Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6e84ef7-4316-33ed-b2ac-340c6e1bb130.roa
File: a6e84ef7-4316-33ed-b2ac-340c6e1bb130.roa (raw, json)
Hash identifier: KcxTAlQPjEQHNkNEZJQfdPlHrAjAdymRhipxmDAr2xg=
Subject key identifier: D5:BB:F2:12:13:35:1C:4F:6F:01:7D:35:1C:F9:CC:5E:C9:62:93:A5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0B18755BE2D95C42F090
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6e84ef7-4316-33ed-b2ac-340c6e1bb130.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.103.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0b:18:75:5b:e2:d9:5c:42:f0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=7cba61bd-15da-4f01-b136-705fa543807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:43:1c:71:46:d9:20:88:93:5f:28:20:1a:
45:1e:47:04:d8:66:08:b1:4f:fb:be:fa:53:8d:13:
f8:33:90:93:e7:3b:48:12:1a:6e:e5:14:7c:0d:40:
09:ce:2e:5d:db:b7:cb:fe:14:81:8f:49:b7:fd:9a:
23:7f:3d:f7:43:54:fe:78:cb:ac:52:80:93:b7:01:
64:34:7c:0c:67:3c:d9:3c:35:e1:75:36:ba:1c:44:
5e:4a:65:f2:6d:7d:2f:68:f8:39:87:7b:6b:50:d1:
35:da:6e:15:87:73:4e:99:0a:8b:0f:4f:95:7a:7f:
bf:b4:0e:d6:0a:41:27:61:5a:f3:83:73:ac:c4:91:
88:69:a6:67:c6:c4:d2:72:57:b6:e7:a5:04:87:bf:
da:44:8f:24:b3:e8:34:7f:60:8e:28:e0:9a:01:bf:
30:da:45:16:ff:7a:2c:37:95:87:1c:c1:dd:24:07:
9d:47:d7:fc:0e:97:58:0a:af:ab:5b:d3:f6:ce:93:
3c:44:fd:f5:fc:fb:dc:3c:d7:d6:12:ca:87:db:5b:
91:43:42:85:22:a3:46:5d:0a:ae:4f:a3:f8:98:44:
be:84:c5:3d:53:02:3a:84:7e:14:c1:17:41:d1:c9:
50:cb:a7:c2:2d:83:e1:f3:ef:e1:aa:23:af:c1:cc:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BB:F2:12:13:35:1C:4F:6F:01:7D:35:1C:F9:CC:5E:C9:62:93:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6e84ef7-4316-33ed-b2ac-340c6e1bb130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:71:b2:0f:5e:1b:33:40:0b:cb:bb:6d:b6:c4:51:b5:ee:11:
c0:5d:a5:4d:2d:c2:1a:b5:89:e7:b9:72:f0:c6:da:12:67:2a:
30:58:77:5f:ae:44:90:d7:5b:41:bc:a0:57:61:07:47:b9:e8:
bf:6f:b8:fe:21:1c:13:27:f5:73:73:e6:47:ba:d3:70:17:74:
d7:f1:0a:b2:08:80:38:e5:f5:68:2d:e5:eb:94:e9:3b:99:78:
76:1c:e5:a2:8f:3d:06:5e:e5:50:5f:7c:61:b9:f3:4d:81:a1:
6f:14:96:5b:16:7b:0d:9f:94:ca:d5:ba:c3:c1:01:c8:e7:33:
cb:2e:95:50:f3:67:b8:27:e3:d0:09:10:09:85:2a:ca:40:67:
88:94:95:a2:cb:9c:69:aa:fd:03:fa:42:bc:56:8f:43:05:4d:
ac:f5:41:a2:40:39:1b:e7:8c:1c:cc:1e:e9:40:b2:03:90:f5:
22:aa:bc:f9:ff:b4:f7:54:5c:c4:28:0c:5e:80:ea:9b:90:fa:
d3:29:b2:5f:40:a3:80:de:f7:88:61:f7:fb:78:46:16:cf:ab:
eb:02:17:1c:d5:19:9d:58:20:b7:a9:27:b6:d6:7f:30:eb:c1:
77:54:18:37:2f:80:44:10:fa:05:43:de:ea:17:7d:31:b0:b0:
d3:a4:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:07:19 2025 by rpki-client