Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json)
Hash identifier: eYtCikeyxAuUPTVZUgJ7G3yemqxACteEUR4DX0QIPVE=
Subject key identifier: 03:FE:C4:7F:47:83:A4:07:D6:1A:67:D3:C8:D4:25:FA:25:9B:E1:95
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C0142CC1F1B34D92BF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.107.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c0:14:2c:c1:f1:b3:4d:92:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=539115fc-0d55-4adc-aeef-8ec8317795db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:34:f5:b0:6a:2c:02:ea:22:e1:e0:03:aa:
4d:7f:6c:ec:f4:f3:9d:ac:b9:85:4d:cc:12:47:af:
5a:97:d9:15:3c:cd:44:2b:76:a5:b1:b6:3a:a2:c2:
81:e3:0d:f6:52:72:fd:ef:4b:6c:20:02:f1:11:03:
37:82:11:aa:31:6a:52:e3:7f:ee:06:3c:c5:98:ed:
06:68:00:5d:24:2f:5d:86:6d:86:45:57:12:5d:eb:
f1:e4:36:7b:f0:9c:ed:09:9c:21:b5:c5:93:fa:72:
25:ad:94:98:6c:16:12:c7:f2:e7:ac:1a:12:19:b2:
2b:02:e7:18:b7:1a:56:66:5a:c3:b2:50:6e:75:6b:
7a:00:5f:f3:2a:7e:89:e8:87:02:89:72:b9:34:31:
ca:20:1f:ad:10:f3:44:a1:b5:7f:a8:d9:eb:24:a9:
71:16:94:e3:a6:b1:3f:e1:c7:fa:90:dd:21:53:5b:
18:e4:0c:f9:b0:4a:c1:a6:bf:a6:51:32:94:a4:bb:
ce:88:97:39:6e:8b:87:ff:ce:4b:1d:cf:2b:df:67:
31:eb:ce:4c:98:9e:12:89:d0:08:ab:d3:d0:c5:de:
3e:29:57:fe:d7:b4:01:a2:2f:d5:6b:b0:32:d6:28:
f6:c0:39:52:f1:08:ea:46:73:71:6f:02:59:64:55:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:C4:7F:47:83:A4:07:D6:1A:67:D3:C8:D4:25:FA:25:9B:E1:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:06:36:d8:79:0b:ca:02:38:ab:10:3a:1f:23:69:ce:5f:cd:
58:54:72:fb:51:3a:25:b8:ab:29:01:b1:0b:de:c3:18:07:53:
6c:b3:45:82:5f:9e:2d:26:c3:fd:1f:54:8b:2f:d3:a0:23:09:
e2:6a:bf:e5:f3:75:c6:ef:fb:78:dc:e1:73:44:f9:4b:fa:1c:
d1:45:e5:42:8f:75:71:7a:24:59:a7:7d:69:f1:3e:78:2c:90:
33:f5:e3:b4:c0:55:23:22:ce:8a:64:89:f5:be:7e:73:0c:28:
52:58:0f:ab:73:01:6b:d5:24:9f:46:2e:17:4b:26:30:e4:8c:
78:94:b1:e5:8e:39:62:3c:7e:c0:2c:24:3e:3f:27:36:ad:26:
e0:24:0f:88:64:ab:ad:22:23:08:0c:29:78:82:27:4c:e1:ef:
a2:b1:a0:45:19:56:f8:95:a9:12:37:61:da:7e:44:88:dc:e1:
41:b8:04:be:12:ae:e0:75:81:a8:6c:7d:62:93:56:33:ba:ad:
5a:bb:e2:ce:d4:c8:4e:fb:b4:cd:82:5c:1a:63:85:0c:08:41:
72:8a:f5:9c:d3:91:35:39:6f:54:40:f4:6b:36:a4:59:1b:2d:
50:34:f2:fd:ba:be:91:a0:1d:d8:e3:ff:b9:23:45:3e:3b:0c:
bf:c4:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:11 2025 by rpki-client