Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa
File: 44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa (raw, json)
Hash identifier: n3xfP52vCkhQQGxoO+layQFxhwF7NoiEEZMfRjx6jkI=
Subject key identifier: 0C:4D:7E:E5:10:87:97:A1:95:82:D6:15:BA:C6:01:73:14:82:05:A2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848B27434671EB76FF55B955E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa
Signing time: Tue 28 Jan 2025 18:14:55 +0000
ROA not before: Tue 28 Jan 2025 18:14:55 +0000
ROA not after: Mon 28 Apr 2025 17:14:55 +0000
asID: 0
IP address blocks: 67.107.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:74:34:67:1e:b7:6f:f5:5b:95:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 28 18:14:55 2025 GMT
Not After : Apr 28 17:14:55 2025 GMT
Subject: CN=d8cfd258-4f5c-46af-bc50-e67271b2f7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:fb:e8:a0:2a:5c:e9:dc:da:aa:d0:da:98:
12:15:38:28:03:bc:1b:a2:46:de:03:a7:2b:3f:0c:
bb:84:ab:12:57:d4:89:9a:27:e3:50:44:cf:24:5c:
90:36:1b:ab:87:c4:97:35:49:db:c9:e1:f8:22:95:
ce:ff:0f:a5:fd:4e:48:b0:69:84:f8:10:10:ff:09:
55:64:1e:09:8b:4b:ff:fb:6c:bc:0e:a2:a7:4f:50:
8c:ee:74:92:e4:52:78:57:9f:47:8d:e2:22:ca:88:
cf:76:dd:80:50:ef:fd:50:e7:41:7f:c7:47:83:81:
13:c6:5d:92:e6:a4:c1:18:32:8f:19:07:76:9f:0c:
e5:c1:43:4d:d5:28:52:96:af:1f:51:46:4e:6c:79:
11:21:e5:d0:6d:0f:03:dc:a9:bf:b9:4e:a8:6d:68:
12:6c:62:97:33:c3:7c:62:14:95:f6:b2:c7:c9:61:
2f:8b:01:7b:80:4a:6e:c1:01:2b:2f:10:77:4c:92:
90:fd:fc:5b:03:88:6d:0a:a4:1a:74:61:ad:ed:9e:
32:4a:7c:af:e7:f1:da:49:c6:c7:93:67:2e:79:bc:
73:83:52:ea:d1:94:d1:6f:cc:85:ab:4a:fe:93:04:
2c:9e:2f:db:a8:ce:62:23:b2:80:b1:a0:9d:cc:d8:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:7E:E5:10:87:97:A1:95:82:D6:15:BA:C6:01:73:14:82:05:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
67.107.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4f:0c:29:98:5c:70:56:74:0f:56:8d:5a:2c:f0:10:3e:75:
6a:6b:ec:21:67:c9:41:5d:93:ed:b0:3a:50:53:5a:9c:00:86:
ab:33:28:a6:72:25:15:92:c6:a5:12:73:f2:47:e6:e7:4e:34:
e8:d0:fb:e2:65:54:1c:54:21:d7:82:da:85:d2:35:6e:9a:e4:
ca:06:f2:46:96:cf:84:f1:24:5a:cf:b1:f9:a1:83:27:96:dc:
16:56:8c:be:6c:47:f9:b4:d0:46:0a:6d:19:c1:e4:be:8f:a9:
d5:5d:dc:6f:50:bb:c9:95:94:15:44:2d:6a:86:33:c9:b4:c2:
2b:7f:59:9f:3f:bb:b1:fb:18:1b:44:60:43:91:1e:af:49:68:
75:a7:76:a5:bb:6c:55:05:74:78:b4:99:22:8d:0c:f4:86:c7:
cd:c2:59:90:1e:0f:17:bb:ec:43:88:b5:01:64:79:a8:e7:9d:
76:1e:c0:25:77:0f:e6:87:86:a4:e3:f9:b6:c4:97:78:31:55:
67:89:df:9c:b1:93:07:99:11:00:1a:b0:db:97:27:e5:b2:81:
7b:9c:5b:2c:c6:20:6e:7c:ac:42:75:b3:72:dd:a3:ca:06:23:
88:f8:b5:58:92:e9:10:44:34:a2:aa:2d:3a:0f:dd:ff:75:fc:
b7:3b:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:20 2025 by rpki-client