Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa
File: 67bd2388-101d-369a-b707-5ec32bf31731.roa (raw, json)
Hash identifier: iBfSZnpUu8kwPlzZomxvoh8jXw/DnFbeYagaa1WlaQs=
Subject key identifier: 15:AA:C0:64:5D:EA:DC:5D:7E:FD:24:07:D1:83:21:BD:A3:5C:25:83
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A15B5B7DE541DDC2D87DF500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa
Signing time: Wed 22 Jan 2025 15:16:06 +0000
ROA not before: Wed 22 Jan 2025 15:16:06 +0000
ROA not after: Tue 22 Apr 2025 14:16:06 +0000
asID: 6167
IP address blocks: 97.208.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:5b:5b:7d:e5:41:dd:c2:d8:7d:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 22 15:16:06 2025 GMT
Not After : Apr 22 14:16:06 2025 GMT
Subject: CN=0c268c81-d995-4bd2-8edb-d5372af9a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:ae:b4:ef:1f:c7:9b:5c:20:ae:b4:ac:55:
75:0e:5a:ed:a7:fe:18:90:77:b1:2c:b0:a1:d2:04:
51:98:4d:50:4c:10:36:e6:40:d6:4d:57:1b:4b:ad:
1c:e3:69:a0:b1:09:3f:3c:b3:dd:76:df:db:9c:c6:
b0:81:bc:bd:bc:41:e5:d8:3d:f8:0c:c8:fd:67:66:
95:9b:cc:cb:26:be:aa:4d:fe:30:d6:14:ee:9c:2c:
44:b3:c9:a5:d9:cd:fe:a3:4d:6a:18:fa:4e:00:d0:
9e:f6:8c:63:07:7c:17:06:89:ab:bd:70:9f:cc:57:
b2:86:54:b1:90:36:e7:62:ff:cf:de:32:c6:a2:e3:
5d:c0:51:31:80:b0:20:84:8d:37:9c:61:af:9c:a4:
6d:59:9c:21:2f:6d:a8:df:3f:6b:bc:63:ca:b9:03:
9f:0a:94:8b:07:c3:9d:a2:aa:2b:76:6a:37:d4:80:
4d:91:f6:55:0f:34:bc:01:11:64:cf:8c:3c:8c:ca:
b0:3c:a9:cc:c8:5e:09:06:19:56:31:9e:ed:64:f3:
05:6a:e7:56:22:78:df:b8:ee:76:1e:ef:58:05:e1:
23:0f:d1:9d:ac:0b:75:38:7a:a5:65:e4:5a:5a:ac:
f7:d7:6c:cc:ee:88:d8:2f:b9:b6:54:73:cb:61:03:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:C0:64:5D:EA:DC:5D:7E:FD:24:07:D1:83:21:BD:A3:5C:25:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f2:6d:89:5b:aa:4b:64:56:72:2f:cd:56:6c:c8:eb:d3:93:
68:1a:de:bd:f7:a5:88:96:57:7b:7c:9b:e0:ff:f7:c3:57:a8:
c3:ce:92:be:fc:19:f0:c7:50:3a:6d:db:ae:84:4e:4a:b3:ea:
30:51:45:c4:d8:bb:f9:85:32:3d:27:8a:de:f2:de:b5:ac:32:
b7:51:81:42:8e:15:2a:2e:50:9a:55:46:ab:9f:dd:37:1a:65:
73:a8:98:d1:40:53:f8:66:19:16:3a:fb:0a:8e:17:26:18:21:
7e:0d:46:9e:64:fd:98:12:e0:46:4d:32:ce:2a:1d:31:9c:10:
24:00:c6:40:f6:12:84:4e:d1:ae:35:46:0a:78:cf:12:50:7c:
75:99:50:fd:3d:20:c6:2e:18:83:e7:56:7e:c4:a4:fc:8a:d1:
90:15:d7:9f:c1:b8:a0:92:49:34:35:42:86:68:7c:cd:9e:40:
fd:a5:42:40:6a:e4:ee:5e:e5:73:36:a3:9c:e5:1b:59:30:6b:
4d:c0:d3:01:e8:3b:ed:82:f0:eb:d6:6f:f6:7b:89:8f:b6:30:
6b:2a:7f:1d:7a:82:bd:f2:06:ff:ad:9f:77:19:fa:99:08:e7:
62:e7:27:5b:c9:b4:88:af:44:99:1e:4f:88:3d:d5:94:79:1f:
d6:e8:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:54:48 2025 by rpki-client