Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa
File: 1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa (raw, json)
Hash identifier: loTQtFWqWI9NtP3Oh/4Xl9JAGqhEzTIJ2BuUM5vjdCI=
Subject key identifier: 14:7E:47:32:2F:AA:6B:D7:97:23:C7:F3:B0:73:CB:08:D6:D6:A3:FE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F76973F61D208219DB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.187.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f7:69:73:f6:1d:20:82:19:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a09f6ff2-7922-49da-8fe4-3f46a9d84093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:19:fb:23:0b:85:14:72:11:72:36:fb:42:
8f:a7:fd:e8:e0:e4:b3:89:0f:af:d0:c1:eb:db:30:
95:e2:08:db:ae:66:99:99:df:0c:f2:51:5f:1c:09:
9d:aa:cb:ec:74:1c:cd:a0:09:05:ce:e6:38:30:b7:
e5:7c:dd:e7:9b:a2:8f:12:6b:e5:a3:7c:9a:87:b4:
25:0b:5a:ff:60:df:f3:e2:78:41:d5:53:9d:7e:bf:
9c:a6:56:8b:1f:c1:4c:61:79:12:82:11:19:4f:64:
fc:a6:87:b4:50:58:66:1f:41:0c:ef:26:59:70:97:
da:bf:49:fe:3d:47:2a:96:c7:f6:1c:c4:38:d2:ba:
ff:39:9f:14:71:5b:53:32:84:51:79:60:f7:35:77:
d1:63:d4:13:2c:07:0e:1a:ba:e5:51:ee:21:9c:33:
d7:2c:c5:be:cc:27:02:8e:d7:44:20:fe:f7:1f:81:
d9:95:64:4f:41:d2:54:b1:b0:db:bb:da:74:a1:93:
2e:e9:a9:dc:9d:b9:eb:d0:9d:0b:cb:53:68:2f:c7:
71:f2:1c:09:fb:bf:96:b4:9d:25:0e:55:da:7a:18:
84:06:3a:db:fe:86:d0:d0:9a:13:eb:11:5f:e4:92:
62:f6:8b:6f:0e:65:d8:d6:25:64:61:7b:ec:e6:47:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:47:32:2F:AA:6B:D7:97:23:C7:F3:B0:73:CB:08:D6:D6:A3:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b8:ea:07:f2:13:03:1f:4d:7b:54:88:59:c1:93:ca:27:1c:
e5:26:4e:d3:47:9e:43:af:fe:e9:1c:3a:ad:f9:8c:85:ac:a2:
cb:ee:38:a6:26:ed:7b:78:08:59:13:b2:cd:49:2f:59:5d:6c:
a4:31:7c:3e:e1:5e:82:4c:b7:83:f4:48:a6:b3:cc:ed:7c:fb:
5b:9c:be:2f:0f:9f:23:0f:c3:03:bd:55:2a:f6:3b:56:55:e8:
04:0b:50:d9:bd:c4:50:6f:5e:e5:19:a3:e0:cb:3f:80:ae:b6:
f3:0f:da:7d:39:a8:d5:5e:df:e7:9f:a2:aa:61:4c:cb:fa:67:
e2:16:30:7e:c3:81:f6:b3:26:15:64:fa:01:26:5d:52:63:92:
55:48:71:17:09:dd:53:2e:df:7f:3b:64:43:c9:25:e5:56:20:
9f:bf:6c:52:45:72:8f:64:6b:47:68:c2:08:f9:5c:a7:2e:8d:
01:5f:05:6c:3f:53:77:c2:17:9b:31:ba:7e:c8:b6:24:c6:01:
aa:5e:e2:bc:dd:b3:cb:e8:e8:af:e1:6c:9b:5e:22:5c:61:5e:
d7:de:77:07:b1:58:09:a1:06:75:fa:09:fb:0d:bb:6c:e6:ae:
5e:2d:2f:aa:1c:80:f8:f6:54:90:18:b4:28:f4:05:b5:21:0a:
8d:a9:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:39 2025 by rpki-client