Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
File: 71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa (raw, json)
Hash identifier: dSd+HTr1oTj7jsGFvniEdA9s32aLZdQBT998g2LUjCc=
Subject key identifier: 5D:22:C3:30:F3:FD:AE:51:4A:4A:EA:D7:FA:C4:49:FE:42:6C:17:FC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C177C649E622D1CE8C60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.109.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c1:77:c6:49:e6:22:d1:ce:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=4371c8eb-0f16-4947-9d13-eea4ad0e1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:47:c9:be:e8:58:1b:f0:27:b4:34:1b:32:
5a:9c:fd:48:c1:53:ff:1b:f5:bf:8c:5c:8c:28:a7:
6f:75:1a:f0:b9:a1:f4:6c:8a:24:2b:38:82:2c:8d:
a3:39:d9:c9:e9:cc:3f:c0:3e:63:d5:04:19:9d:03:
de:b5:32:67:8c:00:c6:dc:71:13:33:fe:5c:26:0c:
16:da:58:b2:29:d3:7a:28:37:b4:f0:3f:4e:2e:8f:
00:63:47:6b:df:99:d9:d5:7b:05:1f:8b:02:c1:d9:
47:ba:57:e8:46:58:a4:10:38:37:38:37:ff:c3:68:
79:d8:9a:b2:26:70:47:59:fa:5e:33:0f:53:cd:1b:
05:f1:2b:ca:c2:f4:08:83:12:3f:1b:5a:ac:21:b1:
37:07:8a:2e:3b:2d:c3:e5:f6:2c:cd:9c:b7:4a:68:
65:3b:8f:95:d3:49:0b:9f:fe:eb:04:69:fc:4d:ae:
ab:3f:3c:2a:e0:49:ff:3a:05:68:48:38:10:50:c6:
1d:ba:92:da:16:c4:85:36:ff:7a:df:30:54:1c:53:
3b:68:da:c8:24:61:99:1f:41:27:88:53:7f:1c:3d:
c4:8d:03:8d:70:34:3e:9b:45:c3:be:92:cd:d0:a6:
31:d9:82:57:73:f9:80:0a:b4:99:b1:3b:f1:4d:ba:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:C3:30:F3:FD:AE:51:4A:4A:EA:D7:FA:C4:49:FE:42:6C:17:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71bf8c6f-429c-3ca3-adf3-005f6ab5a4c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:3d:d4:29:08:0a:03:90:0c:c9:5c:ed:41:be:67:36:71:75:
ae:04:cd:9a:34:3d:df:f0:82:26:35:1e:f5:41:fb:e4:2f:a3:
d9:e3:7c:6d:f2:40:d0:bd:5c:0a:ee:f3:02:c1:39:95:4e:6f:
eb:c1:ae:b5:36:33:2a:2e:a4:3f:fa:99:46:d8:ec:83:7e:18:
95:38:f3:e9:f3:c7:10:58:b1:52:b9:dd:c3:13:c4:94:3c:7f:
25:d9:76:a5:fc:35:e1:0a:11:17:00:7f:5a:c6:60:6a:4c:ad:
e8:67:95:57:94:67:39:1b:7e:b1:c8:0e:f4:f3:81:82:73:f8:
cb:1c:82:ab:64:a0:b7:1a:4d:cf:4f:b3:6f:3e:72:bc:a3:e8:
01:b6:36:cb:b9:2e:ce:23:bc:9b:d3:7c:6f:2b:bd:27:f0:97:
58:7c:cb:4c:97:fe:c4:47:04:55:e2:f3:b9:aa:8a:3d:08:15:
34:93:5d:2d:cc:3b:f0:7a:6b:8c:95:53:16:c0:4d:c6:67:80:
03:7c:d9:50:34:d5:7a:0a:70:2a:e2:ce:52:c5:27:4f:ce:10:
bd:91:9f:06:7c:5e:77:19:3f:bd:69:6c:67:c1:9a:ff:e0:c6:
55:4e:4a:20:62:1b:8c:ce:2e:e2:a7:28:f2:ab:f7:bc:c2:85:
c9:1b:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:47 2025 by rpki-client