Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
File: 888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json)
Hash identifier: B7IlLybZw506HZeUTOxbm2l8Po5EVopUz2/Bh+2Jmss=
Subject key identifier: CB:7E:5B:24:28:FA:1F:F5:82:90:B4:5D:49:92:6D:DF:1D:2A:AA:8C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584837201C3D0669991DF5B15100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.97.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:1c:3d:06:69:99:1d:f5:b1:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=c055dbdc-c193-4637-8a72-92285b899093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:06:e0:80:56:8a:1b:7c:7c:59:3d:fd:e5:
39:7a:22:70:27:3a:cd:38:be:8e:01:8a:03:4a:93:
78:d1:b2:a0:a0:43:26:b2:f5:f1:32:ff:03:0e:24:
54:db:1e:e6:89:16:43:5d:77:5a:98:1d:e9:38:65:
ab:4a:93:cf:f0:80:4b:be:a4:b9:c4:05:b0:9f:ca:
f0:28:1f:45:92:5e:88:63:e4:6c:19:c7:aa:82:6f:
1f:42:68:c1:70:76:39:72:74:6f:06:50:ec:02:4d:
88:b9:8c:52:12:94:a6:1d:ba:3e:e1:d9:31:4d:ae:
0d:5f:60:6e:68:3d:ba:3d:85:99:d8:cc:a4:31:ad:
b2:6a:fd:06:f8:d4:1a:17:50:3c:6b:07:95:6d:6e:
54:e2:00:d6:79:82:38:4f:e7:22:58:c7:26:d2:b4:
6c:b0:63:19:af:92:e4:d2:57:cc:f0:e8:f5:4c:de:
02:12:8e:4b:84:9e:d8:f7:ae:b8:81:54:c1:3e:12:
cf:81:9c:2f:4c:4a:05:82:ce:18:d2:0a:c3:9e:45:
24:17:fa:55:19:1c:32:c9:32:57:3c:1b:4d:4f:7b:
22:93:7b:00:a9:3b:e5:cb:fa:27:69:a0:17:18:7e:
6d:41:49:48:a1:03:a6:3c:51:99:76:14:6a:76:2e:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:5B:24:28:FA:1F:F5:82:90:B4:5D:49:92:6D:DF:1D:2A:AA:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:dc:bb:86:f0:4f:f8:29:b1:0a:12:e5:8d:a3:31:7d:27:98:
0e:b6:1f:a6:5d:84:48:e6:6a:fb:6a:ef:b2:bb:a7:8d:47:13:
95:56:65:00:44:84:b6:8a:ff:ca:6b:96:bc:c7:03:8e:93:2a:
21:71:b4:e8:e2:9b:56:c8:47:e5:e4:7f:1b:a3:61:ae:dd:4e:
d5:01:f8:77:4c:8b:ae:fe:0d:7e:af:25:6e:d6:03:ac:ce:d1:
f3:4e:0e:c0:d3:51:65:5d:aa:6a:ef:96:8c:b4:b6:8f:15:7b:
92:4d:cc:e0:3d:12:4b:fb:e7:6c:5e:d2:a2:3a:ce:63:cf:4b:
13:c5:54:6c:24:ee:d8:72:1b:ba:b7:5d:04:75:5b:2e:f7:e3:
50:c6:04:49:4d:9d:8f:e4:a7:7a:93:43:75:86:3d:a2:d6:fd:
04:0f:62:dd:b3:90:6e:90:84:be:aa:3c:69:6f:27:7e:5e:39:
76:8f:ce:19:24:b8:81:39:64:f8:36:91:42:71:89:61:b4:a0:
df:33:e3:20:72:23:a0:ea:c2:60:0d:e6:45:da:07:e1:83:86:
5d:cb:52:82:05:4e:14:39:24:c9:47:c4:36:44:e2:61:e6:d3:
47:7a:7a:c2:fb:05:08:28:e1:74:2d:0e:60:50:ed:b0:5c:b1:
49:13:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:46 2025 by rpki-client