Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa
File: 197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa (raw, json)
Hash identifier: D1H0mHtA+2X/BktUyWEg2DYjzHyFq/eE+sZ4h4CVBNA=
Subject key identifier: 70:09:61:DB:37:6E:7C:9D:89:60:6A:A0:F7:87:4F:F7:C3:76:AC:D7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3349580F1D4A414A7E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.120.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:33:49:58:0f:1d:4a:41:4a:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ed404c70-46e2-4755-9a97-f6db2ae3e520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:35:e1:b9:82:b2:9c:09:5e:5c:d1:7c:16:
ca:89:e6:69:5d:84:8d:65:d3:5d:db:70:8e:b2:05:
10:90:33:a9:fd:9d:44:6b:94:65:2b:13:4c:f5:72:
c6:26:d9:c5:4f:ea:78:98:c7:15:1a:f2:11:b4:7c:
13:31:cf:f9:87:c7:68:d1:cd:c5:94:11:9f:fc:e5:
c3:c4:8c:42:b8:df:9c:3b:39:f4:23:2b:bb:aa:3b:
38:f4:ac:9f:dc:1a:49:08:96:33:96:5f:05:60:87:
09:11:5b:6d:bb:ad:d8:a6:cc:93:1c:e6:e8:b9:0a:
ab:9e:8d:c0:f9:86:f4:f1:37:24:30:36:90:60:81:
b3:0b:05:69:5d:7f:64:6f:10:6d:64:51:1f:0a:da:
c7:9d:25:c7:da:3f:80:f1:4b:bf:5f:fb:a1:91:b4:
5a:ab:a6:06:10:8e:4c:a6:85:e9:9c:5f:0e:5a:32:
d4:46:46:bc:2b:25:9a:ef:da:47:69:63:d2:f6:ea:
7b:d4:64:d7:43:35:97:2a:3b:36:17:59:b6:ed:cd:
61:4a:d7:b1:c5:63:e8:9e:e5:32:84:1f:83:97:5d:
ec:2c:e3:f0:0d:1b:cd:ae:0b:72:77:aa:ca:a9:6c:
97:3a:bb:81:37:76:59:6f:cc:3e:7a:bd:c4:6c:ba:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:61:DB:37:6E:7C:9D:89:60:6A:A0:F7:87:4F:F7:C3:76:AC:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/197040d8-e401-3d3c-9da3-a2eb403ab0ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.120.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:db:1a:15:60:6d:2b:ee:0e:a3:ec:f8:ba:32:5a:0c:68:1e:
6e:eb:d8:08:78:70:9b:0e:b5:0c:73:b9:fc:fc:58:b9:c7:4c:
11:b2:47:e6:3e:ca:04:ec:60:7e:77:f6:ce:d7:d4:8b:89:57:
16:d6:52:6d:39:29:14:79:22:eb:63:4f:f4:40:6a:37:51:25:
3a:20:41:47:33:e6:8b:c3:ea:5b:2f:b6:00:c6:3e:0d:32:ec:
4f:f3:20:67:1a:71:9b:65:81:8b:33:f9:c2:9d:03:b1:67:46:
17:35:07:35:2d:50:91:ee:4c:41:11:6b:25:be:0e:51:78:35:
cc:ce:6b:c5:8a:cc:43:bd:c4:09:6f:d4:26:d0:f8:40:e8:ac:
b5:79:e7:7e:f8:b1:d5:3a:1b:32:8b:8f:07:e9:3d:8a:9a:f0:
1e:34:dd:42:1f:f2:e8:30:39:ca:e4:b6:4c:5c:66:e8:c9:68:
b1:78:82:b9:54:46:66:47:3a:cd:98:31:ca:43:5b:c8:61:08:
4c:34:00:da:11:88:94:32:73:e6:66:a1:db:67:84:a6:e0:bf:
a9:bf:35:58:4a:9a:d5:ff:ab:c8:f4:ea:7a:ae:69:84:07:53:
22:c3:03:5c:97:aa:a5:ad:7b:ed:1f:73:82:e5:15:37:eb:19:
ac:79:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:21 2025 by rpki-client