Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f682ee2-5592-3c12-be30-327e9c0e1496.roa
File: 2f682ee2-5592-3c12-be30-327e9c0e1496.roa (raw, json)
Hash identifier: cieKXdeoB5BKlSjDszfl/BOPUQbCtNJ2OKCtiG8gN2Y=
Subject key identifier: C2:93:02:A8:5A:C6:10:E7:A1:70:F9:73:97:A9:4A:02:68:8C:0C:CF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C8A727B1BE4D5EA88680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f682ee2-5592-3c12-be30-327e9c0e1496.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.107.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c8:a7:27:b1:be:4d:5e:a8:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=bcc697c8-b9df-4283-9b78-5f51a849efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:6d:fd:ac:14:1e:92:6e:57:76:2c:80:94:
bc:68:1f:02:58:d5:74:ad:ab:59:58:5f:e9:1e:f0:
c5:90:47:ea:74:4a:68:90:bc:1a:83:03:cd:1e:ff:
7f:8e:0a:1f:a6:29:ac:b5:ab:ac:13:eb:66:85:72:
f9:b9:f7:fa:89:b1:a7:b0:56:ff:78:87:d4:4a:2e:
4d:29:51:62:79:1a:c3:2b:9b:0c:5b:ff:dc:2f:e8:
17:f5:96:09:47:bb:bf:15:d0:c6:65:fd:7a:93:f6:
26:16:3a:75:64:97:41:66:67:11:08:1e:d8:6e:76:
1b:6f:24:c0:88:fb:9c:86:be:88:48:c9:81:8e:10:
7e:21:e8:77:11:83:3c:b4:a7:1b:08:ce:26:86:3b:
01:bc:21:73:67:e9:55:2d:ec:45:ba:3f:ca:3a:da:
e5:b9:60:7e:6d:52:45:ab:34:39:40:cf:1a:2b:72:
55:16:59:c8:24:38:95:7e:8a:d1:da:95:65:97:cf:
37:35:6a:c7:b8:00:f5:b5:28:9a:df:cc:ad:6c:6b:
e0:9d:79:ff:ca:1c:28:0c:90:94:0a:54:1d:bd:e2:
bc:ac:f7:5d:b3:45:66:26:e7:f3:e2:94:b1:9f:78:
04:d2:7c:d6:ca:42:80:88:73:88:bc:29:7c:29:9d:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:02:A8:5A:C6:10:E7:A1:70:F9:73:97:A9:4A:02:68:8C:0C:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f682ee2-5592-3c12-be30-327e9c0e1496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fe:1b:d1:2c:1a:31:50:89:80:32:fa:31:82:77:7d:c0:ae:
d8:59:18:2f:de:91:0c:73:af:b2:47:9c:6e:10:ce:3b:aa:7c:
51:c7:67:2d:0a:c3:96:d2:1e:d3:8f:6c:6b:91:57:cb:17:a2:
21:1f:c4:18:21:7d:cc:a4:67:76:92:2d:a5:4c:a9:8c:8a:88:
1a:4a:1a:c8:dd:83:7f:d8:5b:d7:95:07:89:2c:17:7e:6b:ab:
ca:84:a2:0c:ef:bf:b2:94:e6:62:a1:6c:66:fa:91:2a:28:3c:
2e:24:5c:7a:9e:30:33:4d:86:aa:ed:00:e0:59:61:5d:c6:8e:
83:1a:d6:f1:ec:b8:df:d7:a2:13:ef:4c:e0:9a:90:ef:3b:36:
b8:e1:95:91:1c:2e:bb:52:ad:58:3e:c3:c0:04:61:e7:2d:1a:
3f:5e:ad:b5:9e:3c:7d:f8:1c:e5:21:6d:b3:23:52:ee:0f:6e:
45:60:42:5e:d1:c9:b1:46:de:db:f6:4e:d0:ed:b5:61:eb:0d:
e4:64:bc:80:0c:a3:cd:d3:7d:79:5c:4f:9a:c7:05:c8:57:02:
45:08:45:ff:45:47:8b:f9:7b:49:3a:e2:82:cb:4f:96:6c:a9:
75:f5:95:fd:02:11:0a:bd:6c:23:f0:1f:cc:7f:0e:29:cc:08:
da:f5:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:07 2025 by rpki-client