Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa
File: 3a358a7c-990d-3102-a452-644b23508594.roa (raw, json)
Hash identifier: OwVt1XTwZtPOx74SYmR5jxfUX4wMGoTwec0T4whgGY4=
Subject key identifier: 0A:76:D4:2D:36:E6:25:1E:68:6B:BB:38:C8:EF:38:7B:D1:A5:23:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F2360AB8AE3436156B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.244.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f2:36:0a:b8:ae:34:36:15:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1e831c09-9a54-41de-a1bd-419ba99097c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:99:e1:46:1b:56:11:08:16:2f:65:b7:3d:
1c:3d:9c:46:42:88:1e:a2:97:f4:79:12:58:35:33:
17:0f:ae:3e:07:65:37:a2:6e:44:92:69:5f:e8:c2:
06:78:ae:9f:8a:41:36:19:eb:77:bb:70:e1:33:8d:
58:81:d3:c9:09:7b:2f:28:1d:d3:28:af:dc:fc:60:
d3:fb:6e:55:ca:38:f0:73:6b:5a:f2:72:86:00:44:
3f:8a:19:c3:6d:dc:9e:18:d9:25:f0:91:84:0c:b0:
ba:ed:07:b0:82:e1:21:0a:20:92:c1:bd:da:65:fc:
22:38:2c:b2:4e:77:17:c2:68:b2:bc:38:64:01:b3:
a7:23:a0:4f:cd:e3:1b:ac:73:65:29:b3:10:ee:9a:
3c:20:4b:f8:7e:e1:20:2b:a8:2a:73:ce:c4:aa:1e:
4a:f6:61:da:4b:4c:e5:e1:89:48:ef:c0:da:36:49:
10:21:6e:83:01:da:d0:bb:00:a1:f4:14:7c:e8:77:
76:d3:f3:74:fd:97:4d:73:45:a0:ee:90:b7:a6:37:
5b:d9:c5:75:37:70:04:d1:e2:01:4f:25:5d:0f:7e:
5a:e1:15:a8:41:d7:8d:24:c6:b4:f4:fd:c5:cb:dd:
e0:fb:14:8d:ac:a0:4c:fa:1e:08:ae:05:38:2b:fb:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:D4:2D:36:E6:25:1E:68:6B:BB:38:C8:EF:38:7B:D1:A5:23:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.244.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:50:8d:08:58:3a:ae:70:b1:2f:d2:c0:50:aa:70:7a:dc:ce:
5c:7e:cd:f7:b6:f1:86:cd:61:f7:06:0c:4b:15:06:2e:d8:4c:
b2:7b:82:86:71:15:5c:f6:15:48:64:d0:a4:14:f5:fe:11:6f:
51:6e:fc:96:38:e4:2b:84:5d:e0:80:65:33:52:42:9a:f4:88:
a9:61:98:4d:c2:f1:9d:7b:ad:54:a8:d4:ee:bf:02:f1:3f:6c:
34:9d:b4:bc:01:59:7b:10:fa:32:7b:63:53:1e:ee:ea:33:c5:
4a:95:49:c7:88:af:e9:d4:50:98:65:1d:08:4c:10:ef:db:44:
33:74:28:32:ca:de:f6:2c:c4:ac:c7:68:38:37:71:3c:0d:5c:
b5:26:1b:d8:ab:af:cd:a2:21:8f:81:db:33:9c:b1:1e:83:5a:
ad:16:16:06:41:a0:6f:81:f2:f3:3c:07:c4:60:b2:bc:51:b5:
b9:4d:d1:d2:f9:b9:0a:f2:25:6b:a8:2f:07:fc:f8:b5:77:8d:
35:e5:d6:10:37:b5:53:39:e1:12:e0:12:2f:91:c2:2b:db:94:
72:e8:a7:01:e6:78:2a:8d:e9:43:06:6d:46:47:9c:e2:1f:0d:
05:94:56:f2:53:b1:3d:43:8d:d4:e2:7f:95:37:6e:15:c0:af:
e6:4d:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:53 2025 by rpki-client