Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa
File: c67ed835-80db-355d-96f5-4d8d1785a774.roa (raw, json)
Hash identifier: GGUGm97kz+R6vV/FJlnE3WmPHqtXy9txwmfSfyQz1zY=
Subject key identifier: 65:94:6D:34:0C:0A:FB:59:94:9B:AC:D9:29:5C:D8:83:6A:C5:DC:0D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35BD373CA10BEF20C86100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.97.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:bd:37:3c:a1:0b:ef:20:c8:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=d15d9eec-327c-4242-8768-2660497148e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:ab:65:89:72:66:82:e3:c8:be:cd:5e:48:
b6:b9:3c:5f:55:79:90:1c:ae:db:25:2f:5f:c3:23:
c8:73:ca:42:3d:f6:de:99:49:ca:2f:b7:22:0e:cd:
cd:71:24:c7:16:58:ad:1b:5c:90:3a:9c:2b:81:11:
83:dd:cc:af:4f:eb:e7:41:07:c1:3e:8b:05:ea:cd:
d6:72:16:d9:d5:8d:fa:6c:3e:40:f9:6d:2d:ec:f8:
ed:a0:68:29:af:51:8b:c2:99:8d:3b:7b:81:32:18:
75:f8:9f:d5:3a:f1:c2:e2:31:6d:f7:25:64:df:34:
f3:cb:4e:8e:f4:a9:01:98:b3:4d:c6:46:d9:d2:f2:
38:36:a5:99:75:80:41:d1:0c:97:55:01:1f:30:51:
b1:4d:42:c9:bc:b4:96:b9:0f:56:25:d7:6e:65:e6:
2e:01:09:96:32:e9:d9:7f:3e:bf:a0:28:a5:b3:bc:
a5:df:cc:98:43:87:e3:eb:c2:d8:b8:ee:7b:7e:9b:
0c:82:33:2c:27:97:59:14:01:1b:2e:03:7b:c3:de:
89:a1:75:0d:46:72:2b:09:81:45:ff:4b:14:c6:70:
ac:41:9e:cb:88:8b:be:32:04:6f:f7:51:ce:88:2e:
af:c2:5d:fe:6a:8e:1f:26:3a:40:d2:01:a9:40:85:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:6D:34:0C:0A:FB:59:94:9B:AC:D9:29:5C:D8:83:6A:C5:DC:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c67ed835-80db-355d-96f5-4d8d1785a774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b4:33:30:4a:13:09:dd:77:d4:7d:0f:aa:c0:32:2f:24:39:
e1:09:92:44:18:ec:b4:9d:1f:5e:55:4b:42:e6:4e:2e:ec:04:
17:f6:4e:41:84:f9:9d:8a:07:9c:23:8c:a2:14:28:c3:c1:cc:
fa:e0:e7:e5:a0:ce:0a:e7:68:23:23:3d:ec:bf:97:c6:8c:5b:
cc:9e:0c:14:64:eb:d5:1c:90:79:41:b4:3d:bd:2a:93:fc:86:
22:23:c0:ca:ca:8b:46:e9:73:55:cf:ac:76:bc:7c:39:4a:4e:
f6:0e:17:08:4a:29:58:d9:a1:fd:5c:6c:2e:0b:1d:13:31:62:
41:d3:9b:51:74:b3:3e:3a:09:8a:e0:17:d9:e0:f2:dd:c8:7f:
97:e8:2a:76:cd:ce:7f:0f:70:02:de:38:e3:be:de:8e:fb:af:
ee:59:20:25:8c:e1:08:ad:76:ae:4c:8c:57:08:be:5d:96:02:
9e:b8:02:be:c6:9c:ea:7c:4b:87:90:b3:96:09:70:bb:ad:37:
a4:0b:7a:42:82:e0:19:0d:df:a7:34:51:06:01:31:fc:e5:3e:
5b:76:f9:40:f4:f0:e1:d5:1d:43:a5:52:9f:e9:72:ab:b2:b1:
b2:b6:ab:b4:0d:82:5c:80:7f:51:92:e9:07:fe:a2:f1:4d:0a:
81:c7:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:15 2025 by rpki-client