Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa
File: c47570e2-43d1-3e70-97b3-f00973013241.roa (raw, json)
Hash identifier: c7wA+KuSy4Kn3DXwVA6KY4Y9z1KpMF7KiIq+cfurS8g=
Subject key identifier: 6B:1E:83:E8:B3:E6:A6:56:B4:25:A5:D8:F8:B2:09:2C:E3:41:1D:A3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584837201EC44D0C82916F443A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.106.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:1e:c4:4d:0c:82:91:6f:44:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=76f0dd05-8f07-4dfb-bd01-fedf39b538ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:66:5b:20:0e:0a:fd:56:3d:a8:6d:c1:38:
cc:8a:9d:98:9e:cd:66:4a:73:ab:54:74:ec:6b:d9:
21:ad:1a:8e:bd:c2:2e:de:b2:c5:8e:69:0d:26:70:
53:8c:f2:c2:7d:39:1f:bf:d6:ec:e3:6a:43:4c:c6:
dd:3d:1b:b2:c8:6c:f9:33:87:58:1e:2f:5a:a5:53:
c7:45:af:38:a7:c5:aa:80:43:49:c7:a8:9a:f2:aa:
f1:d9:86:da:f6:c6:38:75:ff:7c:7b:78:cc:0d:7c:
68:a9:18:ec:13:2b:51:46:0a:09:a2:10:17:46:56:
dd:cc:c5:18:74:aa:4e:56:68:10:13:05:1f:79:cf:
ab:2d:71:86:68:33:d6:4a:59:1f:f8:5e:fb:bb:ea:
d5:2d:59:7d:fe:66:3c:3c:cf:c4:5b:1b:f5:19:01:
71:25:6a:e5:5f:dd:c1:86:5d:d7:5d:b3:8a:e1:2f:
80:fe:80:d0:ac:20:25:29:6c:23:21:a0:54:fa:a1:
94:4b:82:96:09:81:2a:e8:17:3b:20:0b:5e:59:a4:
d0:0d:a2:42:a8:bd:c0:cc:3b:20:d3:23:e9:08:98:
75:8b:b3:f6:23:c0:e9:b8:b3:79:e1:12:cd:83:fc:
76:24:4d:02:86:08:2b:b6:bf:e5:7b:2f:f3:a0:a2:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1E:83:E8:B3:E6:A6:56:B4:25:A5:D8:F8:B2:09:2C:E3:41:1D:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.106.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:14:d7:02:a4:46:16:a1:bb:48:b6:79:47:70:9a:83:ef:e2:
12:ba:17:84:59:4d:80:3c:7a:fb:50:1e:5d:9b:bf:bf:25:87:
82:12:47:6b:25:bf:6d:5a:fb:03:97:af:2c:64:62:5d:99:06:
fe:54:76:a0:2c:9a:2a:e5:82:82:0d:97:f5:a1:94:0d:42:f1:
ec:7e:8f:da:93:9c:66:fd:11:91:b3:34:06:a1:42:fb:14:63:
52:78:28:b6:50:f0:00:c6:ac:38:b6:fc:be:3b:f8:27:5a:51:
5b:32:28:82:75:0a:3c:8b:c5:a7:44:f0:a2:c8:bc:75:a0:1c:
60:37:3b:96:96:ce:0f:05:71:a1:0b:7f:d0:1d:f0:d2:75:80:
27:72:ec:01:ec:28:92:bc:b8:a6:95:c6:53:7a:96:83:25:8e:
5f:e5:6c:b6:5e:16:9a:98:7c:65:11:ce:e6:12:92:7d:1a:8c:
7b:67:96:b6:95:c5:53:5a:8a:5d:d0:9f:dc:db:7e:fb:f1:3c:
49:fc:41:e3:86:29:21:23:9f:1d:87:8b:36:61:64:ec:dd:25:
b9:8b:c2:97:17:75:bb:30:54:3d:7d:8b:8b:49:8b:8d:ec:d2:
b9:33:e4:61:50:d0:ef:b1:73:d0:2e:c1:89:98:01:a7:f6:7c:
3c:be:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:28 2025 by rpki-client