Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
File: 1fab77cc-80d5-3ad0-a822-d65320d28965.roa (raw, json)
Hash identifier: rC6PnYl6cJ+TpzdqFkiJldLKasMIxvV8MFexVxNT0Ho=
Subject key identifier: 1D:52:91:3E:18:63:E0:BC:D0:3F:80:91:24:96:15:DC:FD:E3:E7:AD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D7294035F6EBF71BC780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.70.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d7:29:40:35:f6:eb:f7:1b:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a94cc8e8-1fa0-4ea6-9568-80fcc4e93024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:c6:39:f1:80:cd:2b:45:e2:6d:0a:10:f6:
1d:fe:66:ed:72:74:84:5e:ee:41:5c:b3:48:55:8b:
29:2d:85:2e:3b:60:6d:27:0e:2d:a2:b2:7e:40:91:
f7:f9:55:df:dd:ad:58:12:a3:1d:6e:df:7f:02:55:
63:b6:8c:30:67:b2:d0:60:48:d3:8d:3f:2f:f5:02:
e2:e0:72:34:01:42:c6:33:ae:8a:79:3f:62:08:3c:
6e:59:49:32:c7:84:49:54:b9:85:55:8b:81:02:f5:
a4:38:07:30:b9:93:c2:09:b7:0e:4c:e9:92:ed:32:
7e:52:8b:c0:c5:ae:0b:f0:e4:5a:23:fe:da:be:85:
e1:3a:5e:47:53:c3:8f:4e:82:39:04:ce:8b:b4:c0:
85:f5:3d:c5:41:aa:d8:a8:b5:33:4b:0f:c8:05:1b:
56:30:d8:4a:59:0b:f1:b9:d7:0e:8b:58:68:0d:35:
48:db:0f:5a:e5:1d:2d:be:6e:7e:80:e4:c8:29:be:
63:0f:e3:fc:88:09:f5:47:07:c3:0a:6e:56:7a:91:
c4:75:36:50:b6:98:76:b0:bd:61:1d:4a:ad:f1:5e:
4a:9f:93:ba:db:2c:1c:d1:45:80:08:0a:5a:db:d7:
2c:9a:28:5d:6e:84:94:04:6b:14:4b:d9:4d:e3:60:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:91:3E:18:63:E0:BC:D0:3F:80:91:24:96:15:DC:FD:E3:E7:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:56:37:b3:bf:d9:2e:20:9b:7b:2d:30:c0:f5:cc:e9:d7:13:
a4:64:94:12:f9:37:2d:19:1d:96:93:69:a1:89:34:87:8d:9c:
db:02:82:42:a7:85:ef:bc:a1:13:a4:3a:28:53:35:7d:a6:d3:
04:e7:05:e1:c8:4f:f7:78:42:62:fa:0c:22:df:b3:ba:3b:de:
d8:3f:1d:fa:2f:6e:9b:0b:09:33:29:08:47:93:ee:8e:8b:c5:
d7:08:8e:0a:24:22:39:c4:93:73:df:06:e5:f8:b5:76:78:a1:
0d:10:5d:6f:c7:38:27:06:f8:0c:3e:b2:16:dd:42:e3:d2:59:
21:c0:60:97:f2:23:14:ba:9c:ac:bc:b3:58:e9:ea:3a:b6:45:
aa:91:63:2b:ef:90:9f:22:d2:7b:ad:12:5a:99:97:19:c0:85:
53:5f:83:35:a7:0f:ee:09:65:e6:38:ef:eb:c6:93:e4:b5:61:
c6:6d:73:b3:07:63:57:cf:62:a7:54:8e:4a:f8:6b:fb:77:60:
44:ed:be:91:7b:8b:fb:fa:80:b0:c7:bd:93:5e:75:33:20:b8:
b3:33:89:48:14:4c:4f:cb:3a:79:c7:69:ad:b2:37:05:b8:c5:
e4:1a:bb:34:f2:a5:43:04:49:e4:78:52:19:70:0c:37:1a:45:
b3:10:0f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:57:54 2025 by rpki-client