Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228987c4-ef66-3be7-91f7-63fa7b9ad75c.roa
File: 228987c4-ef66-3be7-91f7-63fa7b9ad75c.roa (raw, json)
Hash identifier: CNJVjwMvn2Ji0zx6L9bM38srCi5wRbBWYItvDcgAog8=
Subject key identifier: 85:0B:9F:09:73:97:FB:98:64:3A:1C:1D:A8:C7:2C:4E:00:B7:F5:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C5A92B329AFFC7C6B980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228987c4-ef66-3be7-91f7-63fa7b9ad75c.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.102.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c5:a9:2b:32:9a:ff:c7:c6:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=091a23f0-e82c-4fc1-8ba7-f8e97e28a2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:99:e9:87:2a:6a:c2:6c:5e:0f:e1:b9:b8:
01:c8:10:13:cf:08:2c:eb:99:49:74:d0:79:9b:ab:
ac:d0:10:21:78:0e:fe:f2:49:6f:a2:4e:d8:36:c6:
9e:a1:05:c6:7f:df:0b:14:18:a8:79:c7:a6:b8:76:
df:04:24:e0:b2:6d:fa:fd:6b:9a:8e:8c:79:43:c5:
b3:6b:28:e2:dc:4d:be:aa:38:fd:d8:86:e1:fc:fa:
e9:f5:51:7a:1e:4e:1a:05:70:44:4a:91:2f:54:ff:
12:78:6b:fc:5c:0e:be:5d:03:f3:73:81:c1:c7:c1:
ce:eb:3f:df:4b:53:b2:aa:d1:41:2d:bf:da:fd:58:
d6:0b:ad:81:16:7a:a8:51:a3:b2:72:2e:54:41:a0:
97:16:03:57:6d:01:65:a6:c8:5a:38:15:91:d6:18:
94:2b:d9:ef:14:69:ab:bc:49:60:a8:6e:1e:99:dc:
60:03:ff:e5:51:22:c6:af:bb:fe:87:0f:03:ab:71:
cd:bc:31:57:d2:10:fe:5e:04:65:a4:42:8e:f6:d8:
ff:28:75:fa:2f:91:cf:34:90:9b:64:78:76:49:59:
8c:70:c1:01:f9:0a:23:0e:1b:4b:c3:cc:13:d3:7f:
5a:dc:2e:fa:f8:90:9f:1e:2f:6a:9a:44:30:76:d7:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:9F:09:73:97:FB:98:64:3A:1C:1D:A8:C7:2C:4E:00:B7:F5:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228987c4-ef66-3be7-91f7-63fa7b9ad75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.102.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:7e:da:39:c8:f3:9a:45:6e:7a:0e:16:6d:cc:4a:77:2e:53:
d4:6b:47:8a:70:22:87:21:12:42:a2:b6:81:e3:ab:78:e6:57:
9e:86:74:de:99:af:64:f9:24:62:93:9c:94:18:5d:61:14:e5:
67:ea:e4:78:2f:f9:de:57:57:17:ce:3d:25:2e:06:16:ef:e7:
0b:7c:2f:eb:05:35:25:c2:50:62:40:95:2a:5f:2b:2c:bf:14:
70:59:94:3f:34:d3:77:34:95:d4:f0:7a:4e:0f:32:9a:75:aa:
ff:d6:dd:bb:75:9e:1a:7e:c6:d2:81:dd:1c:90:76:7c:4e:5a:
1a:ba:92:09:f8:01:54:6f:89:09:12:48:dd:b9:36:89:a0:b1:
22:43:0a:9b:ef:a4:82:00:49:00:64:71:2a:88:a9:ca:7b:a8:
e3:2c:2d:10:93:39:5f:16:6e:e1:23:fe:16:95:a4:15:70:ed:
78:a9:5a:13:22:78:0d:82:dc:bd:c8:98:07:70:40:be:ab:1f:
1a:46:8f:3a:c4:54:45:53:f3:a5:79:ac:14:c3:de:4f:ca:dd:
b2:be:24:a4:8c:29:5d:e8:ff:b7:4a:d1:76:32:a7:ff:1c:be:
79:1e:65:ed:b4:48:35:8b:cd:7e:a2:fd:4f:ec:17:a0:a8:e0:
96:1a:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:54 2025 by rpki-client