Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
File: 9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa (raw, json)
Hash identifier: 8UIwtBxBlKzhsmgNnJbaqn9Z46KFzgxOE/O6viSBLN8=
Subject key identifier: A9:15:2D:06:C9:6A:5D:E2:38:B9:A3:1A:F6:6B:CC:A8:BF:C9:02:60
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56DFCB4A9A51335E0EEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.76.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6d:fc:b4:a9:a5:13:35:e0:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=2975b8c9-bdd0-4c46-8826-46115f586282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:e3:7d:90:84:b6:ea:9b:57:3b:be:6a:5e:
3f:44:a8:7b:6d:3e:69:c9:0f:65:ec:26:ca:0f:59:
54:c9:a8:17:22:6a:56:32:44:98:0e:12:fb:37:63:
50:29:e2:27:9b:e2:f3:cc:84:06:15:0c:bc:61:3c:
38:d2:6b:db:54:f3:de:89:ee:29:0f:70:fc:f2:1d:
21:57:51:29:13:a4:d8:0a:b9:1e:73:5d:60:61:ea:
b1:7b:50:10:5c:38:dc:77:33:38:e9:b6:d8:ce:c1:
f2:45:e4:52:3d:c0:89:7c:e1:d7:d5:c6:f6:7c:8c:
66:e1:1e:f5:66:24:f4:b5:3b:d1:4b:3c:b6:99:2a:
64:90:e0:0d:1b:86:48:a2:95:5a:7c:d9:5e:b4:45:
74:d0:87:9c:ef:20:01:d9:6a:47:08:02:e5:78:f4:
39:d4:3d:15:02:6f:76:53:3e:55:90:cb:04:e9:fd:
27:aa:07:ca:6f:1c:9d:34:ef:2e:71:be:e5:bc:bd:
27:ba:b7:85:e8:ce:fb:9e:0b:c9:87:b7:ce:87:e9:
0c:98:d3:f3:96:47:11:68:ad:c9:59:5e:b0:c5:42:
20:1a:ac:11:73:c5:64:64:cc:f0:74:5b:14:dd:fc:
57:f4:35:74:b1:48:35:de:39:6e:c6:ce:77:ff:a3:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:2D:06:C9:6A:5D:E2:38:B9:A3:1A:F6:6B:CC:A8:BF:C9:02:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cc33d34-1cb9-3fb2-b7c9-3ee5e28fddf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.76.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a1:b0:03:34:c2:e5:bc:15:51:69:6b:26:e0:89:f7:a9:a5:
34:42:c6:e6:48:ac:bf:ba:83:67:a2:ce:30:da:bb:ee:02:dc:
30:3c:7a:a8:62:e4:5b:80:74:cc:07:ee:5a:a5:84:de:fc:0e:
67:0e:90:9a:bd:2b:9a:72:ea:f7:f0:86:5e:6f:4c:12:6e:c4:
bc:c7:3f:10:cd:50:2b:71:b1:a0:99:37:7e:a7:32:9c:e4:b8:
bd:5b:99:3d:ea:6b:61:b4:74:23:44:96:15:07:b7:8c:13:95:
e3:ea:e7:7a:69:f6:f6:b7:c9:2d:b2:9a:97:02:cb:cd:b3:f4:
ea:7a:e7:b8:99:60:77:75:cf:4b:bf:0a:29:28:42:51:8e:9a:
6c:b3:21:37:b9:a5:2d:fa:9d:4a:1f:a3:ee:03:ea:25:82:07:
72:ac:60:84:16:e3:be:5e:cd:a2:d7:82:b4:e9:b2:39:f4:ec:
43:4a:79:ab:fa:33:7a:f2:21:0c:1a:93:94:18:d6:c9:b1:85:
9b:1d:19:ee:59:6a:72:d8:6e:b8:29:6b:a7:13:36:1a:64:41:
57:8d:1e:de:41:82:fb:64:ca:b8:43:81:7b:59:7e:7e:14:a8:
d6:78:56:5b:11:b5:7d:3d:f0:f7:87:e0:df:29:29:dc:f4:25:
dd:e6:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:21 2025 by rpki-client