Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa
File: be2b4709-f250-3be3-b3c2-b101643bd3a3.roa (raw, json)
Hash identifier: cU14gCGZ49Mc3hOmR5FYU9u/59SX4/ll7lg2kmKuzfs=
Subject key identifier: C3:A0:44:F1:FA:BA:4F:0C:91:30:77:CA:37:74:EE:50:D4:BA:6C:C0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3689707BBAC6C39F1BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.90.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:89:70:7b:ba:c6:c3:9f:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=b54bb08d-d773-40c9-806b-493b4ed37adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:b8:5e:0e:df:84:da:2c:c7:81:64:3e:c7:
b0:d4:a4:23:ad:d3:06:b6:0c:8d:ff:c6:9b:66:b0:
6a:52:c0:41:0d:ff:cb:e4:4f:b9:29:24:a6:13:7f:
0e:0b:fe:19:cf:83:ed:5f:09:c7:6b:09:96:36:1b:
9d:29:6c:0e:00:84:da:70:5a:fe:7a:88:af:02:f5:
df:07:1c:92:b5:2d:50:d8:38:cf:f6:22:95:c0:51:
4f:98:af:3f:b1:9b:49:6c:8e:21:7f:ae:ff:4c:57:
36:cc:93:fd:c8:14:7e:df:ff:a0:fd:79:12:9f:6d:
d7:62:0b:bc:15:2f:e4:8f:26:51:4b:8b:a9:49:66:
36:ac:50:66:23:d7:89:ca:fb:91:24:90:65:7e:2d:
41:88:76:97:a1:21:2c:da:66:95:1d:d9:44:7a:82:
22:06:f4:d1:2a:ce:e0:dc:d7:bf:7c:2e:b0:e2:35:
ec:50:27:dc:ec:aa:c8:9f:7b:b4:a0:27:9c:3b:b1:
30:19:eb:bd:d7:97:94:44:22:ea:53:37:dc:88:40:
49:57:6d:d6:a8:f1:ed:56:ad:af:d6:b8:b4:08:51:
cc:29:15:0a:8a:57:72:8e:e6:a6:aa:62:8a:6e:82:
2c:95:9a:f9:e3:d6:3e:18:0d:e7:dc:2c:8f:ff:0a:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:44:F1:FA:BA:4F:0C:91:30:77:CA:37:74:EE:50:D4:BA:6C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.90.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9a:1b:08:5d:1c:7a:fb:07:b4:db:e5:ab:ca:5e:c0:c0:3e:
f0:96:99:9c:bf:3b:6f:0c:2f:82:3e:52:61:2f:5c:06:61:fc:
94:3d:14:14:84:64:cb:b8:59:fd:97:f5:d2:b0:86:d2:a4:dc:
ab:da:61:62:98:03:1e:a2:38:38:a7:4d:19:32:77:f1:68:7e:
e3:47:f6:c4:5d:d2:46:b2:eb:3d:ea:74:6e:30:54:55:51:cf:
9a:7d:8b:5b:61:02:a3:4c:62:e3:6d:c0:eb:74:ec:75:01:48:
34:d3:fc:c8:52:f0:03:51:46:35:ca:c5:0a:15:6e:eb:78:56:
0a:c0:ae:36:09:71:c9:04:50:17:af:50:1a:b6:98:9e:54:af:
ff:33:ac:5c:2f:df:66:93:d0:33:09:8d:ca:c8:b0:37:3a:ef:
b2:cb:7b:c0:76:6b:b2:ae:d9:0d:d3:a2:b7:1b:c4:9c:d5:90:
47:76:e6:b0:e7:d5:ee:7e:44:59:fe:96:46:62:6d:04:e6:18:
37:8a:3a:7a:96:0b:92:09:ef:ec:09:21:83:27:50:c1:ba:c5:
e0:81:08:b7:c5:98:10:46:c9:ca:07:ca:83:a6:b8:6d:a3:10:
9a:aa:7c:f0:33:a1:20:df:ef:b1:85:e5:7c:14:74:de:c5:ec:
f2:6e:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:25:35 2025 by rpki-client