Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
File: f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa (raw, json)
Hash identifier: U8KQxv6TF9+xT0FBuw336+PsT3MUFz7iBY5BA9Vky4c=
Subject key identifier: AD:97:82:B7:73:B5:9D:89:5D:37:36:44:A2:EC:27:85:62:D5:8B:CB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858493ED3E1A029E0B65E76115780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 72.109.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e1:a0:29:e0:b6:5e:76:11:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=063b4e87-8801-4cda-b050-20bfd45b542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:11:25:ea:68:cf:42:51:78:10:40:7d:65:
72:47:77:6d:68:9c:b0:33:33:d8:87:80:08:4f:45:
0b:6e:e0:fe:83:55:9c:5c:d9:76:2f:aa:94:15:25:
07:5f:09:cd:ae:80:ea:f9:3a:8e:71:14:48:80:06:
34:6d:6b:6f:fd:58:37:8b:0a:07:f1:2a:7d:7e:8f:
bc:8c:ca:5a:a6:44:c4:58:91:2c:30:06:41:f9:a7:
5f:a7:c1:22:78:3b:62:d8:8d:29:dc:27:dd:23:c1:
ce:93:a1:fc:79:4c:e8:39:4e:6d:92:5f:98:d9:56:
99:a9:d4:46:df:ea:2e:b5:0b:c1:c9:eb:09:8c:1a:
b6:0c:7c:09:11:33:29:e2:5d:ea:f4:27:fe:35:64:
ab:b0:fb:31:66:00:04:8c:d6:61:84:e9:65:12:1d:
4b:fc:56:b0:f1:cd:5b:92:62:14:9b:e7:a2:53:be:
d4:79:4e:99:9e:66:d6:7e:47:bc:9c:1a:61:36:96:
4f:83:fd:3f:7d:50:00:34:77:a1:cd:4a:87:c5:6f:
fb:9a:9a:97:1d:1e:be:f4:39:9c:9e:f4:06:e6:62:
17:06:f4:bc:db:c9:84:14:1c:ed:ee:51:d7:8f:12:
4c:8b:33:5a:62:8a:fa:df:c4:df:b4:da:c0:7c:13:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:97:82:B7:73:B5:9D:89:5D:37:36:44:A2:EC:27:85:62:D5:8B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f21ee4d8-32aa-3b40-bb80-b0b0448a875c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.109.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:55:9f:cc:5e:ca:e6:c4:5f:8f:5f:bf:b1:bf:36:39:cd:41:
d6:b0:41:a4:e9:ba:5b:8d:54:74:42:c4:3c:f4:46:d7:e2:c0:
44:23:13:a4:51:29:a2:0a:e4:36:48:f0:6f:58:19:24:51:8c:
fc:40:4f:d8:0d:b2:54:24:46:62:5e:64:c9:c5:0a:bc:1a:b1:
f4:bb:5a:7e:6b:db:85:61:03:e3:ef:54:50:0e:d1:c4:cc:3c:
75:20:ac:d8:d7:1a:53:d8:14:6e:68:f5:2a:6e:44:e9:96:45:
be:f9:ae:ff:e1:56:a3:87:77:7c:3c:a0:ee:82:96:f3:4f:47:
ed:bf:f3:80:ba:ae:88:e6:b8:6d:ad:d7:d9:83:31:a1:80:a4:
20:fd:cd:6e:39:af:5c:18:dc:1c:ef:8c:93:1e:2d:4a:8a:35:
8e:89:b1:6c:c3:22:71:52:52:c1:2c:22:41:b3:98:36:5e:39:
9d:7d:38:24:4d:eb:a0:26:2a:d4:c6:40:41:ff:2f:ff:df:fd:
30:7a:f8:44:73:a1:5c:ae:e8:4b:37:a0:0b:ed:b0:5f:d5:04:
73:48:ab:fa:9b:0d:1b:36:2b:1a:47:52:3d:e9:a9:c9:03:a1:
82:07:e0:ea:f1:57:ed:4a:dc:60:f7:3e:fc:80:75:ac:90:67:
5f:30:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:09 2025 by rpki-client on console.sobornost.net