Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d413a65-19a9-311a-9fbb-b63208bee433.roa
File: 4d413a65-19a9-311a-9fbb-b63208bee433.roa (raw, json)
Hash identifier: CNKRkx8KHXPx/+h1Gwr096fSwIIPUcZkHJMLYp7qu+0=
Subject key identifier: DE:89:11:4F:E8:77:DA:03:73:C0:04:F7:4A:14:4A:36:A4:29:B5:9C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB3F5802B3D90F931E46C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d413a65-19a9-311a-9fbb-b63208bee433.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 65.249.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3f:58:02:b3:d9:0f:93:1e:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a139a13e-2888-4d62-827a-225cfe32777c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:af:3c:08:a4:75:61:4b:a1:58:5e:68:8d:
35:27:c2:ba:91:43:92:7b:da:a5:68:66:8d:3b:02:
d1:91:5b:cb:90:a2:eb:e2:38:ea:68:39:8b:44:e5:
47:a7:5b:e9:db:2b:45:5d:b2:68:6a:9e:49:24:e4:
86:55:4f:46:bd:43:cb:3e:e5:71:8d:5d:aa:61:de:
e8:8f:3a:62:89:65:ac:9d:ae:4a:a2:da:d9:09:78:
18:70:d5:ff:ab:cc:5a:f8:a7:8c:cb:04:ba:1f:e4:
44:0f:a5:6a:87:d0:7d:0a:98:a4:6b:4e:d0:c2:eb:
a0:43:60:ac:f6:ad:03:cd:08:27:1a:36:3d:32:74:
bb:8e:32:bf:62:b8:f9:cc:4c:fb:8d:62:5e:71:9c:
cc:da:82:19:24:1f:58:40:d5:f9:cc:17:81:f5:20:
45:86:bc:b9:95:54:79:ad:01:01:fb:45:a7:38:ab:
71:f6:80:47:b8:3d:2f:17:74:db:5c:5e:07:6b:c9:
46:69:76:ec:79:95:02:5c:05:9f:dc:2b:4b:77:b7:
a0:bc:e6:ca:ae:73:32:4d:5f:09:bc:19:4f:fa:4b:
c5:61:2d:a8:c7:22:90:53:7f:e5:65:38:e7:4f:fe:
d3:02:1f:99:d1:8f:be:90:bd:32:82:58:3b:36:46:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:11:4F:E8:77:DA:03:73:C0:04:F7:4A:14:4A:36:A4:29:B5:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d413a65-19a9-311a-9fbb-b63208bee433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
65.249.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:85:70:40:0b:d4:de:34:0a:e1:9c:8c:9d:6e:61:08:e0:d6:
1d:8e:8f:32:f5:ad:8b:bc:3c:f3:a9:bd:67:d4:85:aa:fb:7e:
10:b4:f0:ed:6e:f6:52:74:93:f5:39:98:67:3a:67:84:a3:92:
16:8e:34:90:0a:d6:6d:c4:2b:a4:eb:8d:87:18:43:01:ab:e6:
53:60:c1:08:eb:b5:90:f2:86:ed:f3:c2:64:32:7a:3d:83:9f:
d6:73:0e:7a:5d:45:37:24:e5:b3:a4:85:5e:42:24:b0:19:11:
e3:be:7f:80:97:f1:a3:fc:f3:a2:3f:66:92:da:b6:e1:50:eb:
29:c5:5e:14:ba:6f:df:26:63:b0:a6:99:3d:45:9d:2e:b9:ed:
bc:f5:fd:74:dc:fb:ba:7a:82:14:e0:a6:14:6c:c1:02:9e:a9:
27:36:e9:5e:fc:3d:3a:13:b7:f1:df:f3:f5:64:f0:7d:0b:7e:
e7:b3:64:02:8e:44:e3:5a:c1:b4:1d:87:11:b0:ed:a1:b7:d9:
5b:07:aa:73:f7:c4:c3:e6:39:d4:78:fb:f8:29:fa:ee:80:71:
55:73:ae:91:58:35:b5:ae:e4:79:79:70:93:e3:b5:f6:bf:f6:
26:60:b4:84:91:47:bc:20:43:f1:4a:93:b3:fb:f5:b5:40:bd:
8b:51:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:25 2025 by rpki-client