Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa
File: 14f7b891-db77-3c9b-8c94-762cea3fa41e.roa (raw, json)
Hash identifier: oJRMYXu2pjZaIQbnaqileILu5LJIH04ToKpKfnABbdY=
Subject key identifier: 81:F2:3D:EF:32:CA:77:73:B5:EE:B7:1C:DA:D7:13:0B:0D:82:40:4B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC3619133422DE31046E10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 204.91.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:36:19:13:34:22:de:31:04:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=d2d31f87-f57c-4dab-ba32-9fa0a3b4ef37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:cc:4a:db:e8:61:fd:ca:78:f0:67:e9:74:
6b:a3:aa:99:b9:37:69:b6:dc:07:61:25:f5:07:3a:
30:50:d9:2a:85:8f:77:a9:0f:5d:c0:bb:a3:ff:54:
a2:eb:75:14:8d:5d:99:24:d9:79:f1:7f:25:2c:74:
d2:8e:99:82:87:17:59:5b:9b:17:31:00:4e:24:ca:
9f:92:3a:3f:cd:9e:30:f0:32:de:57:b9:b5:8a:0a:
2d:4f:91:74:71:7d:09:25:c7:ff:09:c9:e3:92:eb:
16:db:97:00:37:33:9b:7e:0d:9a:4e:c8:9f:de:f6:
ea:61:64:65:f3:37:7c:ca:17:e9:33:24:f5:dd:ae:
45:12:08:f6:91:06:a9:fe:1f:1e:48:ba:cb:33:87:
33:d9:31:d9:fa:5a:e5:9d:6f:1f:a2:05:ae:ec:72:
d6:db:79:57:b7:68:ff:22:11:2d:80:15:54:81:92:
3c:06:74:aa:53:6d:10:d1:76:6c:27:77:e6:9c:50:
fc:f1:2a:ca:ba:be:ee:cf:1f:88:92:f0:7a:e0:50:
93:05:4a:28:12:40:ca:cf:98:cf:89:15:00:cc:43:
c9:ea:93:46:2c:5b:6d:26:7f:58:91:87:25:2f:4a:
bd:44:11:99:28:db:2c:70:49:5e:d7:80:2c:9a:de:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:3D:EF:32:CA:77:73:B5:EE:B7:1C:DA:D7:13:0B:0D:82:40:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
204.91.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:fd:f7:41:8c:57:e2:d4:c7:bb:8b:a5:b6:a5:c3:42:43:a7:
40:88:8a:f1:e0:f2:cb:f5:81:9e:d6:78:c4:3e:4a:84:ca:42:
cb:92:84:28:42:48:d4:6c:fa:a1:aa:44:f8:66:7f:28:b2:5e:
6c:a3:c6:16:9c:dd:73:d3:85:18:0c:9f:c8:a5:56:02:5f:70:
6d:40:65:c7:03:bc:35:a4:86:ab:19:18:1b:f6:fb:25:2d:5c:
2a:e0:29:16:14:9b:b2:a9:4f:6d:3c:3f:4d:56:f2:ca:bc:87:
5f:2f:41:58:32:a3:83:81:aa:99:c0:ad:10:97:cd:2c:6c:56:
f0:23:2b:e2:b3:40:30:3f:11:ae:1f:4f:2a:d1:ad:94:bf:d6:
0a:a8:2b:c2:54:cb:e9:5d:c3:c0:74:64:65:35:b9:c7:6c:87:
01:c0:68:08:a6:ab:76:47:0e:96:d9:6e:7d:25:bc:dc:d1:ff:
98:0b:dd:e2:48:38:c9:04:33:64:64:40:59:1b:51:3b:34:cb:
80:bf:9e:b6:77:87:e8:24:60:80:6c:3a:34:03:8e:85:fc:77:
77:66:67:07:92:47:96:74:87:15:a3:19:4b:75:68:cc:cd:ee:
94:b9:a6:42:10:86:8e:a3:15:03:07:34:33:7c:da:6b:ec:13:
8c:5a:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:58 2025 by rpki-client