Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa
File: 6953280c-4b15-3237-8115-7323bd5c0857.roa (raw, json)
Hash identifier: XjxAnGyTX0hUZZy/VCcaLUZUUyGnA7t9gTJOvEF+3xI=
Subject key identifier: 8F:58:B2:08:87:C4:88:15:DC:0C:5A:9B:CD:A4:3E:55:D1:1D:68:9A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858483720245C8643FBBCEB11C700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.104.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:24:5c:86:43:fb:bc:eb:11:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=5e37aa38-6bdc-4342-94f3-3a9780cf4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:a9:97:8a:d0:24:89:22:98:78:ee:26:8c:
de:87:0d:55:da:ae:b3:08:fb:cb:7a:08:01:fd:78:
5a:6d:1e:48:70:36:bd:6c:9d:cd:d0:1b:f9:9c:e2:
c7:61:12:62:3c:1e:e5:3b:98:d1:68:96:e1:7b:55:
55:4f:87:74:b0:e2:45:82:3a:42:1f:15:a0:ef:ef:
a0:7c:21:c2:bf:24:54:0a:58:0b:20:a5:16:3e:5d:
7b:5e:e9:99:6c:f0:e5:89:1a:ba:21:7c:b7:5b:50:
bb:81:a9:68:88:6c:1e:9d:f7:f3:d1:19:37:d4:5a:
4c:72:ad:70:60:63:5a:8a:eb:5e:dc:e2:35:b5:af:
f2:0d:ba:65:53:fc:86:5c:f4:da:17:80:a2:d7:03:
4c:58:06:2e:74:d9:29:5b:cb:10:97:07:96:71:0f:
e5:97:cb:f3:01:4c:92:3b:d3:13:81:e9:c7:04:a4:
72:b6:2f:0d:f7:e2:db:35:51:91:8a:bc:de:2d:8d:
57:cc:f6:71:f6:0e:20:35:75:55:76:09:ca:6a:ce:
6c:7a:7b:a0:b5:14:20:17:46:a4:ad:60:e8:f2:c9:
92:c7:87:0b:37:92:8e:5d:f2:11:00:22:37:32:d5:
a3:2d:9a:1a:b1:f4:c0:3a:61:32:ee:98:4e:d2:88:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:B2:08:87:C4:88:15:DC:0C:5A:9B:CD:A4:3E:55:D1:1D:68:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:fd:86:42:40:d6:97:44:81:1e:bf:2a:74:7e:90:b1:75:7a:
f2:02:39:c8:49:04:0b:cd:7f:d0:ba:98:62:04:d0:62:48:f4:
91:9c:ee:9e:f6:79:2d:2b:36:55:a1:64:13:10:cd:cd:28:ae:
e6:fc:e1:7f:bc:6d:76:4a:4d:5d:8a:3d:bc:56:ee:51:c6:bd:
66:54:bd:cc:d0:0c:0b:6d:d9:52:0b:41:00:c6:0b:75:48:00:
d2:0a:20:48:a6:cc:52:8c:61:7e:50:dd:3b:d1:a6:16:b4:1d:
52:fa:2d:b0:4e:89:b1:57:d1:77:6c:d2:5a:d9:79:92:2c:1d:
9c:12:22:74:5f:90:03:70:3d:e9:d6:4c:67:fb:4c:6f:4d:17:
b3:35:69:0c:e6:e2:83:32:6e:53:21:8c:62:61:93:1a:23:57:
4b:68:80:21:df:93:7c:92:d5:80:a7:95:19:fa:f4:c9:4a:14:
f5:f0:4d:f4:18:46:3d:2c:55:c1:ad:2b:41:63:ec:f4:96:e5:
4a:d9:dd:fe:4c:b6:a7:57:93:25:e0:83:0d:3c:5a:b8:85:3e:
ed:eb:91:bd:3f:a1:da:61:07:40:99:dd:96:18:9d:94:6d:77:
8a:8e:d5:c8:96:33:d2:81:3d:1a:7c:c3:d6:81:3e:1b:73:e3:
c9:8f:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:03 2025 by rpki-client