Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa
File: 1c49d7e7-5743-3754-9403-160e47900758.roa (raw, json)
Hash identifier: Q0yWxIaSaZ0+u1orIojWtMQZ0WXDrKbLLv61V89YajI=
Subject key identifier: F2:8E:91:C7:DA:A4:CD:F0:C8:02:B1:D1:6A:BE:3D:ED:DB:C8:64:F7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F5810449A6493BF724C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 96.238.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f5:81:04:49:a6:49:3b:f7:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=b11f36d7-0c50-4ffe-96c5-d39712e0103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:d6:92:ae:4d:26:9c:f3:57:ac:aa:53:4f:
75:5c:5c:cc:12:df:ca:f8:af:20:a8:a3:16:86:23:
d7:3c:4d:a9:aa:27:ea:bb:74:aa:30:4e:8d:93:63:
9d:0c:b1:ba:0a:8c:fb:0e:0c:b3:0f:01:26:a1:14:
25:e8:89:7b:e3:77:ad:bc:9f:36:d1:d3:2f:53:7b:
fa:6a:51:a8:31:1a:b2:50:f8:18:e5:da:60:c1:2c:
e0:e2:b5:a6:a0:c5:2c:06:ab:7e:1b:b1:d1:32:5f:
af:e9:65:38:df:c3:f2:06:6f:73:97:dc:41:74:20:
99:bf:b1:b4:be:4a:a3:38:90:71:6a:0d:a7:99:c4:
6c:63:ad:5a:60:0b:1c:10:cb:0d:a0:b3:d5:f6:65:
16:b9:fc:b8:4e:7c:94:48:c0:91:2a:8d:4a:e6:cd:
e1:82:7f:36:18:d8:69:9f:59:9f:bc:c6:f3:e5:12:
9b:97:e0:13:bc:7a:93:27:d9:7d:0c:51:83:69:be:
29:22:c1:70:e6:f8:2e:09:ba:67:ab:f0:47:43:68:
23:73:70:68:aa:52:e9:48:dd:50:a4:8d:c1:29:28:
30:02:9f:20:cc:24:8b:51:15:0e:6c:6e:8b:0b:7b:
6a:4b:3c:5f:18:dc:87:8d:c0:de:32:de:6b:7c:f0:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:91:C7:DA:A4:CD:F0:C8:02:B1:D1:6A:BE:3D:ED:DB:C8:64:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.238.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:1a:30:33:b1:fe:6b:60:d6:12:e4:76:2f:0f:29:5b:76:08:
1a:ed:7d:90:b4:0d:a7:d2:39:2a:b7:98:93:e8:21:c6:84:2e:
57:94:53:ab:2c:44:c8:9c:88:1a:1d:95:ab:79:92:06:69:d5:
dd:43:93:5b:bc:77:3a:14:ad:25:a1:9d:6b:40:bd:e8:2e:a6:
66:7d:25:c9:e0:e8:81:12:03:32:4e:e4:48:af:1c:75:41:da:
f7:3e:8f:11:9c:5c:77:57:6b:52:8d:be:b4:bc:cc:a5:63:60:
de:75:9d:c6:ef:dd:ce:34:83:18:e7:33:f7:db:bc:f9:33:ab:
07:ea:5e:1b:0b:de:c5:33:6e:74:7c:da:e6:1d:83:1d:0b:93:
a4:a1:36:a7:d5:9c:cc:55:12:f1:c7:37:df:6f:bf:61:15:50:
72:dc:34:c8:43:ed:1c:83:c1:e3:cc:83:0b:1a:dd:a3:a0:c3:
0d:57:a0:26:5b:fa:9a:5b:fd:95:96:b7:68:be:47:6e:c6:2e:
a6:ca:2d:79:35:54:51:9e:91:82:64:f0:c2:55:b3:b3:d3:96:
1d:30:4d:f0:6c:b9:10:8d:7e:d1:37:fc:26:6c:54:5f:dc:12:
6e:3a:13:60:6c:ad:88:8b:4a:95:42:d4:a6:b5:ee:8a:1e:2b:
0b:1e:0c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:23 2025 by rpki-client