Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa
File: 09f9cde4-4aa8-3e03-b620-db94912eca77.roa (raw, json)
Hash identifier: ekyDWN9lsbsUPP9TJNiclSPTwJaf31n99csgeQYotIE=
Subject key identifier: D5:39:3D:45:A9:16:36:E1:4B:2A:E3:F7:86:13:68:FE:9C:5B:CC:2D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56E292B8E937FCD2BB7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.86.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6e:29:2b:8e:93:7f:cd:2b:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=d534731b-8577-4455-ae0b-74adc40481ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:b1:18:f3:f4:4b:20:2e:76:60:98:12:1f:
10:02:ed:bb:1a:5d:7b:d2:f1:0d:7c:d7:ed:c2:2a:
5d:d8:b0:46:d3:e2:99:89:47:e2:a0:13:0a:3b:a9:
55:d6:ce:ec:e6:6b:52:f6:50:f4:db:8b:6b:0e:72:
36:58:d4:f1:cc:88:d5:9c:61:88:a1:85:bc:75:57:
6a:19:a2:fb:9e:46:08:d9:ac:cc:e2:d5:e5:d0:0b:
72:9d:15:19:bd:f0:34:0e:fd:25:0c:b6:5f:32:fd:
c9:c2:91:ac:49:06:d6:24:c3:8a:5c:c8:9a:c3:47:
cd:7f:fc:a4:a2:2c:03:cd:1b:3e:87:4e:ca:ee:c4:
6e:d9:88:20:ce:2a:dd:f6:f0:b0:39:a0:55:46:a0:
16:f4:5f:7b:ad:45:ff:85:f5:f0:47:84:f2:93:90:
f3:c1:60:63:3b:6f:1d:67:e0:cc:f0:fa:bf:a2:19:
2b:89:da:33:fb:f4:a2:39:55:47:9a:df:43:2e:08:
af:72:20:a7:dd:c6:96:99:ea:71:71:e2:e7:43:73:
65:1d:8b:da:1a:c6:1e:d4:8a:40:5e:a3:28:76:a5:
2d:a2:d5:e9:33:88:24:42:cf:74:19:62:e4:ec:56:
63:cc:d5:56:15:33:38:96:31:bc:16:2c:f1:a3:07:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:3D:45:A9:16:36:E1:4B:2A:E3:F7:86:13:68:FE:9C:5B:CC:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09f9cde4-4aa8-3e03-b620-db94912eca77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.86.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:63:ae:d3:59:28:29:0c:b2:21:1d:6c:02:35:ff:fe:2c:42:
72:6a:ce:7c:61:7e:12:b0:12:60:f7:27:89:41:70:8e:34:52:
c2:c9:60:c5:09:17:cb:fe:4f:37:a8:dc:c8:c2:f1:27:c4:de:
61:d2:84:c9:5c:85:46:84:af:d4:53:16:71:7c:be:bc:bd:7b:
9d:9c:8d:d5:f0:67:92:bf:ad:a8:a5:a9:e1:df:d9:35:94:e5:
38:aa:03:4d:cf:8f:6d:7b:45:25:c1:dd:cc:14:d5:31:67:62:
c0:6e:28:72:03:e5:d8:f4:71:7f:e3:86:5d:a0:39:09:8f:00:
b4:bd:dd:f7:be:38:da:d9:37:4f:dd:bd:0d:0a:35:61:f5:a7:
6b:47:af:bf:b9:de:3b:c2:19:31:74:22:09:25:f9:e8:24:aa:
2c:90:e5:e6:83:12:43:d8:2b:8d:f3:a3:e6:0f:ba:2f:88:6a:
4c:da:58:b2:95:62:cf:3c:90:c5:63:00:46:01:fa:82:88:68:
5a:29:db:b5:a3:02:94:44:67:09:95:92:3e:a5:44:02:3f:ba:
e7:ee:5f:85:58:8d:f8:ad:ff:b9:53:40:25:e2:47:55:38:bb:
75:85:d7:af:b1:aa:9e:dd:e1:cc:8d:c8:e3:cc:48:59:a5:20:
3e:5b:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:10 2025 by rpki-client