Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json)
Hash identifier: 1602ghufthFExSSXcVylWQdaDexIvmRyH0aVNapDsP4=
Subject key identifier: 71:41:01:7D:68:8A:14:90:24:47:1E:B6:6B:C5:C4:D0:8E:1A:71:02
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E08CC8DB34E230121500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.107.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e0:8c:c8:db:34:e2:30:12:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=2c7b447c-95eb-4427-8b62-b1d20a05f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:15:1b:d0:aa:a6:35:5e:79:89:e2:d4:13:
ee:e7:1d:33:19:6c:e4:c5:bb:ad:2b:d6:77:1a:4a:
81:e3:91:a3:55:67:7a:82:fc:9f:f8:ab:1e:b9:bd:
2c:88:cc:06:e5:b8:c6:4a:24:1b:9b:05:11:e9:0e:
e7:e7:31:b6:3a:bd:ec:f7:18:fc:34:97:8a:2c:fd:
e1:eb:f8:5c:b3:23:f6:5e:74:6d:06:d1:d4:f4:53:
47:cc:da:41:72:4f:85:3c:91:c5:3d:dd:81:7f:f0:
bb:e9:9e:73:e3:7b:b0:ac:39:ae:7a:f6:fb:f0:b9:
de:d3:2d:89:2a:fb:a2:ce:ab:48:87:d6:de:d2:e9:
7e:14:41:cc:3a:fc:51:be:97:2c:a1:af:ce:fa:8d:
f0:0b:4c:6f:19:8f:47:fd:3f:fc:b3:9a:a8:d2:43:
27:b6:c8:79:a8:6e:2b:75:3b:97:34:c9:82:54:23:
90:b1:3b:36:cd:c6:99:9c:3d:97:ff:90:f0:97:cd:
6c:fc:26:56:ff:0a:5b:d3:d3:1c:2c:61:9f:d2:70:
53:ab:13:af:28:58:00:23:d4:d0:01:94:b9:0f:84:
af:39:b8:13:a3:c9:23:b9:7a:28:f7:de:c3:fd:e0:
2e:bb:4c:71:45:64:26:29:03:ea:3b:e4:ae:09:54:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:01:7D:68:8A:14:90:24:47:1E:B6:6B:C5:C4:D0:8E:1A:71:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:dc:d1:a5:ff:fc:e2:91:7a:18:77:e1:0e:32:73:a4:3d:ed:
5f:cf:38:a9:ab:4f:e8:78:c4:e0:cf:b4:3b:71:d0:5c:42:07:
a5:55:20:07:8d:8b:b4:82:b2:a4:a1:05:1c:a0:f5:28:cb:3b:
cc:29:16:78:ff:c8:f5:f9:51:12:8b:93:cc:1e:fc:10:12:7e:
a4:66:88:be:9c:a5:cf:ba:f7:c7:8c:3e:fb:43:b4:3a:9e:a0:
74:69:7f:cc:ab:d8:65:a4:0c:d7:7a:61:2c:8d:60:56:90:ed:
46:44:7f:b4:58:78:2a:a5:26:e1:32:34:79:21:16:af:7c:62:
73:c7:2c:15:4e:67:93:8e:4d:c6:9e:f5:7a:ca:06:a5:e6:6b:
8b:6c:26:f7:b3:3a:e2:0f:6f:d7:c9:10:91:8d:8a:61:09:76:
cb:c9:17:03:e1:82:ac:79:7f:d4:56:54:40:dd:73:6a:53:e1:
67:e8:94:c6:93:8d:bc:54:17:ce:d3:5c:4d:6d:48:b9:ff:12:
dd:5a:b2:c1:ed:40:3d:b0:06:a7:fd:a4:ba:14:26:2e:2a:dd:
75:dd:52:dd:cd:af:3c:6e:91:1c:44:92:36:85:a6:62:2c:44:
e1:f6:3a:39:d2:62:c0:07:71:e7:3a:35:9b:1b:7d:21:c2:9f:
00:e6:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:08 2025 by rpki-client