Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa
File: 3f3c30a3-734f-32db-96eb-b987d5448e8f.roa (raw, json)
Hash identifier: Txm06fWw7gmio0mVWRVxQ2Na2I/qZGo4zfGLRTyaOwg=
Subject key identifier: 95:38:3D:B8:A1:72:DC:EA:B4:29:B1:1E:5C:F1:4B:C8:53:B1:0F:9E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56E492D6DF1F2FB520C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.88.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6e:49:2d:6d:f1:f2:fb:52:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=6a112f90-6bfd-4a1a-860a-694f63e5d497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:db:40:5d:5d:84:2a:e1:41:cf:ac:83:d6:
fb:ec:9d:c0:79:94:ee:8b:b8:2a:32:81:e6:d5:cd:
25:7a:59:ba:c7:8e:a5:1a:ed:ba:50:29:c2:3d:20:
4a:4c:39:a6:85:2a:c5:b0:de:d4:ec:f6:2b:aa:20:
ab:55:73:3b:39:72:f4:5d:39:a1:1c:60:d5:38:13:
04:ca:fc:7f:d7:1b:b3:07:12:23:11:15:02:b1:f4:
1e:8f:ec:4c:09:db:f4:fd:16:95:41:58:fd:02:04:
27:4c:91:a2:1c:6e:1e:bb:66:98:06:a1:01:f7:a4:
9b:64:fc:58:8d:9c:46:69:ed:b2:34:4a:ca:a1:2e:
50:99:0f:7d:8f:c1:f1:3c:67:17:d9:9a:87:cd:fc:
f8:00:e7:22:58:d6:fa:3d:ae:57:7c:a2:3c:01:e7:
2e:dd:f9:5e:84:85:ba:d5:ed:55:41:f8:e6:31:c7:
0f:bc:f6:c8:86:d2:59:1e:53:26:69:4a:dd:5f:f3:
05:d4:db:c7:42:80:19:4e:bd:b7:80:df:b3:73:d6:
f0:14:16:63:98:54:8c:ac:e2:22:c6:8d:47:42:37:
c7:61:8d:0f:1b:6d:d9:01:aa:84:ab:3d:37:dd:fd:
7d:ec:81:c3:e3:a0:cb:f6:e2:fd:dd:3b:71:0c:90:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:3D:B8:A1:72:DC:EA:B4:29:B1:1E:5C:F1:4B:C8:53:B1:0F:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.88.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bd:11:63:13:13:b7:76:72:a8:ed:cc:d5:1d:f1:01:f6:11:
d9:08:9d:b8:71:f3:a2:15:43:20:6c:a9:ec:db:1e:f0:d3:c9:
96:c3:c2:3d:32:db:be:0a:8a:48:87:82:b4:b9:36:0f:8c:3a:
51:c7:75:08:a5:5a:45:8e:13:28:26:bd:95:0e:b4:0f:20:3c:
35:07:e3:35:9c:69:c6:a2:a5:cd:e8:90:0c:d5:b0:83:60:c7:
e4:bc:27:4d:2d:76:b8:71:07:ba:a1:d8:72:69:5d:e2:2e:07:
56:17:64:55:7c:1c:67:1f:3e:70:f0:ca:10:40:e7:8f:f4:90:
91:5d:fd:fd:25:6a:7c:22:fd:e6:96:76:d5:a6:7d:f5:85:b3:
d9:87:1c:a4:88:66:4c:14:44:a3:6f:ed:98:0c:bf:8e:3a:e3:
db:14:b9:23:2c:f1:09:71:85:0a:4f:ab:42:d6:1f:9a:76:68:
7a:35:97:32:b1:00:63:60:69:56:cd:d0:aa:63:dc:26:dd:68:
b3:c4:eb:26:b1:11:c9:20:1c:93:2a:63:90:75:af:52:81:74:
22:50:6b:82:a3:8e:aa:a2:2f:47:b0:7c:d4:04:70:c1:f9:82:
a7:22:b4:7e:97:fa:b9:f2:b0:fc:59:e3:60:57:7d:67:8f:62:
1d:e9:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:23 2025 by rpki-client