Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa
File: 871ae4b0-a747-399d-90cc-9f91678c7d4e.roa (raw, json)
Hash identifier: Ujmai/FHzXsokqOTVxc340kWgym6LcmcyRUIVEmBiSQ=
Subject key identifier: D2:6B:59:5A:30:72:03:84:9A:49:85:99:52:1B:6A:D2:6C:A5:DF:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858483720232B4D6E7CEEB24174C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.96.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:23:2b:4d:6e:7c:ee:b2:41:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=dfba718a-6755-4b16-a3e0-b5268cb7915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:a4:6a:dc:b2:6d:af:c0:c6:b9:e5:8b:ef:
a9:74:9a:1e:10:9f:91:3d:5b:89:bf:16:e1:49:c8:
2c:46:dd:e5:34:3b:31:b9:18:2d:50:4c:a7:ea:c5:
52:99:9a:62:99:30:76:8f:82:aa:64:76:ca:3e:f2:
4e:a0:ba:87:a4:57:12:16:2f:a4:44:ad:79:75:8d:
cb:19:a0:bb:38:ab:2c:e9:cd:75:f9:33:ea:ae:3b:
28:56:7d:4b:ff:c7:30:74:b5:34:3c:39:43:df:55:
78:4c:49:87:0f:8b:e4:c6:60:aa:8d:bc:3c:5f:47:
fa:4c:3d:cb:7e:17:af:6b:0f:78:79:ca:01:01:a7:
9c:7b:bf:f7:92:2d:ec:be:45:96:98:d1:43:2b:e1:
b4:82:ca:d3:f6:88:e2:d3:26:af:47:af:d0:6d:d0:
5b:55:a2:e8:cd:9b:b9:02:80:2a:55:58:fb:ce:9c:
2c:41:de:0e:2f:d3:72:17:7b:19:b2:ba:45:ea:9d:
da:61:b1:cf:3a:8e:f1:f7:e9:92:96:31:24:f1:c0:
97:8f:37:0d:97:42:31:6e:a4:eb:77:7c:8b:d7:f7:
32:35:64:74:3b:81:ef:87:3e:83:b1:66:b1:f3:50:
11:49:73:4d:9f:f8:11:3c:e3:45:e6:dd:75:d2:59:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:59:5A:30:72:03:84:9A:49:85:99:52:1B:6A:D2:6C:A5:DF:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871ae4b0-a747-399d-90cc-9f91678c7d4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:b6:a4:77:ba:c9:04:27:7f:88:9e:3f:67:16:59:1d:56:de:
24:8c:fe:e4:f1:01:7f:00:02:51:78:6d:f3:bd:51:aa:b5:b0:
c4:fb:1a:9e:54:03:5b:12:57:be:b7:9d:0a:41:4d:c4:4d:66:
86:69:3e:91:9c:62:52:21:df:2f:23:89:01:b1:aa:24:49:c2:
81:05:a3:82:c6:b3:30:9c:03:c4:48:65:15:e3:fb:d1:99:9b:
e7:ac:ce:41:a3:f0:a7:c9:60:c2:1e:19:f1:42:7e:16:e1:12:
02:e0:84:a1:ed:17:81:8a:7b:db:fd:a0:fc:9b:53:e9:f9:7d:
d2:1e:fe:8e:75:56:d5:50:ae:87:c2:2f:99:67:b9:93:51:b6:
09:e1:d2:84:aa:bc:ab:a6:0e:07:0a:1f:ff:6b:e4:37:82:41:
4b:0e:cb:87:93:37:1c:71:73:78:ba:59:45:f9:1c:1a:a0:2e:
37:9a:5d:62:d6:fe:b3:4a:12:4f:b8:c7:12:af:22:74:ce:38:
d8:8c:c3:cf:a6:57:65:37:4a:5c:55:36:ac:50:5d:7e:c2:f0:
9b:57:20:93:fa:db:ef:13:95:c6:86:bc:08:ec:66:d1:2f:cc:
2c:22:a2:52:df:d2:6c:12:9f:1b:d2:ce:37:4d:42:86:5f:d5:
ab:70:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:02:24 2025 by rpki-client