Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa
File: a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa (raw, json)
Hash identifier: OxhWFEmx5cnKFqo6J4teT032rpcFPLxTur4GnWAtsCw=
Subject key identifier: F4:D2:A9:20:6D:97:73:81:F5:36:C9:8F:E1:BC:80:5F:74:35:9A:C1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584837202338D634701C67817F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.104.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:23:38:d6:34:70:1c:67:81:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=82a0487a-44c0-4c53-8a25-14c4cff485a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:12:50:7f:fe:f0:08:bf:32:bb:e0:a6:0b:
ae:34:00:74:86:68:44:45:8d:2e:c4:23:ec:63:7a:
96:d3:f7:de:af:be:af:d2:00:43:9f:55:24:12:87:
a3:70:d3:a0:61:eb:70:16:84:cb:43:8c:87:b1:2c:
90:e2:02:79:1d:ad:aa:1c:c5:3b:74:54:e7:4e:ee:
16:52:c1:c0:e7:3c:b2:af:4b:b6:95:c6:e8:c3:7b:
cc:1c:84:ed:7b:97:16:26:bd:7e:5a:73:d1:90:96:
d5:63:36:55:0b:1c:e6:d8:32:af:68:4f:04:4a:09:
fd:b7:94:d7:b9:76:cc:b2:4c:b4:8f:aa:05:a8:42:
dc:5f:a5:5a:42:02:31:f8:f9:66:d0:24:3d:ef:3a:
2e:f2:a7:9b:98:c8:3f:fa:e5:e2:f4:24:05:30:9e:
db:2b:d5:3f:f0:12:2e:cd:8f:33:6b:43:a5:a8:c1:
91:07:52:f2:10:4d:5b:9b:20:4c:55:e9:6a:29:08:
49:6a:e6:15:6e:8a:03:26:87:85:3c:e6:19:e8:27:
07:32:fc:47:01:0e:b3:a0:6f:7a:48:5d:03:c3:99:
df:23:12:32:7b:a5:90:49:74:a3:a7:c6:c0:cf:0a:
10:9a:36:6a:b0:8b:7a:6b:23:38:bd:ce:a7:eb:6a:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:A9:20:6D:97:73:81:F5:36:C9:8F:E1:BC:80:5F:74:35:9A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a7:30:ff:c2:60:64:51:54:7d:ba:20:bd:44:6f:13:35:0d:
2f:a6:27:d2:4d:27:d2:e4:ea:30:7d:39:2a:c3:1e:40:46:74:
30:38:33:4e:8b:3b:b0:5a:a2:21:66:c2:7e:8f:fb:a1:c6:bd:
b2:0e:7c:92:7f:1e:3f:fb:e0:65:21:b6:19:1c:cb:ed:81:40:
dd:ac:cf:ed:2e:cb:f6:68:bf:4e:c0:03:86:67:25:87:79:4d:
1a:0f:37:7c:4d:ec:6c:28:0b:44:46:33:96:16:28:7a:f6:f6:
69:1a:45:07:41:fd:94:1e:c7:1e:43:53:7f:76:9d:90:1e:7d:
0b:01:24:a0:a2:bb:92:a0:47:ff:5e:3b:a6:cc:b2:9f:73:47:
0c:bc:21:db:7c:85:04:96:59:75:18:c1:58:a6:ba:26:c1:6f:
fc:4f:94:00:d8:ae:2a:3a:af:ed:8e:fd:03:75:97:d1:13:19:
fa:f1:11:47:54:03:f3:c6:9e:2c:f5:01:3b:68:8c:d1:0f:bd:
e1:bd:93:2f:38:32:e7:a1:80:96:b9:bd:9c:43:1e:f4:da:43:
6c:c1:d3:6e:9a:32:59:58:c9:f1:47:a7:f2:01:96:b5:21:15:
e7:7f:b5:85:e9:c0:eb:97:4b:68:75:ed:80:bd:74:31:f6:0e:
f9:a2:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:06 2025 by rpki-client