Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
File: 35060332-7e9f-3cbe-964f-8702fe08db28.roa (raw, json)
Hash identifier: bU0BILFDSVoiP0/nkwd6xye7dcmq+RvnrzDeDwkErSQ=
Subject key identifier: 7D:38:CE:9D:38:64:DE:12:A3:9A:A3:15:75:22:85:95:CA:5D:D7:3A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C0F5ABEF2970B76DDE60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.108.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c0:f5:ab:ef:29:70:b7:6d:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=8477e7bf-730d-4b28-888f-f1f2526528f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:70:97:ee:f3:76:aa:e5:35:5d:c7:a3:21:
18:e4:6a:17:2e:66:b3:d9:e1:ad:f1:7d:e7:5f:17:
aa:b8:91:6e:c9:4c:9a:3e:ab:6e:18:1e:e8:40:6c:
e8:49:2f:61:2d:cb:75:fd:e5:a5:7d:5d:5c:ef:23:
8e:b4:da:7e:ee:b6:4e:f1:e9:53:ad:72:2e:b2:30:
41:e2:29:fc:93:44:d0:5b:7d:75:32:cb:8d:f7:de:
e0:72:d7:4c:44:7e:72:a5:da:8f:ba:d1:1e:22:5b:
cb:ff:b1:ac:e8:e1:fb:22:ec:bf:1e:b5:a1:60:b5:
5c:c8:d9:ec:55:b3:75:ac:a7:c4:50:97:f5:6f:3e:
3f:02:c5:19:fa:1a:7b:1f:e9:7a:15:9f:69:70:2a:
d6:47:53:e9:d5:86:ec:c3:d5:28:97:24:ff:6b:a7:
f0:9d:c3:c4:7b:46:66:2e:ba:a6:7e:14:9a:50:a7:
b7:b2:d0:ae:41:c8:82:ae:a0:a1:ed:53:7b:d5:13:
86:73:33:ff:5d:57:51:e7:37:7c:56:91:64:a5:92:
f4:8e:00:35:95:36:dc:6f:e2:3f:f9:6a:5a:e2:09:
8a:24:10:a5:39:97:8d:81:8a:4c:68:36:de:62:f6:
02:f0:cd:9b:df:11:20:6b:e6:c6:58:08:d6:14:c3:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:CE:9D:38:64:DE:12:A3:9A:A3:15:75:22:85:95:CA:5D:D7:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:6c:e9:82:9d:fe:6f:ce:16:2c:64:b6:ae:ae:39:db:77:47:
dd:5d:5e:e3:7d:83:99:ce:32:d9:16:d2:f7:f2:9f:fb:aa:95:
ba:14:2e:cf:f0:bd:0e:14:a4:2d:33:55:db:c7:a5:40:b0:cf:
25:14:fe:3c:c6:17:a2:b9:b8:4e:5f:4a:36:f8:c1:3d:b8:fa:
e1:ea:43:ba:13:90:55:55:cb:48:9c:4b:ec:cd:bf:6d:ce:84:
b3:87:90:b8:13:2f:d5:89:4a:da:90:05:9c:f1:32:24:1a:31:
80:5e:9a:60:f8:e7:1e:e5:ca:7a:95:ac:ce:02:43:66:e1:9d:
a0:af:d5:0f:37:69:b8:73:83:9f:0b:9e:8e:12:e3:e8:c0:8e:
9f:e0:4e:b4:0c:f7:69:1a:6e:98:ac:07:0f:08:68:be:cd:d1:
74:dd:03:51:d2:f5:45:35:cf:f3:99:73:d3:1c:69:d4:d3:5b:
89:76:5d:5d:5f:5d:4d:4c:dd:5d:36:f8:75:2d:93:05:44:55:
1c:3c:b4:9f:a0:21:b8:1b:8f:cd:3e:3a:d7:1f:aa:59:29:5e:
64:34:61:37:60:5e:70:ef:a0:e9:14:ac:64:aa:1f:56:f5:9d:
43:ec:73:7f:95:ad:7a:28:5f:42:13:80:6d:fa:97:65:8a:b5:
59:d7:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:31:32 2025 by rpki-client