Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa
File: 32e2c198-0d29-3ec0-9baa-e29683a0a534.roa (raw, json)
Hash identifier: HP7yB+cFb9fDZoLZMrWv7j2VvjUiuUMfJPN7jpEkkRU=
Subject key identifier: B8:4F:07:C1:F1:99:FA:68:FD:4F:F9:A5:88:3F:92:8B:49:DF:88:A8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584921842116F1FE8CB2B80E3F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.129.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:21:16:f1:fe:8c:b2:b8:0e:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=b24433e2-a140-40fa-b140-9961c3f3a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:10:fc:e1:a3:47:84:a0:6c:78:1c:3a:26:
34:e1:da:b4:4b:97:18:bd:be:d7:2b:6d:42:62:0d:
28:4f:be:09:d9:a0:f2:cb:fc:62:3b:79:92:0a:38:
35:3b:ef:b8:b8:04:22:c3:ea:d9:48:c0:4b:54:4b:
ae:ee:bb:41:30:6a:d5:e4:ef:ed:da:db:45:74:8b:
a9:d6:78:22:3d:59:9a:10:76:8c:2c:58:09:5c:5c:
18:82:e5:93:c7:54:6a:74:eb:ca:56:1a:28:bc:70:
d4:2c:87:aa:21:dc:2a:11:a0:38:73:20:d8:7e:55:
a9:a2:aa:df:59:ad:00:f9:a7:2a:da:6a:40:bb:72:
de:02:6a:3c:7a:94:52:74:9b:45:d0:5a:f6:f4:3b:
f6:71:f6:13:3d:c5:d6:f9:1e:e8:82:16:59:3e:ce:
0c:a9:78:a8:9c:11:ff:56:62:ec:5a:11:c0:e8:65:
dc:da:05:69:75:dd:69:88:02:18:d8:ae:b6:0f:72:
a4:99:4f:07:f5:45:bb:fb:1b:ba:e5:29:fb:6c:19:
38:5a:7a:d9:22:0e:c6:f7:fd:9a:96:8a:bb:49:69:
cd:d5:6f:8c:6c:9e:21:50:f5:21:81:24:fa:c4:9b:
38:1f:56:6d:d3:41:c6:9b:c4:2a:5a:fe:23:04:c4:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:07:C1:F1:99:FA:68:FD:4F:F9:A5:88:3F:92:8B:49:DF:88:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.129.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:95:0c:17:86:32:36:8a:6b:a9:3f:24:f2:ed:78:7b:44:2c:
1f:b2:d5:c1:db:4e:d1:81:ad:22:3e:91:93:00:6e:a2:28:e4:
eb:8c:64:3e:3f:c3:f1:68:b5:dc:ea:b0:e9:c0:d2:74:d0:8f:
98:0d:d4:31:99:8d:42:2a:0d:95:f1:a8:e9:3d:b2:0a:b7:1b:
ae:f7:99:41:9f:66:e2:e2:f4:40:7e:65:35:f5:51:10:ff:16:
49:e6:a1:38:0a:44:f1:1b:6c:b9:38:af:0c:31:db:55:15:2c:
d5:ad:b1:bf:4e:27:b9:f6:6b:bd:5b:9d:4a:a7:3c:c3:35:ea:
b1:71:92:a7:92:f7:98:bd:c3:41:24:4d:9d:48:14:a2:c0:98:
49:6b:09:a7:3a:79:d9:cf:99:4d:cd:c4:96:7d:39:21:54:cb:
e3:72:0c:33:d2:0a:b0:33:d9:e6:13:bb:6d:a0:c7:fc:e5:b5:
e1:96:0b:dc:da:4f:37:fa:f2:2b:9a:4e:08:50:95:06:2a:9b:
a1:f2:bb:4e:94:e2:c7:81:46:7d:51:ac:5f:04:ee:b6:6d:05:
cd:7f:14:b4:53:e8:1f:ff:4b:9a:22:f6:5e:58:f8:b8:32:c5:
a4:5f:4b:b5:cb:06:bd:64:97:d0:b1:da:2b:4c:11:3b:5a:03:
d1:7d:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:52 2025 by rpki-client