Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa
File: 329e9fdd-67bd-333f-ab94-30b69ab41416.roa (raw, json)
Hash identifier: Jp5hb9caEopCuv1KJwzXtFk5Z0/DKxK7NOL8tZxyEzo=
Subject key identifier: 93:0B:CD:81:67:2C:2A:F0:F5:15:B5:88:CD:E2:EA:D4:64:FA:3B:E1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246CF7ED455785626763FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.168.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cf:7e:d4:55:78:56:26:76:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=030d7584-5044-411e-9147-446f43da3c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:fa:df:9a:b4:be:d6:6d:32:2c:89:bf:a2:
01:03:f8:a1:6c:84:9b:44:a8:28:c0:f6:c6:77:a8:
61:6d:5f:e6:45:79:48:07:44:65:93:ca:d7:ff:23:
d1:3d:e3:38:8c:66:31:1c:54:f0:6b:90:95:9a:1a:
0f:f2:06:0d:60:68:1d:9a:3d:4e:b5:3f:5a:5f:aa:
a2:8c:c6:be:3d:af:f4:86:9e:cd:0e:45:fb:ba:4f:
d9:1c:7e:07:66:88:72:08:f7:c0:a3:92:f7:88:2e:
86:32:31:5c:3d:d4:85:f1:94:79:07:7b:0f:09:14:
9d:ed:56:c1:b8:67:d2:dc:ea:96:3d:a9:8a:e6:d1:
75:87:d3:07:b0:9b:ec:50:6d:6d:04:95:1a:b4:97:
90:da:25:db:91:d7:2a:5e:42:98:7d:a4:34:c1:fb:
73:b1:a7:90:d3:e7:bb:af:dc:d5:8f:ab:46:03:63:
ac:06:ad:76:1e:9e:bc:47:83:a6:25:22:44:33:e8:
0a:e7:0c:d9:46:8d:17:31:26:b2:b9:3f:c1:eb:79:
07:56:a5:74:60:03:56:d6:f9:75:f5:5e:1d:aa:05:
bf:5d:a3:17:6c:1f:6f:b3:9e:c5:bd:f7:01:ce:fa:
58:ac:7f:dd:18:9e:22:0a:6f:2f:20:64:1e:a9:39:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:CD:81:67:2C:2A:F0:F5:15:B5:88:CD:E2:EA:D4:64:FA:3B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.168.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:77:cd:db:63:d1:10:f0:c0:dd:12:af:65:d4:ed:93:4a:a9:
59:3c:d6:48:0d:ab:57:d3:02:9a:fa:fb:de:a6:e3:b2:09:45:
6b:c6:81:51:b0:e6:e5:ed:85:9a:e4:c8:51:b5:4b:48:45:6d:
11:37:06:ac:53:26:8e:56:00:43:1d:aa:99:ab:b0:ee:c2:5d:
4a:12:49:10:8f:67:9f:7a:5c:ff:d6:60:c0:39:cf:5b:1b:e9:
0e:fc:99:2d:fa:3e:b9:59:e2:7a:5e:07:c4:55:9a:8e:9f:07:
aa:03:71:a6:84:b1:bd:79:8c:04:15:38:e0:0b:ec:3f:c6:0e:
c2:79:7f:e9:3b:6b:3e:d6:cd:64:5d:72:8c:47:1f:bf:ab:67:
1f:5e:b8:6b:41:c7:22:cf:cc:be:3b:61:e8:83:de:d2:43:4f:
7f:a9:9d:ee:12:92:0f:37:1f:22:2b:75:7d:79:7f:24:9d:f8:
fb:ec:d5:33:0c:03:18:74:06:15:66:b5:ee:8b:18:47:4b:8e:
6e:20:d3:46:ed:a3:ae:ff:ff:7a:57:e8:83:28:da:db:04:21:
36:e6:b0:90:1e:6a:69:fe:fb:e9:1e:27:a7:c7:53:4b:b7:c0:
21:dd:27:13:40:0c:87:b2:27:4a:52:6d:4b:46:07:f3:81:b0:
fb:f1:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:02 2025 by rpki-client