Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34ae9f8a-70ca-35f3-b7e0-551dfa0516d4.roa
File: 34ae9f8a-70ca-35f3-b7e0-551dfa0516d4.roa (raw, json)
Hash identifier: NezZaX1n81Uv7ThDr26xJpVwVzGSkPH65+h9rcDs8fM=
Subject key identifier: D0:5D:CB:51:FA:51:D8:89:B2:53:F8:61:F0:07:1D:F8:20:94:D5:B7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C62F9CD540D1997E8A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34ae9f8a-70ca-35f3-b7e0-551dfa0516d4.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.97.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c6:2f:9c:d5:40:d1:99:7e:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=9e9dc968-8b5e-4423-a822-a7e29210c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:cc:3a:66:53:7a:87:dd:09:2f:a9:74:74:
3f:99:3f:ee:e0:e1:74:1c:10:85:ea:8d:1c:f4:ff:
06:e6:4f:86:ab:ab:3b:5d:29:0b:72:a8:fe:3a:55:
5a:13:be:e9:aa:2e:c2:58:5c:c4:87:15:2b:95:39:
35:ce:9a:05:bb:66:83:8a:2f:19:d9:7f:c8:32:82:
aa:69:a7:b2:cc:be:6d:80:b2:3f:29:47:67:b0:82:
15:3f:08:bf:c9:af:8b:69:99:ed:51:f9:d9:63:82:
2d:0f:18:c8:f0:f1:82:d8:3c:4a:a7:a6:92:a0:e8:
fc:3c:4f:6b:d9:b0:c5:1f:ef:dc:07:8b:fd:80:ef:
d1:b5:fc:d0:fe:8f:ea:33:75:2d:65:2f:ed:d5:86:
87:0d:69:c3:aa:6b:12:d2:6b:70:71:65:a7:0d:d6:
0f:ea:5d:56:f6:28:09:9a:d0:16:7e:4b:18:35:63:
0c:da:a8:cd:33:0d:9b:79:62:61:6f:d2:2a:a0:46:
77:39:8a:fc:a3:5d:f2:4f:9b:1b:1d:ad:82:17:1f:
e0:98:e6:27:e4:82:d0:70:60:7e:fe:3a:eb:9a:71:
fd:89:49:96:3a:1a:c2:2c:bf:42:bc:b3:41:57:15:
1a:76:53:4a:d5:46:6c:b7:1b:2e:87:57:fc:ae:47:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:CB:51:FA:51:D8:89:B2:53:F8:61:F0:07:1D:F8:20:94:D5:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34ae9f8a-70ca-35f3-b7e0-551dfa0516d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:5d:91:61:03:5a:2f:e1:77:7e:bf:35:75:d3:d4:33:dd:c3:
a2:95:43:84:4a:6b:5c:a6:c7:12:32:d7:fb:9e:db:e7:d0:59:
45:14:42:55:63:0e:94:71:5b:54:dc:95:43:60:94:d6:6d:2d:
bc:69:89:83:b0:14:16:0c:6b:fb:3e:a7:80:09:8d:51:1b:c6:
20:3a:1a:5e:a9:ed:75:8c:d6:6c:ca:1b:2a:88:49:b2:28:22:
37:3e:21:0c:cd:46:d8:04:83:02:29:e5:cc:3a:70:c1:2e:15:
2e:51:48:7b:eb:07:ba:eb:e4:48:c7:40:28:12:65:f6:9c:c5:
d8:39:65:ca:d0:c8:f8:0a:4b:69:29:30:b8:fe:3e:61:aa:e0:
95:1b:97:00:ba:b2:31:fe:d2:65:29:02:57:ca:72:c0:43:d4:
28:1e:fb:af:bf:b1:94:01:a2:15:7b:9e:ae:a0:f1:7b:f5:5b:
7c:89:91:62:bf:38:7f:92:86:03:0f:ad:2c:6d:be:59:66:82:
38:24:8e:27:55:02:ec:e3:02:31:31:70:9a:2b:d8:f6:c1:10:
b3:71:b7:79:ae:a1:1e:36:44:30:97:a1:aa:26:1d:6b:0e:b2:
f3:5b:2b:dc:22:40:78:3e:ea:8f:27:99:f3:eb:1e:13:76:16:
ed:d3:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:13 2025 by rpki-client