Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa
File: 0888830f-9979-3c7e-a853-4d281ad3f3b8.roa (raw, json)
Hash identifier: jgL60GY+kFNpItyyuQ32/lgGK60APjRAwTaM1ZPGcnE=
Subject key identifier: A5:D9:F7:74:18:0D:E9:C7:ED:64:A9:E5:25:23:5A:9E:97:0C:BD:B3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F40EC003F37503FA55C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 70.18.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f4:0e:c0:03:f3:75:03:fa:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=99f13434-959c-4356-b043-bee398e90f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:94:d9:69:f2:71:00:60:2a:16:73:ec:91:
fb:1d:21:bc:06:0d:3a:d6:2a:75:89:2b:85:f9:f1:
c7:5a:2b:5d:f2:ac:d1:2a:c1:83:c9:e1:a7:f2:ee:
c5:c8:82:fb:75:02:95:f5:14:7e:3c:9b:7d:4b:83:
3b:cd:ba:f4:b7:ee:b1:fb:6c:4d:3a:27:4f:90:42:
66:69:70:05:f5:7d:ac:e0:23:0e:f1:dd:1b:00:88:
44:4b:fc:0c:4e:c9:e1:f5:b2:fd:c4:08:42:41:89:
ad:12:73:84:fc:9b:f4:fc:c3:3a:9e:bb:e6:39:ee:
b1:ae:0f:d7:cf:63:d3:89:6b:a4:c1:a6:fd:2a:a3:
0d:e8:51:f7:04:96:6b:66:95:fe:a4:f0:f3:f1:76:
77:37:cf:80:b6:6d:0f:e6:47:14:41:9e:28:37:0e:
76:f9:cc:76:04:ad:9d:a1:ae:ae:f0:b7:66:69:3c:
e2:a3:64:b1:bf:e8:74:33:ba:e4:d2:2f:0b:5f:a4:
e9:d8:32:72:62:ef:08:8e:1a:e7:a7:c3:b8:f9:2f:
d6:c7:e7:d3:03:36:35:13:cf:7c:7c:e7:e2:51:1f:
f9:05:03:dd:99:cc:6d:dd:8c:db:21:55:07:fd:3e:
a1:58:48:8f:61:c8:50:26:4b:58:8d:37:53:f8:09:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:F7:74:18:0D:E9:C7:ED:64:A9:E5:25:23:5A:9E:97:0C:BD:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.18.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b8:8d:c1:bd:c5:08:47:b9:85:0c:67:d5:c7:6c:71:b6:f5:
9e:dc:2b:7c:57:0a:fb:fd:4b:c3:b7:88:76:f9:ff:25:4a:d6:
fa:73:f4:ba:2c:c8:31:f4:9e:8c:f4:31:5a:96:60:8a:bd:6e:
49:8e:e9:4a:09:bb:2c:62:df:c7:48:02:a7:6e:56:ec:16:9b:
1f:ca:d5:2c:ce:db:03:ed:c8:61:a4:e9:5a:b0:15:55:75:3d:
fd:0e:11:00:f0:f8:10:c5:6a:42:44:4b:8e:f4:bb:fa:79:98:
39:76:7b:0e:24:ac:86:43:c6:a9:eb:ae:de:b2:0f:3b:88:21:
2f:b8:c4:16:21:bd:86:d4:ac:20:d3:de:80:f0:c9:d0:16:f0:
7f:ad:42:b9:45:71:7b:3b:17:72:43:fc:c4:9b:01:d6:6a:2e:
da:d9:2c:08:48:09:91:7e:06:54:58:13:ea:a9:27:fd:b7:6c:
2b:e9:56:b3:b3:44:8e:5b:db:c8:1b:cc:4f:cd:37:66:a9:25:
bc:e2:f6:90:54:96:b8:94:6c:9e:9d:ea:8d:fd:88:34:4b:41:
6c:81:a7:ae:12:c5:f9:58:c0:b8:00:53:6a:3a:c0:e1:0a:0d:
50:78:dc:27:6e:c8:e7:79:1a:ef:8e:a8:de:b8:39:9e:4f:63:
8c:a9:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:36 2025 by rpki-client