Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f896f517-bd67-3a35-947f-afaea7f2e22b.roa
File: f896f517-bd67-3a35-947f-afaea7f2e22b.roa (raw, json)
Hash identifier: yP2bq0SEjTBCPJfCd/bJbIMtzux/dB2Kt46vXFpYkR8=
Subject key identifier: 57:58:4C:DB:B0:44:44:6E:38:82:20:A1:F2:8A:ED:6A:2B:FA:9E:3E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584917DC0FB8FBD53EC573BFD080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f896f517-bd67-3a35-947f-afaea7f2e22b.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.105.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:0f:b8:fb:d5:3e:c5:73:bf:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=204a2de9-cf85-4596-8551-6aa211fdb824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:5c:ce:c2:84:51:65:12:fc:84:fc:15:25:
ba:aa:bc:6a:9e:20:cf:f7:37:cd:ec:69:0b:ca:9a:
95:e0:3f:a8:df:83:28:5c:e3:6a:ac:66:20:61:3b:
67:b7:12:1b:88:a6:a2:4e:d4:09:af:19:9f:c2:de:
ad:c2:92:0a:48:11:4f:82:e1:14:32:ad:df:fc:bc:
bd:62:7e:fe:26:48:3f:9c:56:37:23:16:d9:9f:12:
51:54:6b:61:76:f4:8c:28:1c:89:81:83:a8:0a:47:
ff:c7:46:9b:ea:fa:85:19:39:0b:a3:8a:d1:97:96:
53:16:e0:72:52:ed:94:e8:1c:f9:32:a0:13:2d:e6:
81:53:01:e7:cc:16:d8:61:4d:ab:3e:0a:f7:b0:55:
e4:89:fe:27:a9:2c:f6:3b:ea:de:8e:a4:b8:3e:77:
20:78:db:c6:6e:c8:f3:cc:56:6b:ae:49:76:d7:fd:
a2:cd:fd:6a:90:ab:b4:7b:b8:4a:35:61:5d:ec:4c:
3b:48:8e:5c:b8:96:c2:cd:d6:31:38:43:bb:af:82:
91:d2:3b:e3:ff:71:a8:96:67:14:15:e7:a5:6e:9b:
63:cf:5f:0a:0e:eb:24:22:56:10:0a:97:dc:6d:06:
ff:9c:99:f8:1e:3c:46:3c:35:a8:d5:d8:47:0b:dc:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:4C:DB:B0:44:44:6E:38:82:20:A1:F2:8A:ED:6A:2B:FA:9E:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f896f517-bd67-3a35-947f-afaea7f2e22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.105.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:95:38:02:8d:56:db:25:1b:8e:9f:77:58:2b:a6:2e:7b:61:
41:9e:e0:09:77:71:cd:73:51:41:e7:0c:03:b4:08:9d:05:14:
95:76:4d:88:f7:2d:96:3c:a4:c0:84:65:14:fa:5f:0c:ad:d5:
e8:56:90:2b:32:e5:2b:dd:25:a6:c4:5f:0d:f6:9d:d1:4d:84:
e5:a4:60:10:6a:ab:74:cd:eb:6a:83:2e:38:04:a0:5d:14:7a:
e3:28:1d:f2:6b:ab:f2:6b:ae:fe:6a:71:1f:b8:b8:02:26:6c:
54:8a:3a:5c:ed:59:04:76:c8:66:8c:f7:87:e7:aa:73:e4:35:
4d:a5:3e:c2:57:a0:85:9d:a8:9e:c2:30:3b:8d:b9:cf:94:45:
0f:8f:05:a6:80:11:62:09:76:3f:d1:6f:15:1e:8d:b8:41:87:
a4:df:a9:46:1d:13:0e:a0:32:41:2b:cd:53:ac:e1:07:ce:6b:
77:b5:bf:6e:f6:0a:a7:8e:da:7a:bb:b5:02:ea:e2:71:0a:e6:
46:62:f3:d7:9c:d4:0b:37:63:c6:16:61:4a:9b:4a:64:2f:9b:
9c:6c:29:15:56:c2:e1:c9:b0:c1:2c:82:c5:28:53:a3:5e:84:
0e:53:59:69:87:af:4b:cd:da:b1:cb:49:bd:ce:f6:b7:f3:f2:
4f:7f:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:57 2025 by rpki-client