Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa
File: 70bef50b-8345-3ec3-b899-c4354bdff16b.roa (raw, json)
Hash identifier: YgMpgj38iI2pkLMios166508SJ/d8cJkvQxbqNX1Nog=
Subject key identifier: 79:41:3D:EC:8F:F6:C7:D3:12:D4:9C:F1:88:6A:03:FE:08:34:82:13
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D140CEA2D21F3F0E9200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 100.2.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d1:40:ce:a2:d2:1f:3f:0e:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ae5949c3-c76e-4030-b197-f473f53b4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:14:69:5e:e1:44:f9:9e:f4:97:39:c3:53:
4d:a9:b5:c7:18:84:45:df:1b:50:b6:3f:b6:d0:9d:
bb:ea:15:75:31:5f:45:49:bb:de:78:61:97:cc:75:
a7:3f:5c:48:fa:e0:e7:bf:9f:48:b7:ab:72:58:2e:
a1:dd:5e:18:75:f5:ad:c9:6e:c8:05:0a:71:bc:eb:
56:b9:52:43:f1:20:29:2f:63:a1:ba:1c:a7:5e:63:
6e:50:82:ea:e0:f5:16:c6:55:3b:cb:fe:6f:a8:48:
4f:af:01:67:da:3a:7d:65:17:5e:ff:31:36:a3:4c:
db:de:71:da:6e:00:be:82:57:cd:41:a6:76:32:02:
bf:b1:d0:9b:e4:45:09:1d:68:89:02:ff:ef:27:4b:
41:62:70:cb:8d:62:86:13:0e:62:f6:bb:79:36:77:
67:78:02:f8:52:59:44:a7:66:cb:57:f7:1f:ae:22:
a6:5f:f7:bc:2a:7e:22:a0:1a:51:01:86:a0:70:7e:
5f:7e:3e:7e:6e:fb:91:48:0d:f4:56:fa:84:c2:9f:
be:27:b5:a1:8a:c6:4b:ce:d9:7f:68:17:72:72:e9:
d1:29:57:5b:c9:31:09:fa:df:5f:85:ca:7f:b3:10:
a0:c7:1e:29:c8:23:4f:94:97:d9:20:e5:6f:bd:71:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:3D:EC:8F:F6:C7:D3:12:D4:9C:F1:88:6A:03:FE:08:34:82:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bef50b-8345-3ec3-b899-c4354bdff16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:08:64:f5:52:a5:32:d1:bd:84:ff:a7:59:fd:5c:65:79:db:
2b:7a:9f:d1:de:97:f3:26:ab:1e:d2:a7:54:47:8d:3f:6d:dc:
a4:3f:d5:b5:3f:cb:8a:c0:1f:0e:a5:64:86:9a:ec:57:a8:1b:
ad:ed:b2:c4:52:81:2f:e2:ef:a2:b0:b0:4c:cb:d4:f7:30:9d:
ae:76:a5:ed:c6:c0:78:d1:8a:14:8f:c5:2c:af:71:8c:76:94:
1a:b7:2e:91:23:9b:1c:65:df:80:9f:3d:5b:ee:2c:5f:97:3d:
f1:cd:65:34:13:b3:aa:9b:87:fd:af:e8:60:8d:6c:fe:5a:02:
a0:40:bc:e2:8f:65:d2:ff:10:bf:69:5d:b8:e1:b0:5b:2e:1d:
1e:b3:88:07:4a:a8:2a:6a:de:57:f0:76:91:38:ba:a6:94:39:
fd:6b:ae:23:3b:95:7f:75:04:f9:bd:66:08:d0:e1:88:0b:aa:
59:9a:90:f0:b7:f3:8e:d2:75:38:50:86:17:00:5f:34:a2:6e:
48:97:7f:f1:be:08:6e:43:d1:88:cd:8e:b8:d1:53:8d:69:1b:
d6:c4:02:db:61:01:7a:b4:88:82:74:3c:2b:78:c4:8f:07:bb:
7f:d7:c8:db:a2:33:2a:b2:62:63:0d:2d:9d:35:b7:80:69:a6:
f5:96:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:25 2025 by rpki-client