7b-67d44f745392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.111.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:43:70:2f:12:85:04:67:34:50:36:2f:45:64:4a:78:f5:12:
50:6e:6b:23:82:b8:ab:05:d9:c2:3a:2f:cc:83:4d:cb:49:1c:
8b:9d:7f:b3:57:70:1c:db:75:44:76:fa:b9:02:55:8a:05:68:
a9:a1:87:9f:fe:dc:65:cc:65:bd:64:d9:aa:fe:0c:d7:ce:41:
fd:30:4d:a7:85:78:ff:ea:40:e8:a8:5e:e8:56:fe:fe:be:8b:
a8:46:d8:87:22:c5:9e:76:f8:fd:dd:63:ad:06:f8:76:0d:a3:
f4:ad:9b:b4:c6:80:13:8c:c3:26:66:dd:38:90:40:f4:ae:d8:
b6:a4:bf:6e:e0:66:f2:12:ed:fa:1b:7e:0d:15:99:48:c8:1a:
b8:8d:08:ce:b8:12:3a:01:c6:98:c2:f8:6f:f8:d4:c9:e7:9e:
07:55:52:96:d5:ea:76:aa:2f:fb:18:7f:26:35:f8:2d:db:e5:
ff:eb:66:9e:96:54:8b:e0:8b:28:c5:e8:4d:e1:ae:4c:68:63:
64:0c:46:d6:e3:dc:56:3d:cb:83:e8:c1:99:d4:b0:af:60:5b:
03:92:cc:3d:6d:da:56:31:9f:51:c5:f3:43:55:c6:79:61:90:
50:68:dc:88:b7:a0:b6:e6:77:8c:cd:e6:a1:4f:8a:85:3e:37:
0e:48:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:47 2025 by rpki-client