Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa
File: b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa (raw, json)
Hash identifier: x5u2T51HCW0O/k2i0hUEjpKpQkGi2w70Z5xBtOcN+Wo=
Subject key identifier: B8:C0:76:0D:C8:B3:E3:EC:F9:D5:91:D9:BF:77:7B:A8:AB:3A:F8:0A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C67AEA9297DD62965CD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.103.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c6:7a:ea:92:97:dd:62:96:5c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=3cbab24e-b8d2-40a5-8178-8faf5fbb01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:40:9a:89:d8:74:66:9f:96:1f:c8:1f:a2:
06:f7:3e:ac:86:d5:ec:66:aa:0b:32:cf:36:23:6d:
27:a6:a1:b6:15:ae:10:ea:00:0f:bd:01:07:8d:3a:
95:a5:9e:61:84:64:bc:23:d8:21:be:02:76:9c:64:
17:5e:98:39:1d:3f:7c:a0:a7:d5:0e:53:1b:71:8c:
db:09:d1:c0:86:f1:0b:a6:6d:62:8f:aa:a3:98:5d:
18:e9:0d:5a:ca:e6:17:28:9b:d3:c4:0c:f4:52:9c:
47:2c:00:95:9c:78:0c:48:d6:68:d1:d2:55:78:66:
54:6a:9b:bd:10:d5:80:16:b2:74:6f:3d:28:7a:22:
bb:76:3d:01:34:03:2a:8e:84:95:49:11:d8:8b:16:
0b:4e:c1:03:30:47:a0:8b:f8:7a:fd:4e:ab:d5:9c:
98:d9:c4:bb:65:e5:e9:f9:f7:4b:fe:d3:28:6f:27:
18:a2:a7:bd:cb:11:67:00:3b:38:7e:57:2a:cf:e2:
b5:c0:9c:a9:b9:f6:fb:60:e5:5e:b1:c1:1d:4d:47:
72:16:17:78:7e:88:25:e8:93:2d:b4:3c:3e:83:41:
13:77:19:fd:aa:a2:da:f8:dd:68:5e:d2:95:42:ca:
ba:6a:3f:80:60:a3:01:af:e3:ba:3c:1b:9e:3a:78:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C0:76:0D:C8:B3:E3:EC:F9:D5:91:D9:BF:77:7B:A8:AB:3A:F8:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b757d29a-92f9-3a7c-94bc-5866b5dc2145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:19:c7:7b:8e:29:11:92:b8:19:0e:1b:c2:58:60:b6:e9:89:
79:a4:d3:e3:80:4e:15:7e:e0:19:1f:b6:f1:70:e7:a3:89:d8:
be:e9:aa:07:09:b4:36:b9:7c:81:c2:1f:3a:e8:ad:d6:be:a0:
0b:c4:30:10:5b:97:70:20:a9:82:b9:2b:be:57:e5:1e:43:26:
9f:60:ba:08:08:6c:bd:e2:da:3c:d8:05:b5:8d:96:67:28:60:
5a:e0:bb:e0:7d:a6:bf:f8:88:8c:8b:e5:cb:80:f7:5a:6e:20:
20:c2:ed:0b:5c:43:59:b6:c4:6f:36:59:61:d4:88:d1:df:21:
5c:a8:b5:a4:9f:d6:a8:bb:ca:fe:84:f0:15:e4:c1:b4:b8:30:
14:88:08:34:db:7f:68:e9:26:62:ea:bd:80:fc:d0:dd:85:21:
1b:8f:b5:57:00:a9:eb:04:5d:78:bf:63:a5:df:d8:bb:c1:cf:
93:e9:03:45:8c:ae:92:7e:ab:ff:89:1d:d6:07:22:19:48:64:
24:70:7f:3b:02:02:f7:d1:03:eb:39:fe:ec:d5:26:04:ae:e3:
8d:ab:d9:7c:7e:c5:fa:30:2f:c4:4d:ca:2c:9c:ff:9b:f8:bf:
aa:a7:8d:85:16:7a:8f:b4:9e:31:43:33:b8:b3:bc:14:e1:82:
7c:7f:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:19 2025 by rpki-client