Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0ed3582-29d2-3bff-8e3b-eae770ccba70.roa
File: e0ed3582-29d2-3bff-8e3b-eae770ccba70.roa (raw, json)
Hash identifier: 22DIlWc65fmNdmYSfer7cKnaBgdy8dQRm3URMi111yo=
Subject key identifier: 46:16:69:50:76:BA:DD:EB:11:5F:B3:0C:1B:9B:19:64:33:20:62:2D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3DDC6110C5654D271C3E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0ed3582-29d2-3bff-8e3b-eae770ccba70.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.103.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:dd:c6:11:0c:56:54:d2:71:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=8fdf6e78-66ee-42f8-96a0-d645260168c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:ef:90:a8:ec:6e:99:67:b2:6c:87:0d:51:
bb:2c:32:ec:be:f2:dd:8c:cf:fb:b8:eb:0f:cb:3f:
51:c3:d9:bc:67:41:ba:af:02:cc:b3:70:6e:ed:7f:
32:54:ce:a5:6b:92:3e:98:ec:87:85:b2:74:27:4b:
4d:af:13:a0:25:c2:28:59:b6:9f:ae:39:37:9d:50:
1a:02:07:ab:c4:72:bb:03:cf:ed:0f:87:5c:66:fc:
3a:53:28:70:30:7c:28:ee:07:99:76:9d:ca:2f:4b:
b5:2e:71:26:c7:42:86:7b:a4:08:42:c6:ec:40:f8:
63:32:ac:8a:42:73:3e:6f:cf:f6:72:f8:41:f4:ca:
35:3f:cf:5f:6b:a6:1f:50:87:fc:9d:de:b5:55:09:
f9:a1:48:00:4b:53:a3:a8:bd:c4:9b:2a:01:15:d6:
3f:7d:fe:77:16:12:16:7c:37:d2:b5:6f:08:8c:54:
55:dc:39:38:57:0a:bd:8c:cb:f7:e2:83:ad:41:d6:
34:7c:3f:b2:ce:74:8a:46:b8:f1:bb:e1:12:7f:de:
aa:f9:2b:fe:d2:3a:cd:95:79:47:69:d7:7c:db:12:
8d:ce:79:80:d9:2d:90:52:c0:93:77:86:e3:ba:84:
df:c3:28:8a:cb:6f:7e:fb:5c:c5:f4:85:af:72:e7:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:16:69:50:76:BA:DD:EB:11:5F:B3:0C:1B:9B:19:64:33:20:62:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0ed3582-29d2-3bff-8e3b-eae770ccba70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8f:b4:c6:98:82:58:cd:04:c2:5b:b4:da:bd:5e:0d:e5:30:
b6:9c:3d:67:c8:b9:b0:98:4d:dc:32:cd:76:b9:e7:c9:6d:d7:
44:b3:6d:62:94:c7:d6:1c:37:30:b8:8a:aa:50:11:b7:37:aa:
fa:f9:eb:a5:c3:00:b7:72:1e:29:fa:a6:6b:0b:b2:6e:bc:d3:
a2:f9:a1:4d:22:bf:5a:c0:bb:37:35:53:a8:42:b6:1d:d6:3c:
71:db:dd:d3:75:fc:56:89:fb:49:d2:c5:85:e6:08:29:2e:04:
92:20:91:ce:4f:94:f6:de:88:d0:f1:75:5d:54:af:a6:97:63:
bd:e8:fc:6e:9e:2c:3d:d8:48:3d:71:e3:58:a9:78:da:48:9d:
fa:c5:35:68:0d:c5:03:dd:36:5d:12:fc:e4:a4:cf:95:77:f8:
38:c8:68:49:44:ed:4b:cd:d6:c9:30:94:f4:00:e7:67:7c:40:
20:c9:83:07:13:79:0e:7f:f9:e2:47:56:c2:21:52:4d:2d:66:
f5:5e:4e:20:02:1b:52:05:35:32:4d:07:bc:34:59:c4:c6:ed:
dd:bf:18:60:ec:ef:7b:2d:1d:6a:0f:bc:30:10:72:05:9d:67:
0a:f7:f1:7b:f9:7b:11:94:13:d9:e7:38:a1:7b:2e:3f:cc:85:
2b:71:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:19 2025 by rpki-client