Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d408b8c-2d17-390b-890f-3d93665b41f2.roa
File: 4d408b8c-2d17-390b-890f-3d93665b41f2.roa (raw, json)
Hash identifier: ymQyDDzzGfwv9Zzcj2B6vE65F8kS+68v9eaBuJa3Sdo=
Subject key identifier: F6:91:60:CA:E2:2D:2E:78:EF:D6:7F:5C:66:5B:4A:25:E0:17:7B:32
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04F8B86F28D6FC8A07300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d408b8c-2d17-390b-890f-3d93665b41f2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 72.84.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4f:8b:86:f2:8d:6f:c8:a0:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b1eee22f-1f6f-4dcf-bc91-4229570b006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:b9:91:a7:26:d1:9a:38:40:4d:1c:90:5a:
f9:57:d0:e1:86:81:d7:f6:1e:1d:55:90:fb:d0:77:
26:de:65:f9:eb:6a:f6:58:ce:06:3f:5f:68:9f:c8:
14:d7:e5:06:ce:8d:68:63:48:47:97:e4:ec:6c:42:
85:7a:67:56:ee:a5:1d:81:2b:39:da:9b:5a:93:5e:
eb:9e:3a:9e:3f:dc:cd:71:1d:58:d0:b3:0f:47:73:
19:33:6d:94:9a:30:84:2a:74:39:9d:96:5c:91:2e:
40:aa:10:14:8c:e5:ce:c8:15:09:c5:7f:ff:c4:72:
f8:79:da:42:80:8a:2b:fa:6d:70:fc:4f:53:12:ff:
7a:f7:f9:d3:96:b5:f6:14:ee:17:6c:e2:5b:95:3b:
0d:e7:3d:3d:7b:73:49:ad:9c:82:78:48:bd:0e:6c:
70:d2:2a:15:70:8d:79:97:e1:f9:2f:94:0b:67:7c:
7e:37:ff:6b:1a:9e:70:0c:69:46:e0:e7:4e:6b:df:
3e:36:dc:f2:bb:2f:b2:f7:c9:d0:c0:e0:ba:06:7c:
bf:9b:be:37:17:06:6d:07:ed:18:72:49:38:78:ae:
4c:68:3b:d2:63:f9:e5:fb:9c:7e:ea:ce:45:2b:9a:
3f:fd:34:fd:85:9f:82:18:de:89:d6:fc:9a:3b:32:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:91:60:CA:E2:2D:2E:78:EF:D6:7F:5C:66:5B:4A:25:E0:17:7B:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d408b8c-2d17-390b-890f-3d93665b41f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.84.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:93:bb:9f:c5:a0:f9:da:ac:75:a4:69:7b:4c:96:d5:b7:4a:
55:17:8e:c6:0d:b6:85:e0:c6:91:4e:3c:f3:d1:0a:b8:ef:5d:
8c:d3:3b:d0:d3:2f:5f:fc:f6:21:39:cd:74:ca:d7:a9:ed:92:
c9:4f:9c:b0:c8:f8:da:9f:a9:32:f4:94:02:c5:e0:b8:a0:32:
a4:60:d9:67:e1:f2:91:9b:5d:9c:51:91:c1:9a:ad:0d:53:fc:
a6:19:1c:b7:46:be:82:31:20:49:98:df:8d:a1:c2:c7:d6:25:
75:d5:f3:0c:10:43:b4:62:32:03:38:6a:ec:97:82:c9:8b:95:
d8:28:ff:36:1f:a0:8a:99:78:2f:85:7e:2e:6b:7d:0a:ba:84:
2c:18:92:64:0a:bd:3e:1e:93:79:44:b2:c1:7c:5e:f9:53:e3:
d2:6b:f9:24:0a:94:c9:1f:b5:52:e0:8a:b5:f8:07:24:a3:a7:
3e:a8:d8:27:dd:27:15:a1:e8:11:92:ca:df:00:54:f0:c7:d2:
0d:72:ca:45:1c:f4:2b:46:81:15:1a:67:e9:dc:ec:bf:fd:74:
9b:d3:a5:77:ba:b8:c6:6f:e5:4d:8a:77:af:74:4a:b4:79:2a:
44:2d:a7:c8:f0:fb:77:38:dd:41:d6:c3:c3:18:25:c7:cf:37:
df:59:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:51 2025 by rpki-client