Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/322c2acb-85af-371c-bc9a-54ba422e6e25.roa
File: 322c2acb-85af-371c-bc9a-54ba422e6e25.roa (raw, json)
Hash identifier: 9/GRbb94mHHkAq7D4/ii+TUW48ev1KEMhcmzDpr6n/Y=
Subject key identifier: 11:71:D1:6F:69:FE:16:AA:D4:68:9B:7C:FD:C7:B8:53:61:B6:B9:70
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C99B13177F0E1BDE9B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/322c2acb-85af-371c-bc9a-54ba422e6e25.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.108.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c9:9b:13:17:7f:0e:1b:de:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=5cf67f67-a86b-4d08-95d6-61f74cd99246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:77:e5:55:f9:cc:85:c5:f0:a6:15:20:88:
df:d6:c9:57:dc:78:de:b3:b0:ae:fa:46:b3:01:b8:
21:2a:fe:bb:cf:5f:bb:51:f7:e4:f0:6f:0c:fa:63:
c4:6f:43:35:04:9f:4f:14:b2:6f:48:c0:b3:ea:cc:
4b:c9:26:30:76:28:f2:01:d8:19:b2:78:bd:3d:ee:
0c:1e:d0:1e:13:76:67:79:57:01:99:f3:3b:77:ed:
4f:41:0d:6b:a4:76:7d:83:4f:a2:f1:bd:63:08:0b:
2e:a1:f5:6a:3e:16:24:94:49:f6:ce:b6:d2:85:7d:
ca:f9:db:30:2b:bd:39:ef:b4:fd:68:5c:16:7f:f9:
da:2f:44:b8:2a:55:88:2e:73:f6:43:3c:bf:59:ed:
25:0b:c6:d5:bc:d0:d4:64:27:bb:7d:51:6c:b9:60:
b8:52:35:12:04:06:f0:2c:07:d0:62:17:29:80:32:
cb:fe:d1:55:4b:94:56:57:ae:fe:33:ea:73:92:c8:
99:1b:5b:30:9e:c3:bc:9a:ba:cb:fc:3a:1b:0a:8f:
e7:13:d3:0e:8a:94:7a:93:f5:f5:00:55:2e:09:c9:
60:89:ac:b2:ce:c9:41:38:a8:34:8f:26:06:f5:1e:
46:16:aa:ea:f9:c6:3d:94:b8:f7:36:05:15:c0:fe:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:D1:6F:69:FE:16:AA:D4:68:9B:7C:FD:C7:B8:53:61:B6:B9:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/322c2acb-85af-371c-bc9a-54ba422e6e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:fa:dc:78:c9:4b:ce:d7:40:f5:33:96:60:83:e4:d7:5d:40:
c3:22:b1:5c:d1:10:4e:58:f5:e9:0c:2f:a2:5e:f6:de:3f:1f:
7f:33:12:5b:3b:88:d9:88:fe:1b:46:0a:8f:81:74:a2:9e:f3:
88:a5:50:f1:8c:d5:4a:10:6e:e2:c5:7b:06:2f:e8:50:72:c3:
04:1d:35:71:aa:69:4c:35:57:41:ae:0c:3a:c2:7f:58:5a:85:
25:74:3c:2c:d0:f2:d7:13:70:cd:5e:95:6d:d5:da:a6:d9:4c:
ca:f4:d8:e5:79:b4:be:d4:3a:27:bd:d6:42:45:8b:fe:fa:0f:
de:e4:0f:ed:b1:c5:19:a1:22:38:ec:41:19:78:5a:da:e6:6a:
70:04:b5:b6:df:6e:0c:ee:fc:89:a2:44:e7:56:1a:09:a9:97:
ac:5c:20:db:3c:b2:e5:a6:ce:34:34:1e:50:38:90:f2:ae:0f:
80:ae:fc:a6:af:f4:70:83:0f:92:1b:b0:c4:d7:bc:c3:5b:fd:
6e:d6:a8:e7:6f:30:39:d0:b0:4a:52:be:b1:d1:4b:f6:03:e4:
10:46:27:07:47:bf:7b:80:92:08:33:60:86:07:76:a2:41:00:
e2:96:cf:bf:eb:e1:eb:0e:de:80:65:9e:13:5a:e9:6b:ee:7a:
7b:6c:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:40:04 2025 by rpki-client