Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2323cb28-cf23-3a36-bb37-2e65d92acf72.roa
File: 2323cb28-cf23-3a36-bb37-2e65d92acf72.roa (raw, json)
Hash identifier: mb70JHcUBpel/IwZmOdyXFO9JN01I/6Kh4XJLSyX2ys=
Subject key identifier: A3:67:1A:FA:CC:F4:7F:83:47:1B:B4:E4:E6:A6:B7:00:DD:49:23:A6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D4DFC8266EC68C674700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2323cb28-cf23-3a36-bb37-2e65d92acf72.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.69.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d4:df:c8:26:6e:c6:8c:67:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=23221714-5489-4189-ab22-d1010ca4b95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:70:57:bb:b3:7d:c2:aa:14:20:f8:5b:7c:
8a:c7:31:4e:6d:18:d4:bc:56:ed:89:9e:0b:15:67:
8e:ba:c6:16:0a:2b:0b:7c:6c:96:5e:ff:19:88:3f:
c6:a8:29:9f:24:1b:3f:05:9c:8c:34:aa:a9:af:c0:
f8:89:6f:10:63:dd:3e:7a:03:cd:79:81:77:94:9c:
58:04:91:ed:57:47:91:7b:1c:1b:7a:a0:1e:56:61:
82:6d:f0:9e:99:87:e5:82:96:6a:c6:72:df:aa:3d:
71:58:26:89:25:46:d1:5f:f6:43:d3:f5:b2:28:b5:
df:e7:c8:ee:0c:b1:1d:09:d9:09:cb:0a:df:14:44:
1a:d9:33:91:52:7b:fe:ce:45:29:d9:29:25:fa:f6:
45:45:37:8f:36:57:6b:49:9e:6e:b4:d7:48:b4:9e:
f5:23:ce:a7:f7:62:06:38:6c:2f:2d:c8:d5:74:25:
c0:5a:3a:31:0b:64:9c:e5:bf:d4:aa:5f:9a:02:83:
06:e3:29:e1:f7:a9:fd:7a:51:03:05:7b:6c:96:f8:
6b:f9:b0:51:8c:f0:0d:b9:c1:6a:bf:39:fc:9f:88:
0d:f6:6a:59:9c:de:36:65:96:65:d3:ad:23:b4:2a:
dc:58:d3:40:3e:ba:c2:5c:32:50:2d:56:d9:10:09:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:1A:FA:CC:F4:7F:83:47:1B:B4:E4:E6:A6:B7:00:DD:49:23:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2323cb28-cf23-3a36-bb37-2e65d92acf72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.69.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b0:29:fe:f5:75:45:00:71:05:73:3b:62:55:b2:56:d5:ae:
58:1a:7f:02:7d:c6:a3:22:93:95:98:e2:71:75:c4:06:41:a4:
c2:ce:11:17:1a:e7:9d:ef:28:05:8d:25:29:5e:60:7d:8f:96:
68:d2:68:14:92:ae:e5:2b:8a:ec:9f:ec:72:1c:55:72:39:58:
3e:10:51:37:a4:4f:eb:f0:03:a5:3e:b0:c6:49:68:22:ea:7f:
a7:7c:9a:56:d2:31:26:66:31:75:8a:f4:22:1e:a0:f1:a9:45:
14:24:04:7f:db:6d:b4:0f:50:66:c5:50:c4:0d:5b:06:34:63:
4a:26:7d:6b:d4:12:15:f5:9c:4b:7b:71:ba:a7:3f:d6:98:52:
ca:65:7a:88:82:00:9d:41:f3:94:63:b0:ab:6c:4a:bd:2b:16:
34:8d:21:cd:9c:58:96:33:15:49:c1:df:92:8f:d5:fa:f9:37:
e6:0b:25:4c:52:82:18:ea:04:f9:b3:33:a3:ed:fe:29:c0:92:
f0:b4:9e:06:ab:33:86:2d:0e:aa:90:2c:8b:b3:f4:f3:fc:68:
81:68:3c:80:4c:ca:a5:a2:bc:03:0a:de:89:17:0a:c5:aa:06:
e6:97:20:68:4e:6a:d0:51:b1:ce:2e:fb:55:03:3d:41:fe:bf:
74:86:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:24 2025 by rpki-client