Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
File: d655159a-661f-3b96-b635-e8b5d4a0a95a.roa (raw, json)
Hash identifier: ElUfMQlwvZEelrEYUg5WIf8RZhZtHAM5Qy7ZXPfJKm8=
Subject key identifier: 3A:EC:87:88:F1:97:AE:A5:EC:01:B2:AF:BC:45:35:A5:97:F7:11:E7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0B5D577F170568D76380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.96.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0b:5d:57:7f:17:05:68:d7:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=9982002c-c4ad-4911-b0e7-cac8fbf04eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:5d:a9:0d:21:d5:bf:c7:f1:cc:7e:1c:66:
25:69:d5:c7:f8:ec:a1:a3:8a:83:70:0b:4f:c0:41:
f9:b6:ab:3c:04:e6:06:47:46:bb:79:a2:96:3c:10:
ca:92:a2:b7:b6:ae:45:3a:55:8e:37:e5:e5:15:26:
9f:4e:da:4c:fd:58:87:c5:01:d3:7c:b6:a4:b2:ca:
f8:9c:b8:e1:2f:ba:29:4d:b3:4e:65:b8:dc:83:18:
88:8e:67:df:2f:65:d3:e6:fd:82:13:f1:c5:62:ec:
18:09:42:cc:ad:4a:50:94:96:48:3d:3d:02:84:43:
9c:22:8d:04:72:35:66:18:82:b6:07:69:40:eb:9e:
18:32:9f:98:75:ab:4f:23:51:5f:69:6e:0a:ce:70:
08:fa:6d:41:ec:f6:6f:59:9a:7d:e6:e4:2f:29:8f:
e8:e1:bf:45:fb:7b:9d:bb:78:e1:00:f2:f8:9c:3d:
ef:dc:b0:4e:2d:fe:c0:60:3c:0f:55:a7:9e:82:e3:
36:9f:a4:02:bc:4e:7f:1f:60:fe:a1:98:57:67:19:
f9:1e:2c:32:d7:d2:05:f6:00:55:48:15:99:89:64:
7b:f7:01:88:98:da:06:de:7c:f5:fd:a5:03:b8:e8:
e4:ba:c9:ba:df:aa:28:d0:f6:c8:02:67:7e:a9:24:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:87:88:F1:97:AE:A5:EC:01:B2:AF:BC:45:35:A5:97:F7:11:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:db:c1:e7:50:02:09:4d:a7:ef:1a:fe:df:df:a8:81:41:ff:
fa:26:ab:c9:d0:b9:88:59:ac:a7:92:80:30:6c:ee:f8:28:f9:
1b:98:61:23:ed:0b:6a:21:fc:a5:83:cd:eb:12:08:5d:6f:b3:
d0:4b:53:1c:7a:e7:01:f4:86:11:01:89:69:e0:e3:0b:33:9d:
45:c5:00:26:47:47:81:a7:d8:2a:b7:65:e8:fc:42:80:af:84:
f3:bb:7b:6b:8c:d4:9f:fb:7f:9a:b8:f3:a4:34:aa:67:66:de:
60:d4:4f:b6:74:27:19:9c:6d:e5:fd:a6:0d:fe:73:89:45:ac:
23:13:20:60:0d:6a:76:88:0f:05:6f:ac:eb:af:82:e8:42:e9:
f9:66:fd:1a:5e:15:84:9e:18:5a:0b:2f:a8:a7:43:9f:80:25:
46:2c:e4:43:f0:fb:7b:29:4d:31:46:02:0a:6a:d7:d3:1b:b0:
cc:e7:45:e0:a7:41:95:d9:9f:92:e3:cb:13:99:bc:97:ad:98:
da:43:53:12:7a:a8:83:1d:ac:cd:d5:72:95:71:de:49:75:72:
29:ed:aa:08:22:54:b1:47:9c:bd:15:4b:63:5b:eb:6e:1a:52:
2d:ae:1b:39:de:ec:38:49:98:79:9a:2c:4e:55:10:33:7d:2c:
dc:43:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:31:34 2025 by rpki-client