Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f3e1d4-7610-32d4-8331-f5ca55212d3b.roa
File: c3f3e1d4-7610-32d4-8331-f5ca55212d3b.roa (raw, json)
Hash identifier: SI8nPhNcZl2TiWdSxED896gEUNDytPvFoEUENlWFGTU=
Subject key identifier: 13:70:9B:BC:E0:11:53:31:B6:0F:A7:27:B3:D7:F2:2F:E3:A0:1D:13
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E06DE34028DCE6126900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f3e1d4-7610-32d4-8331-f5ca55212d3b.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.107.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e0:6d:e3:40:28:dc:e6:12:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=c20f57d1-b973-4341-9e06-66ad44cda79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:83:48:ee:6a:2a:99:6f:12:15:bc:67:cb:
dd:47:85:5b:c8:ad:64:01:db:b1:11:1d:d4:9c:2e:
46:c8:d9:88:0c:51:c1:97:80:42:cd:b5:df:5e:0f:
b6:5e:8f:59:d5:b8:1a:ab:4a:f5:40:a8:80:55:be:
e3:4a:e5:85:a6:87:2d:ad:25:4b:52:f3:f3:f4:04:
6e:00:a7:a2:95:f7:42:88:75:93:22:d9:98:09:a6:
3e:d5:03:df:29:c4:9c:2b:eb:2c:2f:05:81:b5:cb:
70:f6:82:b9:50:3b:4d:ed:78:de:cf:20:55:6b:14:
bc:d7:0f:31:3b:dd:3c:77:41:6d:ad:4e:db:c1:f4:
f1:0b:bf:0b:b4:a9:99:7d:3c:b8:e1:5d:fc:38:64:
db:80:71:e7:be:a4:1f:94:e9:32:db:87:6d:77:6f:
3f:96:da:ba:2f:5d:d8:9e:84:66:11:6c:89:5f:3c:
be:e1:29:a4:e5:71:f4:c0:2c:7c:11:a8:fe:bd:8f:
4f:17:48:97:db:8a:29:2d:db:82:11:08:3c:6c:b5:
db:4f:0a:6c:67:d8:15:d2:49:ea:69:6e:05:a1:b4:
ee:6e:eb:24:21:d3:a3:5b:f0:05:0d:48:90:f2:0a:
0c:7b:a4:b4:78:7c:0b:eb:c3:57:68:c0:39:03:83:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:9B:BC:E0:11:53:31:B6:0F:A7:27:B3:D7:F2:2F:E3:A0:1D:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f3e1d4-7610-32d4-8331-f5ca55212d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:6a:62:a7:86:b8:22:70:ae:90:91:3c:bd:5d:8c:21:8e:1f:
67:01:e5:09:3c:5c:d8:a0:9a:21:57:31:6b:f1:f2:95:37:e0:
cf:e9:d9:05:df:de:df:e3:8f:b2:2e:5a:5c:81:06:45:ca:d1:
14:c8:0f:f8:2c:bf:fd:d9:99:db:f8:2c:cd:34:03:78:28:ba:
0c:92:38:cc:8e:49:fb:25:5a:3c:ce:7a:01:b8:d0:b4:5f:6f:
b2:e0:6a:f9:1f:bd:40:8c:9e:96:c7:60:61:9a:3a:d1:a4:4e:
4c:07:81:86:05:6d:d1:c5:a2:83:b1:c8:50:eb:66:e2:54:60:
7f:d0:63:85:5c:19:7e:98:cd:2a:18:cd:a6:14:f9:d2:aa:de:
2c:b5:1d:f1:f9:3d:17:8f:ee:0a:f8:01:f3:de:5f:02:42:ab:
fa:16:29:1e:98:d3:8e:fe:fc:4c:c6:fc:b3:90:5c:89:7a:67:
47:7d:b7:2c:c0:14:00:8c:4a:d7:7a:12:d2:e7:28:79:59:ed:
80:9a:08:d2:91:64:35:b7:4d:21:55:be:ec:f5:dd:86:e6:4a:
70:64:57:6b:fd:73:f0:f6:e8:a1:68:e5:cb:56:c6:e0:55:45:
31:d0:79:05:9a:61:90:0f:b4:c9:ad:c5:ed:2c:e1:bd:f4:1d:
67:5a:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:38 2025 by rpki-client