Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa
File: 853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa (raw, json)
Hash identifier: yiFfE2jaIsZCJf3DQwU7IHcZA25FLYLTQQhQOpRbvJE=
Subject key identifier: 38:11:FD:DE:12:37:A7:3F:2F:94:BA:54:B3:0D:13:E2:F8:8F:61:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF561D8E0CD1D4B70544800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.89.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:61:d8:e0:cd:1d:4b:70:54:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=dcfcd076-abb4-4915-89d4-924e1477196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:22:d3:5a:91:71:c2:93:11:b1:b9:a0:bd:
b6:43:7e:50:5b:47:cb:5a:a9:d8:e2:6c:3f:a3:21:
ac:7d:4a:62:8b:6c:48:f9:3c:17:84:02:00:7e:94:
ab:ed:4d:32:89:35:ec:79:81:c9:67:78:36:b9:93:
d4:d2:f4:ae:c9:88:e8:7b:60:fc:95:39:e4:d4:a0:
e5:cd:01:94:f0:9d:9f:ce:82:1e:a5:ef:61:90:1c:
1f:65:8b:1e:2a:6e:ce:46:2f:c4:0a:e6:24:8a:22:
f4:27:4e:44:93:be:37:82:62:66:cc:5f:b4:22:74:
79:65:71:40:8c:9a:70:b2:d3:c9:59:01:55:6a:ba:
eb:50:c4:34:63:d2:d5:12:51:a9:16:dd:a1:98:c8:
1c:f2:1a:3a:1e:41:24:15:2e:58:6d:78:37:d3:61:
a2:d6:7d:cd:c3:70:c5:ab:59:f0:d9:44:9a:bc:7f:
3c:a3:46:8d:3f:c7:e0:35:fa:aa:58:5a:e7:37:0d:
0a:7c:b5:87:28:e7:d5:4e:a0:62:cb:73:4d:73:e9:
d3:79:ab:6a:35:7e:1b:36:15:91:63:53:0d:f7:f9:
dc:e1:0c:e1:0f:7d:ca:46:22:4b:f4:8b:19:37:5e:
d2:b8:e2:14:2e:01:cc:9a:b7:30:f5:85:6e:84:b4:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:FD:DE:12:37:A7:3F:2F:94:BA:54:B3:0D:13:E2:F8:8F:61:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.89.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:13:a3:51:5a:dc:44:87:eb:f0:21:d0:db:68:20:30:42:81:
34:c4:e2:ac:79:e7:71:89:46:5d:4a:39:2d:c5:4c:b9:38:62:
30:c9:fe:f5:80:71:b9:73:2e:52:72:14:62:ce:48:1e:6f:7d:
47:f5:94:df:5c:31:76:71:55:22:c2:0d:c9:d9:44:72:0e:6e:
5c:be:24:d2:f2:a6:8f:c9:07:d6:cd:ba:5b:30:fd:63:ed:b1:
b5:04:ac:4d:f1:60:cf:74:0d:ad:f6:39:55:20:e9:61:27:da:
45:84:73:85:b3:76:12:7e:a6:be:23:0c:f3:cf:e6:72:c5:0b:
41:b8:c0:66:ce:54:1b:7d:56:cd:5c:fd:f7:d4:2a:bb:bf:26:
80:8c:45:5d:63:e4:c4:92:ec:c8:2e:e1:45:35:6d:a2:db:29:
30:78:df:36:f0:06:6f:3b:fa:28:f6:af:74:23:00:78:f9:30:
dc:c2:2a:cc:e4:cf:d8:6e:38:7b:b4:e0:fc:fb:7a:01:ac:db:
e2:8d:64:ba:ea:31:61:16:68:7c:b5:f6:ec:3b:3c:66:31:d3:
52:e6:5a:6f:67:f7:57:8d:5a:43:05:32:f0:8c:a6:ed:f8:0d:
11:9e:4c:3d:ba:6e:9c:98:47:a7:ca:e8:b1:1c:93:90:9d:da:
87:52:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:18 2025 by rpki-client