Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa
File: 536ae49e-dd8e-3258-9632-12418f5ff32b.roa (raw, json)
Hash identifier: Aa/+tQvijSJYIJ73OljstwF4sYPS4LDqXgQnCHBBrlE=
Subject key identifier: FB:38:75:C7:70:2B:C4:F1:6A:F0:09:A2:35:DA:67:80:95:2E:52:33
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D00AB82F144A46BE7300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 96.248.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d0:0a:b8:2f:14:4a:46:be:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=df929d13-6e8a-4d9b-ae04-6403dce2961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:28:78:34:73:6e:fa:02:ab:55:40:36:f5:
97:22:10:d0:a4:a3:e0:4f:05:9e:62:42:15:9a:73:
e5:4b:5b:61:8d:e9:b5:fe:61:bb:e7:df:02:c7:85:
31:7f:41:d5:d3:b7:a6:8a:b9:98:d9:24:8d:9f:f5:
4d:52:46:c8:e8:50:f7:71:eb:7d:2b:24:f9:a2:27:
58:4b:25:21:c4:36:65:4c:1a:d7:7d:06:d2:44:2f:
10:93:06:07:d0:8c:37:4c:50:6b:03:aa:2f:18:63:
e5:0e:56:4d:f2:24:17:a4:11:a8:4a:6e:7f:27:f3:
20:3a:68:49:c5:b1:8c:61:39:61:3e:a9:7c:92:3c:
e8:cd:c1:9b:e2:91:7d:9b:cf:6f:b7:95:5c:2d:21:
69:73:10:b7:b3:b7:f9:80:41:c9:61:c9:3f:08:28:
4b:42:a7:1d:e5:51:28:62:c3:96:de:7b:60:37:0a:
3d:9f:b3:7a:18:5b:b8:cb:28:e3:cc:5a:11:af:79:
92:ec:b3:95:3e:3e:10:f6:61:f7:67:1d:41:b9:e4:
30:a8:9a:9c:aa:80:f5:dc:21:e1:8f:f1:78:b3:c7:
b1:10:bf:75:66:62:02:b1:e4:84:8d:01:29:dd:de:
d3:9c:99:bf:c0:0c:8a:0a:cd:0e:e8:92:0e:77:d9:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:75:C7:70:2B:C4:F1:6A:F0:09:A2:35:DA:67:80:95:2E:52:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.248.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:5c:0f:bc:92:0b:ed:ca:b4:2b:a0:ab:5c:2f:30:cf:20:28:
af:01:d5:10:fd:89:bd:ff:be:ea:70:16:49:28:7b:3b:5d:8d:
80:eb:73:75:ac:69:12:66:a6:f5:0e:3b:ff:8f:31:f0:43:4e:
9a:e7:09:d9:2e:ca:2f:de:93:4f:66:07:69:de:f7:42:64:b6:
98:b9:33:35:fe:23:ba:e6:cd:23:8f:ba:17:1c:68:23:4d:57:
84:7d:1f:c8:e5:13:98:04:cd:0d:45:90:ea:9e:62:ea:8f:3b:
ac:7e:b4:b6:19:15:d3:f9:e1:ed:d5:da:55:59:f1:63:18:fd:
30:7e:77:04:f0:3b:f7:8d:c7:84:52:2f:61:f5:86:75:64:84:
f3:2c:a8:6b:c5:f7:27:ec:dc:1f:a4:90:d1:b2:0e:f7:a8:08:
22:06:df:67:61:a0:4b:45:52:0c:9d:6d:c5:96:c6:9e:61:b4:
4a:8d:c6:88:17:16:5c:6b:ac:03:77:eb:98:02:37:cc:52:84:
c1:22:f8:fc:b0:9c:df:e8:8a:c7:67:1f:81:9a:ba:dd:c7:7d:
ad:a2:53:4f:b4:6d:59:40:8c:2d:54:c6:ef:e6:ff:14:b6:27:
da:b0:52:3b:f0:67:77:9e:16:53:8c:df:f4:b5:c4:61:9a:97:
a9:70:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:42 2025 by rpki-client