Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855964cf-c84f-36b8-be38-760f6d75f87a.roa
File: 855964cf-c84f-36b8-be38-760f6d75f87a.roa (raw, json)
Hash identifier: yJ7/i5yzAwOl6Owk3dxEp7KlrEetlyQHltBj6rYZ1RM=
Subject key identifier: DE:25:38:52:D4:59:56:FD:1D:AF:88:1C:6B:C2:43:69:24:4F:06:9B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BBC2D07BFAEB909BA180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855964cf-c84f-36b8-be38-760f6d75f87a.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.108.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bb:c2:d0:7b:fa:eb:90:9b:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=7df04232-195e-4ba6-925e-ee611adca25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:b0:12:63:5e:5e:42:09:ef:de:da:74:d7:
46:fc:00:e1:33:72:89:7d:4b:32:e4:eb:9f:82:45:
c4:e5:ff:c3:58:fc:be:26:db:21:9f:4d:7f:b7:2f:
a9:07:e5:60:d7:e4:a8:a6:26:8d:88:4b:5a:1a:41:
7c:a5:ef:3b:76:5b:f9:4d:78:6e:73:bd:f7:04:88:
ec:ce:25:d4:b4:77:90:f7:cb:7a:d3:1b:62:85:b6:
b1:a2:a8:85:78:4e:dc:9f:e8:27:f8:e8:8e:38:cd:
40:9c:15:7c:6e:32:1d:99:df:fb:a5:7c:c6:81:8c:
12:a7:b6:dc:22:2d:ee:6b:55:84:63:b5:bb:55:1d:
ed:e9:80:a8:19:1d:99:72:58:9d:2a:ba:87:11:91:
59:b6:c9:c5:01:7f:2c:6b:b7:17:d1:d5:5d:45:14:
c6:92:5b:60:f6:60:84:15:fe:f4:18:c5:64:69:8b:
ab:6a:7e:5b:4e:8c:c2:44:81:14:d5:8c:f5:50:71:
c7:ee:a4:58:2c:62:6b:ec:d1:2a:96:f9:59:a1:b4:
ba:d3:4d:6c:11:7f:0f:97:ba:bb:39:a4:0d:b9:04:
c4:28:68:7c:8c:6e:ba:9f:04:86:5d:07:2c:06:c3:
63:01:bf:6a:c5:25:d4:f2:b8:e7:39:e3:d5:5f:34:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:38:52:D4:59:56:FD:1D:AF:88:1C:6B:C2:43:69:24:4F:06:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/855964cf-c84f-36b8-be38-760f6d75f87a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:29:20:51:a5:95:37:50:c6:42:68:fd:e3:68:3f:ba:30:22:
91:54:48:f0:97:ad:83:52:47:ca:2a:8e:6b:19:ae:f9:f7:a3:
58:48:c9:c0:1f:ad:1f:07:d7:c4:88:72:2d:cf:07:06:23:5d:
55:c9:a9:c9:84:d7:3c:29:a8:fa:3b:b1:8f:f7:6b:08:09:32:
c3:59:14:b1:59:6a:34:43:16:24:fa:80:6a:79:ef:15:67:29:
a9:86:f3:6b:c5:a5:e2:de:1f:4e:44:40:a4:14:65:56:9a:a2:
01:6c:7a:ba:04:86:a5:43:87:02:34:96:c8:99:46:35:f0:56:
81:52:73:0f:ef:55:9e:8b:fa:89:5d:82:48:76:56:49:9b:4a:
ba:80:e1:b4:1f:74:f4:a3:ec:7c:17:bf:d9:0b:e7:74:3e:ee:
59:98:6c:d8:53:30:ca:8a:97:52:3b:ec:e0:7f:ed:9b:03:15:
19:15:a8:a3:0c:13:92:40:5d:57:9c:7f:bb:7b:b2:e0:53:59:
99:4c:57:72:4e:7e:8d:7e:b7:b1:2d:ce:78:13:45:46:0a:0e:
dd:c8:ba:eb:b7:d3:23:f6:3f:24:62:1f:71:c7:33:25:33:d7:
c1:00:30:42:59:88:ab:e6:e8:7b:2b:a1:4a:86:16:dc:ad:48:
58:c2:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:15 2025 by rpki-client