Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
File: f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa (raw, json)
Hash identifier: 7Z8xRAWdzzkkAk2ajzjKKdKNqUuDtvzC88PwuxbiXqk=
Subject key identifier: 32:5D:97:B0:1B:8C:38:DE:36:97:5A:35:7C:7C:6C:86:A1:1A:FB:1C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858485E35C13B12FF68C55CB43480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.109.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c1:3b:12:ff:68:c5:5c:b4:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=e839f444-a318-4473-95c7-d6818e5c1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:2c:2d:85:92:a1:2a:1f:8e:07:05:73:86:
9f:9c:7e:9f:de:30:d9:43:fe:22:ed:0b:d2:34:3d:
f8:b1:66:76:a1:87:0b:44:d5:9a:c5:0d:04:1a:c6:
da:a9:4f:d8:4d:27:7d:ca:36:6b:35:4e:5f:62:63:
ab:0a:a9:b9:b6:84:97:a9:35:b5:e1:cf:25:38:47:
3b:74:47:31:e1:83:6e:20:30:63:fb:eb:98:81:a1:
e7:ba:7b:1a:92:4c:a2:5c:7c:8e:dd:3e:e8:bc:26:
f3:4e:ac:97:1a:14:ef:e2:92:c8:45:16:9f:ca:37:
17:03:c6:bd:b7:3e:39:ee:ba:14:b3:9b:99:03:51:
83:dc:a4:cd:b0:2d:97:35:c4:f3:d9:b8:50:fb:69:
eb:04:9b:55:03:ec:f1:82:11:f7:a4:25:e1:3f:4c:
13:97:54:e7:7b:02:21:f4:16:13:b3:55:41:4e:cf:
77:cf:95:a7:53:24:40:e5:45:ae:db:d2:db:6d:bc:
6b:87:05:c0:a4:91:e5:b4:81:2e:e3:b2:5c:73:70:
1a:19:cc:c4:4d:b8:47:21:bc:b6:39:42:e1:22:26:
1d:f4:7a:ee:48:21:d5:1f:76:89:fe:d1:a6:6e:bd:
cc:0a:a1:a4:b8:36:05:83:97:da:64:64:7d:c3:bf:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:97:B0:1B:8C:38:DE:36:97:5A:35:7C:7C:6C:86:A1:1A:FB:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:27:3e:c5:c2:a1:c8:65:97:1c:28:77:12:78:2d:b9:9e:0c:
11:18:be:d0:f1:ab:14:a4:44:0c:25:79:4b:72:c9:02:94:41:
89:7a:29:b6:2b:7e:8f:ad:dd:4d:e8:e4:79:f1:6c:65:9d:36:
a3:8d:6b:68:da:7b:40:d0:df:64:e0:9b:b9:37:c3:9e:24:9d:
41:29:ec:eb:1c:bc:48:23:0c:df:96:76:44:5a:3e:6f:db:2b:
90:f5:e0:e2:3d:79:68:d0:8c:d0:c3:f9:e3:21:a9:92:b4:d7:
a3:f3:9f:05:81:f7:0b:d0:aa:4c:e1:a0:d5:a5:52:f4:9f:f3:
bb:ab:bf:79:bf:5e:f3:ce:e8:bd:d6:33:e6:40:33:02:c5:ef:
2d:51:c6:a2:d0:8d:8f:48:0d:0d:93:18:0e:d8:0d:93:88:06:
77:68:26:79:b2:88:bb:8c:49:aa:5e:0f:4e:4f:27:19:80:28:
33:88:8f:9c:45:dd:61:ff:52:60:01:be:b0:ca:d7:6e:6b:29:
25:88:ba:a5:6e:17:9b:5c:2e:03:34:77:25:c0:c1:b9:06:34:
54:93:73:3b:78:ad:73:81:cd:b1:06:23:b8:2e:29:24:3d:4c:
3c:73:21:bd:9d:d6:0e:68:9f:bb:09:02:31:9b:e5:26:61:7c:
c1:b9:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:01:11 2025 by rpki-client