Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
File: dc87df81-022f-354b-82eb-41198dd0e49a.roa (raw, json)
Hash identifier: rO8CsUsL039WTjJBBJQU+4+1I3tAURb7iVJspYakI0I=
Subject key identifier: D7:3E:16:DC:AF:D3:53:EF:C4:31:34:01:8E:DF:C6:01:79:DC:1E:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF561996EC7B99660CC0D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.78.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:61:99:6e:c7:b9:96:60:cc:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a15a2546-b266-4d87-9376-4960decd18ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:f9:d2:e7:70:df:a6:5e:47:95:43:78:64:
28:be:1c:a8:14:67:a8:a3:b0:94:72:68:76:ac:72:
73:5b:6b:38:a3:e6:09:6c:43:35:11:94:78:27:04:
90:26:0f:12:45:34:43:cc:1c:ea:3c:19:35:10:cc:
7d:85:5d:9e:0c:8f:ad:9e:9a:70:a0:e0:eb:5f:27:
02:77:06:fd:09:61:b6:5b:fc:e3:10:4e:63:5f:fa:
12:b1:94:7e:9d:68:5f:3a:de:ce:b2:02:bf:26:5e:
ea:c0:9e:c2:32:03:10:fd:fc:9e:d2:45:a5:a5:80:
08:1c:f6:03:dc:3d:65:0d:c5:4b:e6:7b:77:c1:b7:
23:74:50:44:5d:46:86:cd:e9:98:a6:7b:c1:30:b5:
16:e0:a4:fa:a3:ec:6b:54:93:34:be:1d:e7:83:30:
cc:7d:75:63:4d:8a:5c:21:27:f4:95:62:99:48:95:
e9:9d:65:db:eb:f0:b4:5e:2a:5b:f9:3e:30:3e:2b:
2e:55:74:a9:63:e4:ac:bd:fe:61:94:60:71:68:da:
83:f4:56:1d:fe:3b:63:12:bf:05:72:b7:12:ae:56:
d8:03:39:5e:14:5a:ba:a1:99:3e:00:03:2f:94:ba:
69:f2:bd:58:a4:d0:3e:32:1e:69:0f:80:2c:0b:c9:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:16:DC:AF:D3:53:EF:C4:31:34:01:8E:DF:C6:01:79:DC:1E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b1:d3:13:8c:4d:2b:42:9e:bc:a1:94:cf:1b:13:72:7b:a4:
bc:9a:4e:8d:9a:a6:12:36:07:74:c1:c3:97:df:4a:36:d1:2e:
68:f5:f8:0c:b4:4a:b5:a5:44:da:17:c7:3d:c1:0a:da:8d:1f:
07:66:f4:3c:e1:fc:12:65:9f:dd:93:18:09:3a:58:68:ad:46:
1a:6f:b5:26:4a:35:52:6c:7f:5e:84:93:2f:f6:6d:a0:ca:fd:
f1:d1:36:77:5e:ce:c0:4a:bc:e9:f3:b7:ce:c4:7d:24:2d:06:
69:78:77:9d:1b:48:46:bf:56:36:c8:e2:15:d4:80:a5:23:ac:
b2:cf:89:47:33:91:57:98:9c:d4:d1:91:05:76:11:21:bf:8c:
3f:eb:b3:a0:ba:71:9d:b2:c9:a7:5b:12:c0:bd:fb:2b:17:5d:
33:ab:28:03:74:7c:26:3a:1c:70:99:c2:59:c3:17:ae:4e:04:
51:a9:aa:73:51:76:4b:18:48:6b:99:4c:d7:eb:a4:70:2b:1b:
f7:32:c1:cd:29:b5:2f:77:c2:1d:ec:42:b7:9b:9a:59:c4:f0:
0c:ca:b9:d6:4c:ac:21:34:6a:a9:12:14:a5:61:cc:3a:b7:6d:
12:08:27:f3:e0:25:de:be:23:3a:af:d8:93:63:ee:7d:8e:e7:
9a:bb:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:18 2025 by rpki-client