Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa
File: 4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa (raw, json)
Hash identifier: NQilW7hvV2l3pc6Hjhz/rkdtIlovSkK+65c4Vo3TGCg=
Subject key identifier: F4:39:72:C9:E6:4B:F6:B4:53:53:35:EC:A8:C5:B9:D9:F5:13:76:D6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2B915BE43C9410CAEA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 70.18.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:91:5b:e4:3c:94:10:ca:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=3edd750a-83bb-49cb-b0d0-bd8e26afbb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:9e:dc:25:c8:26:8a:af:9d:09:8a:0d:8c:
81:46:87:2b:c3:a6:9b:ca:99:ab:04:5e:fe:a0:11:
9d:be:89:40:96:d7:f2:aa:06:4c:5b:bd:10:7e:91:
ca:1a:a2:38:ab:ef:df:f5:37:ed:87:4b:7b:54:f3:
39:d4:75:90:ed:91:e3:6a:56:c4:2d:b3:55:3e:70:
cd:c0:f9:0b:88:51:a6:d4:91:61:e2:7c:87:a0:30:
72:3b:a4:7b:04:9c:59:d4:ae:b5:3b:ad:3d:bf:6b:
83:30:37:5d:55:cf:d9:b8:4b:05:c8:82:6c:b1:47:
77:36:06:b2:d3:a0:0a:8f:1c:62:8c:4f:70:02:9a:
7a:07:a4:31:ed:97:97:bc:35:1c:02:5c:64:3e:12:
a6:1d:e0:70:6b:70:ea:2d:a4:1c:6c:ca:13:30:9a:
23:03:d7:69:7e:b8:0b:ea:35:25:ab:1e:4f:69:4d:
bc:e1:69:5e:32:1a:ef:f8:47:fa:6d:a9:3f:bb:7f:
2b:94:c1:22:51:b0:d8:4a:3f:ea:7d:a9:a8:c7:b4:
5e:f9:3c:45:7f:a1:f2:93:71:29:0d:58:53:08:64:
a8:2a:8d:fb:ea:b7:06:e7:13:ee:22:5d:b2:e5:c1:
de:1b:b9:f1:be:d2:3f:cf:f9:5e:ab:34:e6:cb:58:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:72:C9:E6:4B:F6:B4:53:53:35:EC:A8:C5:B9:D9:F5:13:76:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac5ec2e-a74b-3007-a0d7-37a634bf1338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.18.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a4:7e:59:da:8e:e9:51:28:07:8b:b6:2a:9f:4a:32:90:6b:
3a:ee:e1:c5:b1:da:58:ff:28:b2:54:bb:93:f0:e8:9a:e5:b0:
6a:5e:be:5f:bd:ff:23:fe:f0:5b:ff:6b:28:cf:50:0d:b3:3c:
91:68:a6:44:da:57:f1:5b:e6:ce:13:ea:6b:ec:c2:9d:df:80:
89:df:e5:c5:85:f8:a5:54:b7:8a:ca:24:cb:89:d6:2a:5c:a1:
43:0a:5d:e6:df:da:9c:c1:23:c9:38:e4:f0:53:ac:e5:8c:84:
6e:1a:7d:e2:6e:37:d9:ca:40:35:ef:26:d3:4c:d2:67:1b:3a:
90:bc:2a:20:77:9c:44:16:9c:23:9b:4f:5e:16:9b:76:3a:db:
24:2f:af:e8:d3:17:2f:57:c7:43:80:c5:59:f2:61:85:4d:cb:
28:1d:8a:e4:dd:32:e4:a1:67:1c:18:42:e3:d8:39:2e:92:d2:
9a:94:03:43:c9:4d:5a:a6:fb:85:d7:c3:97:a5:12:28:76:19:
7d:09:36:da:f8:2f:f1:57:45:52:65:93:ef:0b:69:9f:d6:8b:
c4:c0:9f:65:04:8b:77:96:59:d6:f0:87:47:ed:5c:c4:0c:56:
98:b3:18:4e:b2:c4:0b:ab:21:8c:7b:b6:23:26:cd:8e:45:33:
ea:3c:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:57 2025 by rpki-client