Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa
File: c37ad8f7-65b2-38e4-920e-a373f524040d.roa (raw, json)
Hash identifier: 9AvtR9ALYbb3yqy8/Jwn1mxi7QwY/OhLINDXBWQF0Q8=
Subject key identifier: AD:CE:9A:FB:4A:F6:B0:CE:06:82:3C:05:C7:38:B8:18:B6:EB:92:DB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848372022C89EAF2AE8EA7C1D08
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.96.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:22:c8:9e:af:2a:e8:ea:7c:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=698000a2-898a-48bf-8a5f-3f321bbf3eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:aa:db:bd:5f:6c:00:d3:0a:72:d3:df:dd:
8d:6a:19:af:dd:55:74:ee:af:ea:bf:d0:9b:5e:64:
8d:b8:64:9d:58:2e:69:94:83:85:1b:71:d9:33:96:
3a:7a:f6:bf:ad:e8:28:bd:7d:2c:7c:52:fc:ad:c6:
35:0a:1f:90:e6:ee:e5:65:d3:04:f4:6f:41:cc:74:
8e:fb:9c:7b:0d:11:04:f7:3e:5b:cb:ad:59:c9:3d:
23:76:2b:ad:4e:36:eb:5e:90:dc:5e:e7:c1:29:76:
3f:25:7d:11:13:48:24:30:9f:8e:cd:29:1e:10:19:
88:6a:77:51:13:21:57:3b:99:fc:82:8a:eb:8c:d7:
a7:61:2a:b8:8b:61:5c:f8:1d:ef:2b:90:85:aa:3e:
7e:ec:d4:4b:a7:58:45:a6:18:62:0d:48:c1:94:60:
17:87:f7:7b:e5:c2:f8:b0:46:92:36:97:fa:66:ca:
f7:26:30:45:df:9e:a7:1c:06:b9:b6:ac:b7:7b:96:
85:5b:35:35:bc:61:e7:f0:1a:4d:c9:8f:e9:e9:eb:
94:03:f3:0a:cb:9c:d0:9c:cb:59:c4:84:ff:b5:c6:
08:9f:50:21:35:f4:cf:7c:09:9b:e6:d1:8a:92:39:
77:63:a1:5d:b7:7c:46:fd:0a:69:d0:c6:f0:62:c3:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:9A:FB:4A:F6:B0:CE:06:82:3C:05:C7:38:B8:18:B6:EB:92:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:f9:b9:98:b7:26:2f:64:f1:1f:32:0a:50:c3:09:97:fe:39:
86:99:a9:4c:f4:88:c8:56:4c:b9:e5:b4:5b:c4:b7:f2:e5:ee:
dd:3e:63:ca:d3:f8:54:a3:55:0f:d3:bd:ce:0b:c0:95:b5:d1:
30:bd:63:4a:c4:1a:03:2e:31:96:b2:d8:19:f5:cb:1b:1f:23:
a2:2b:70:72:e7:f1:85:31:08:13:89:41:ce:7d:79:3e:60:00:
e9:d7:77:7c:7b:8f:ce:17:73:d8:e9:0d:3a:e1:b7:3b:e6:9b:
93:9b:5f:95:a7:cc:51:94:d1:58:2c:39:5e:70:05:72:67:5f:
44:bc:65:0d:8c:b9:aa:3e:4c:4d:24:0d:9b:f6:6f:a9:33:10:
d0:19:f0:53:00:a5:55:b5:4d:d3:b5:7c:47:df:62:24:ab:44:
8a:fd:7c:ef:f4:61:f9:68:75:25:c4:54:f0:a4:13:5d:20:34:
79:a7:03:0e:0e:4f:7a:a0:ac:44:df:96:b8:20:9f:74:35:75:
16:50:3c:3f:86:ce:79:ec:0c:95:c0:06:7c:03:12:1e:d7:0f:
c0:ab:52:dc:ad:79:2d:95:62:b2:fe:30:ac:b2:c3:c2:59:6f:
65:0f:9c:be:74:b9:a4:67:96:e6:6c:89:49:97:a9:64:2d:67:
28:fe:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:07 2025 by rpki-client