Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e717247-5f64-3342-94b8-d8032fcd208d.roa
File: 1e717247-5f64-3342-94b8-d8032fcd208d.roa (raw, json)
Hash identifier: 8jtiX8x48H00W+PX2cWgUkin+nZ7EjMhlJ0YSlpvJJY=
Subject key identifier: F7:81:B2:9F:5C:91:81:D4:79:B3:00:AE:3C:9D:32:A0:1B:7F:BD:D3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3652294D348EA73E9A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e717247-5f64-3342-94b8-d8032fcd208d.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.96.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:36:52:29:4d:34:8e:a7:3e:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=cec6cbd6-1b2d-453b-9e11-f640fa6d5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:75:b2:ea:b0:99:ae:96:03:7f:8d:97:38:
e3:60:e7:32:50:df:c6:74:a8:5f:5b:7a:e5:16:ee:
5e:68:79:0d:ae:b2:4e:95:7b:09:1d:41:2d:b7:29:
e6:48:c8:d9:49:86:49:3d:e0:e1:28:26:20:4e:82:
a7:8c:20:8a:e5:d8:98:80:47:87:8f:4b:85:61:9e:
c4:cf:39:da:3a:35:12:8a:69:5f:53:d9:bf:37:3e:
f1:a3:38:fa:dc:22:62:93:d1:da:13:d6:bc:c4:e0:
c1:3a:72:fe:ab:b5:39:c5:0f:68:ea:f2:62:97:6b:
e3:ae:df:ef:c2:ae:55:e7:7b:fe:4e:62:94:16:3f:
89:1e:02:62:01:7a:98:27:82:55:0b:b6:0f:6d:32:
29:42:d1:73:74:0e:38:86:28:4e:8b:40:3a:28:ff:
5e:48:26:7c:62:ac:cb:79:4b:75:6e:ae:e4:8b:0e:
5a:a7:41:25:71:14:88:74:cd:96:54:49:14:29:d0:
49:f8:72:39:17:c3:a3:4f:4c:a6:14:56:54:2b:92:
a9:92:f1:82:a9:ff:76:1a:b2:e8:3b:2b:6d:53:c6:
66:c9:61:c6:cb:e5:c3:7b:e9:bd:29:52:e0:e4:d4:
ac:53:e2:dc:fb:87:0d:24:8f:be:e6:7a:8c:7e:f4:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:B2:9F:5C:91:81:D4:79:B3:00:AE:3C:9D:32:A0:1B:7F:BD:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e717247-5f64-3342-94b8-d8032fcd208d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8e:bb:d5:bd:19:74:78:73:0c:df:29:79:9f:27:ae:af:64:
95:a8:03:56:f4:85:f2:5c:2e:c1:ea:96:cd:bc:b9:cc:ed:85:
1e:36:46:e3:7f:2a:91:2c:a9:ef:21:20:ab:c8:ec:29:47:2b:
27:99:02:92:8d:41:d7:64:5c:d6:8b:ac:37:84:a1:32:47:67:
e2:69:27:3c:90:5e:fe:8e:5f:58:2f:49:76:61:c0:b6:d5:bf:
f4:15:f3:07:6d:68:c9:58:34:66:55:66:b7:a7:21:e1:b2:b7:
c2:0b:fc:e5:0c:2e:4e:4a:0f:87:92:ba:67:7e:52:09:1a:e2:
86:17:0d:19:47:ca:27:d7:fc:e3:93:71:58:a9:f8:43:84:87:
93:68:07:f7:73:95:ca:20:3c:2d:ca:91:64:4d:3b:1f:85:f3:
b4:c5:36:0e:41:c9:fa:0a:1d:1d:ca:3a:07:3a:0e:9c:59:0f:
01:d0:f8:44:d0:d6:f5:6a:8b:ba:dd:1c:66:10:0b:09:a3:31:
cf:c8:ff:fc:22:f4:cd:ac:83:78:64:4b:36:d1:62:d5:e8:0b:
3e:f6:28:93:69:ac:14:e8:30:ae:54:d9:04:94:3b:f7:5a:88:
b1:82:f0:ac:aa:ff:b5:ad:79:f5:9e:be:b4:4c:0d:17:27:06:
65:53:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:54 2025 by rpki-client