Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6cecec-b563-3291-bfc3-f9b1a54a8c80.roa
File: 5c6cecec-b563-3291-bfc3-f9b1a54a8c80.roa (raw, json)
Hash identifier: /K2NOUJoxpbf47vo0V8PMsROWxPolZrE9oO3sAP8ono=
Subject key identifier: B0:6E:42:EC:FF:D8:5B:92:C2:95:F2:D8:61:0B:D0:3E:12:10:DB:E2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584837201A363D9D9C5FA54E6100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6cecec-b563-3291-bfc3-f9b1a54a8c80.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.97.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:1a:36:3d:9d:9c:5f:a5:4e:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=1afea039-2f4f-4115-bda8-693580ad1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:84:e4:da:19:c7:a4:89:08:13:e4:0d:b7:
cd:47:44:2f:93:2d:2e:77:27:67:f4:0f:8c:a9:e2:
cc:dd:39:ba:da:72:b2:a2:9e:95:a2:2e:9c:71:4e:
28:e1:c5:dd:c0:8d:e1:ea:67:46:95:9a:a6:10:44:
c2:61:21:44:4f:d4:5a:b9:c3:64:4d:bd:81:16:e7:
32:d3:1f:40:15:0f:e6:42:fe:3c:2a:68:9e:93:ea:
0b:a4:8a:f1:4e:c7:47:4c:74:b4:bd:5f:36:f2:a5:
37:0b:64:49:f9:f4:ff:b1:f6:8a:79:74:61:db:63:
13:46:de:85:06:35:76:a9:fb:95:8e:84:f2:f0:38:
e1:e3:8e:ec:07:bb:15:e0:ce:8c:8d:61:59:00:be:
8e:1c:91:64:77:4d:a5:75:f1:b9:cf:c9:b8:7e:3e:
77:26:68:20:e9:fb:8b:ea:54:bb:e5:4e:37:18:48:
dd:b2:6c:98:5b:22:59:56:72:a8:8d:ce:f2:4d:fe:
9a:6e:9d:db:d7:94:0f:24:6d:7f:99:1b:07:4a:82:
69:b9:fd:de:68:4f:21:26:30:92:f5:7a:86:d4:50:
b3:6a:8e:28:3d:40:09:8f:81:d5:b6:46:4c:de:0f:
50:77:44:25:a6:42:1a:d6:86:8a:f9:2e:2d:78:b6:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:42:EC:FF:D8:5B:92:C2:95:F2:D8:61:0B:D0:3E:12:10:DB:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6cecec-b563-3291-bfc3-f9b1a54a8c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c9:7f:36:22:cf:23:5a:6e:ff:d6:22:6b:2d:8e:a7:ce:5c:
3c:c5:d4:82:9b:e0:a6:78:4b:0c:e2:ad:41:c7:6c:39:fa:19:
a7:5c:d7:e8:bb:8f:12:9f:87:f1:7d:fa:ba:aa:f5:71:ad:ed:
3d:fc:35:06:92:a4:51:24:4b:5f:68:46:a5:b8:60:d8:43:b2:
0f:82:57:7a:85:7b:b4:3a:c2:12:4b:97:67:3d:f3:da:ec:3c:
f9:af:43:47:1e:f2:ef:cb:00:f5:c1:b1:d4:0c:9a:d6:1f:d4:
a8:80:98:0e:0f:0f:65:2d:25:6f:c7:4c:5a:17:b2:8b:9a:be:
df:77:5d:5f:c1:ce:26:0f:66:56:13:7d:cb:0a:5a:19:87:3b:
9b:3b:02:8b:2d:27:b9:16:f9:6e:bc:d5:81:fc:ca:f6:c3:1a:
31:0d:44:36:f9:65:01:f4:c8:0b:1e:4e:66:e1:a6:85:cf:ac:
fe:ae:49:f4:18:29:4a:9d:d5:de:7a:d5:5f:88:75:31:8e:c6:
b7:95:70:0e:55:0b:66:7e:d4:4e:0c:6b:0e:62:ad:c2:18:2e:
91:2d:12:90:6c:60:fa:00:26:bb:48:6c:f4:4a:67:85:7f:57:
c5:4f:3e:75:c9:20:38:4e:5c:22:05:32:67:3e:0d:f5:cb:85:
9e:c9:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:56:15 2025 by rpki-client