Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa
File: aab0cd89-5b55-3dab-bda0-b383af228be2.roa (raw, json)
Hash identifier: UCkgaG2+5YjJkDsmVbAFudYKGIMeyYCsQKTK7AcaSzE=
Subject key identifier: F2:66:B5:9B:C3:29:6F:BE:91:38:6C:43:77:8C:B2:CD:3B:D6:C9:F6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BF8C9E6AEC8F988C4FA4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.109.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bf:8c:9e:6a:ec:8f:98:8c:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=9e62301c-843e-49fb-8a9e-70b2d927b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:c8:c9:01:ab:8b:20:8b:99:55:a0:8d:ab:
22:80:e9:b8:03:ac:82:4f:09:09:10:0c:9f:d2:7e:
1c:c9:ec:c2:15:bf:44:54:14:56:b1:ca:9b:84:83:
25:51:f8:0e:a0:a9:1a:d3:14:25:d9:b6:a0:10:ed:
63:b6:5f:21:03:04:a3:26:a8:8c:45:6f:7b:5b:6f:
30:7c:e3:21:8e:c6:c9:90:ee:47:ec:54:95:6b:a4:
a6:53:85:15:e5:0a:04:08:0a:84:a0:40:18:12:61:
1c:08:db:91:a5:af:cc:f4:ec:4c:14:95:84:9b:88:
f8:e5:2f:7e:90:89:09:df:93:ad:92:96:0e:60:e5:
d6:16:b8:b1:bd:00:bf:bd:29:e1:03:8f:2a:a4:1b:
2c:fd:be:4d:7d:33:4c:a8:08:1e:73:6f:44:3e:9f:
bf:b3:43:8a:f8:2f:ba:05:99:b0:88:3f:2d:42:4f:
17:c7:de:83:b7:0e:97:8c:ac:c0:b2:ec:21:90:39:
94:a9:e8:6e:8a:8d:ac:5a:3d:7e:79:df:eb:60:d8:
36:43:b7:24:84:09:0d:85:a2:d6:ab:e0:23:66:61:
30:da:1b:22:53:e4:6b:c8:ae:df:8d:d5:55:26:c3:
63:ac:c8:11:79:51:a1:67:fc:85:f1:24:9a:49:66:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:B5:9B:C3:29:6F:BE:91:38:6C:43:77:8C:B2:CD:3B:D6:C9:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:82:24:e4:f6:21:7e:c5:16:4a:d6:80:53:e4:aa:9b:65:36:
95:e6:f1:b0:70:59:7e:66:44:19:60:cd:4e:a3:ba:07:6b:3e:
9b:a8:6d:9c:f3:c8:25:47:48:f9:bd:5c:d2:73:fe:62:ab:c1:
b3:f3:ea:53:1b:6e:c6:69:54:28:33:24:0e:a7:b1:8e:9e:4a:
13:34:73:32:38:37:f1:87:09:68:46:90:ff:bb:43:59:24:ae:
d2:ff:94:50:0b:63:37:bb:c5:1d:3b:c2:2a:42:dc:39:3b:2a:
18:d2:06:46:10:1d:e1:a9:bc:92:08:1b:b5:db:09:8b:51:44:
03:2b:c2:ee:58:d0:3e:b3:a9:12:76:54:c1:11:56:40:54:8b:
44:54:16:d9:f1:06:8b:ba:5f:77:b4:f6:db:12:f0:d9:e4:a3:
ea:f2:02:88:fb:17:9d:58:cb:c2:08:92:97:26:c0:49:ec:e0:
40:fe:33:1e:6a:5b:67:02:a1:b9:57:49:2a:f2:24:ce:c7:35:
4f:9b:f4:f9:9b:b0:03:27:c8:1b:59:cb:89:a6:07:75:3f:ac:
04:27:48:50:24:84:75:7f:c7:74:36:98:b9:15:8b:91:9b:cc:
fa:bc:57:78:53:c2:69:a8:c0:70:d3:3f:8b:6b:5a:ed:d6:16:
7e:9b:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:03 2025 by rpki-client