Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa
File: d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa (raw, json)
Hash identifier: Ckkh9Y2OzdOOmpxk1jyQoj9aQLGxvfXSjK8zn683zk0=
Subject key identifier: 4D:CC:3C:FE:7B:AC:C7:71:05:9D:88:73:4D:AD:DD:DB:9A:3A:0C:12
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3EA765D2F9738B22ECD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.106.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ea:76:5d:2f:97:38:b2:2e:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=093d21a9-856e-41ab-abd8-a1ab11b3fd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:f3:9c:65:5c:43:32:5d:14:be:05:9b:85:
6c:a7:61:18:9c:74:55:db:b2:47:8b:7e:d3:fe:45:
e0:a6:11:d6:25:e3:58:62:36:c0:f5:60:c4:75:ad:
f1:76:4e:55:d9:2b:b1:61:07:c3:ef:bc:5b:12:2a:
5f:e2:fe:3f:65:f1:0e:c0:e6:b0:55:02:c4:c8:ad:
f3:48:7f:3f:c4:42:8c:d0:18:fc:7e:40:db:94:36:
ac:45:6b:77:1d:9e:48:dd:25:65:1e:c4:b8:ff:4b:
68:1d:3b:93:01:de:fd:48:28:7c:f1:7f:29:c6:e8:
c7:c9:9d:bb:67:25:15:f8:3b:87:64:2d:15:39:1c:
8b:c2:de:c6:00:a8:9d:6e:1f:ab:c8:6e:f0:71:f5:
57:20:bf:da:f3:aa:f8:90:5c:5d:97:7f:7e:e8:87:
fa:49:b0:8a:53:53:48:24:ba:77:66:8a:b6:9e:dd:
b1:ec:34:3a:65:b7:04:b3:7f:9e:aa:27:5a:e8:bb:
7a:43:57:e6:21:e4:6f:39:e2:4d:81:84:75:26:99:
6b:88:93:7f:23:16:dd:c8:f5:bf:73:1c:3d:de:17:
15:69:ce:d3:f7:76:ca:ab:92:37:e3:7f:c6:05:a1:
79:e5:92:a0:42:52:0b:19:9e:74:7d:b1:8e:da:cf:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:3C:FE:7B:AC:C7:71:05:9D:88:73:4D:AD:DD:DB:9A:3A:0C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.106.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5e:1d:6a:ff:29:e6:0c:a5:6c:24:d5:a6:50:62:b8:48:58:
05:bb:f8:ef:a0:37:67:85:86:0a:8d:be:39:25:a1:43:14:5b:
62:e4:1f:71:fd:c4:15:e1:73:96:20:37:4b:57:5e:49:bd:a8:
5b:c5:fe:82:81:c3:fc:ba:59:ab:7c:8c:60:a2:7c:9a:a6:d0:
cd:9a:14:e7:ea:19:ae:2e:da:c5:ff:cf:1c:5d:fa:41:05:20:
45:a3:58:d3:c1:9a:c8:90:0b:53:35:c5:3e:f7:83:ea:1a:1c:
a4:02:b5:f4:44:96:b3:2f:68:aa:65:19:b1:90:27:56:05:31:
b6:b0:2a:3f:de:77:ef:5e:bc:ab:de:ce:21:eb:3a:f6:e0:54:
20:2b:35:61:ba:f0:85:48:e3:fd:7c:20:92:6c:cb:b8:50:9b:
6f:2f:48:5a:91:6b:e1:91:07:33:24:b6:a5:f9:f0:8b:9d:df:
db:bf:43:18:0a:c5:23:a4:69:fc:df:80:5c:cd:ae:ff:1f:6b:
8d:c2:77:94:79:22:e4:d0:73:54:9b:ec:53:8e:a6:ec:0b:21:
db:81:61:1f:c0:61:a9:d0:c5:99:6d:3a:2c:fc:db:54:59:e0:
e8:25:49:f3:dd:e2:cf:c1:74:1b:f8:8c:91:01:4e:80:f0:f1:
34:55:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:01 2025 by rpki-client