Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa
File: 65d13b94-4668-32fe-a649-06eebd3ad2ab.roa (raw, json)
Hash identifier: MCT0VMWL7xRSMGNYdxQN4fE12lyP1whkfchkDmAXCNk=
Subject key identifier: 51:FF:76:69:99:F9:38:C1:AB:19:74:3D:BE:B8:51:9D:58:4E:23:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FB933BB6AD909B0B4600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.71.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fb:93:3b:b6:ad:90:9b:0b:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=92108743-6993-41c9-a1e1-4e89c22f8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:fb:a0:32:7b:87:9c:60:68:64:a0:4b:52:
eb:7d:fd:d0:b1:e7:ba:aa:d2:32:75:22:d9:03:0f:
29:34:07:6d:b0:e3:7f:98:b3:6c:21:9f:5b:36:fb:
53:27:80:05:2e:19:31:fa:f5:b8:37:5f:e3:17:e0:
3e:cb:a1:86:9b:cf:35:a9:c6:d7:c0:34:d8:16:1d:
90:12:f3:17:3f:cb:ed:2c:b1:b5:1f:ed:23:e9:f1:
67:a2:85:96:aa:9e:43:85:47:7c:45:29:81:42:26:
75:39:36:70:3f:e7:5f:e6:e9:a6:fc:a0:8e:01:d3:
78:8a:2a:44:bd:f8:77:66:a7:26:32:5a:a0:1b:bb:
39:3d:54:a0:17:99:79:9d:0c:4d:4f:6c:92:ef:ed:
67:4b:2d:45:e2:d0:47:29:ce:92:1e:ee:5d:32:6c:
d6:1d:db:7b:b7:a9:c6:01:ce:33:c0:71:b4:8f:f2:
d7:62:a5:0d:5e:32:72:8c:86:ca:fb:73:21:73:0b:
96:63:cd:33:af:7d:3d:34:e5:19:50:92:c3:3c:2a:
b3:37:fa:26:3f:69:b7:9e:d1:b3:26:38:45:56:10:
3b:8a:fd:e9:62:71:b5:dd:2c:a2:6b:7c:84:c9:5c:
58:89:ba:cd:0f:9e:7b:9c:d1:31:a0:6c:1f:ab:1c:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:76:69:99:F9:38:C1:AB:19:74:3D:BE:B8:51:9D:58:4E:23:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:88:72:b3:21:49:c2:36:e7:f7:8e:f5:ef:69:c0:fc:16:b1:
25:9f:45:f1:9f:de:46:0e:52:0a:d1:d9:1d:83:5a:10:cb:da:
c1:ff:22:c3:79:c4:7f:68:09:75:5a:b0:9d:be:1c:f3:8a:12:
b4:04:d3:9e:54:8f:d1:fb:25:80:93:3e:a2:b9:c9:ad:67:54:
06:c2:00:fa:b3:c5:08:71:bf:50:71:ba:90:5c:b8:aa:c5:2d:
d1:47:ba:ae:9b:1c:fa:e3:e6:ef:80:f9:ec:0c:a2:dd:ed:d6:
ad:2d:fd:02:ae:bb:67:aa:93:a4:6d:ae:9f:91:ab:65:54:3c:
ae:f3:5f:26:88:2a:e2:74:78:f7:ed:39:1c:36:8f:ea:24:3c:
97:e9:e0:ce:19:25:d9:c0:aa:81:de:83:4e:0c:89:1a:06:70:
57:40:dc:03:27:a8:0e:3d:97:3d:21:62:10:01:fb:d6:ab:a8:
78:7f:94:9b:46:d4:f8:04:6d:fe:c1:1c:88:15:c5:f7:8b:11:
31:71:f7:44:6e:b6:13:01:86:8d:cc:cc:9e:75:20:b1:02:bf:
9a:21:55:fc:c3:04:6f:45:d8:ad:69:86:ec:f4:09:60:bb:c7:
ea:b8:97:1c:df:9e:f2:45:92:62:17:79:26:94:e1:08:de:b5:
94:9c:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:23 2025 by rpki-client