Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa
File: 104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa (raw, json)
Hash identifier: IOQsTX+4hZ+NpL8OVXsGusXWFAivzotb9LhVMAotsKs=
Subject key identifier: AD:FC:65:2D:DB:61:54:2C:FA:C8:64:74:7E:48:8D:15:85:AD:C6:32
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218433D7CCFA39A2E0152580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.186.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:33:d7:cc:fa:39:a2:e0:15:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=20c18408-c361-44c5-b827-86cb1af8b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:13:fa:be:f8:a1:d3:d7:09:24:d1:41:1d:
44:a8:51:ce:38:48:e7:2f:07:16:61:5e:61:51:c3:
bb:d9:4c:ac:80:12:5a:0f:4b:b3:17:b0:1f:30:be:
20:f6:48:0c:b8:95:a0:85:11:e9:c6:08:da:ca:63:
03:35:90:06:ae:d7:da:02:ea:3c:69:a8:14:5d:8e:
5c:b9:6e:98:2c:82:66:1d:23:73:97:44:0f:57:0f:
17:ee:f3:40:2c:06:b4:96:05:e3:46:c4:3b:c4:39:
23:11:b8:2d:b5:cb:18:09:fd:b5:0a:0d:5a:d3:79:
91:86:f6:e8:50:0c:b5:8b:3e:f2:59:ab:48:71:8c:
f3:4e:39:d6:d9:c0:cf:d9:cf:c3:1d:ba:5f:2e:b5:
1e:f2:d6:3b:c5:e8:33:a8:f5:3c:cb:85:3c:5e:c8:
38:32:d1:3f:69:25:5c:d0:43:26:89:85:e8:82:7a:
f9:90:18:d6:99:4d:03:5a:e2:e5:1d:40:47:7f:22:
e2:3b:6d:cf:f1:1f:1e:b6:c2:c7:93:40:91:07:75:
ae:61:f9:30:ce:72:16:44:4f:26:5f:65:21:83:87:
61:0d:95:59:7a:3b:67:e3:4e:b3:d1:7e:aa:19:4b:
04:9c:e1:b4:a3:48:1e:17:73:e4:f2:27:68:04:80:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:65:2D:DB:61:54:2C:FA:C8:64:74:7E:48:8D:15:85:AD:C6:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.186.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:21:66:f0:28:a9:9c:c4:09:6a:23:5f:0a:7c:26:0b:77:ad:
db:36:8b:8e:5e:5e:bc:f7:a6:44:c2:aa:78:fc:41:22:26:04:
34:17:27:98:17:dd:3e:4a:b8:a8:62:b6:dc:8d:9a:d7:8a:ae:
e6:9f:fb:70:5f:84:a1:39:e8:26:ac:46:07:c8:ef:ef:a9:5d:
9b:aa:5b:16:70:15:1b:cb:c8:20:cb:97:f7:4e:7a:a7:66:cc:
68:80:64:c3:91:57:e1:43:1f:91:de:22:b1:eb:6b:18:b0:90:
18:1f:f8:f2:43:5f:a4:06:73:57:86:3b:45:fa:86:50:f3:01:
d3:b4:62:6d:fb:f3:35:68:cd:b4:f3:c7:86:62:b4:70:77:0e:
ed:ca:13:26:c7:2a:89:3f:31:bb:07:f7:51:62:ba:5d:7c:cf:
e2:68:e9:f9:1f:97:62:29:66:82:32:58:67:32:b1:da:39:2c:
81:7d:cf:95:d6:01:ed:4b:c7:a8:95:b4:71:06:7f:24:c0:fe:
72:fc:35:14:cc:4f:a6:2b:e1:1d:11:5a:90:86:02:df:52:47:
d8:1b:94:76:f5:1d:36:a2:c0:be:b9:7c:fb:96:f8:7c:a1:bb:
91:74:f4:ba:90:ce:0c:78:56:b6:08:e0:df:8f:66:ce:cd:f1:
49:b3:0e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:56 2025 by rpki-client