Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7565e354-8acf-3457-b21b-ea078f5e1792.roa
File: 7565e354-8acf-3457-b21b-ea078f5e1792.roa (raw, json)
Hash identifier: Zq4DDReMU7pQqZWTMewJZZZThfCF/uF6Aj0uDYmRHxo=
Subject key identifier: 9D:45:2D:8D:C3:8F:05:17:7C:B9:F3:19:BA:9C:99:32:89:99:13:FE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D074EE4F8ECEA7D6E970
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7565e354-8acf-3457-b21b-ea078f5e1792.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.176.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d0:74:ee:4f:8e:ce:a7:d6:e9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=51fd3297-d3ff-42c0-b7a3-4efc9f28bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:58:81:d2:ef:8b:86:70:e3:0f:01:fc:11:
0b:17:78:e1:3c:58:41:fb:db:cf:35:9d:34:83:1e:
22:25:e8:e9:fd:b2:c6:99:fc:ce:bb:01:88:84:4d:
0f:bc:10:f2:20:19:92:71:ed:68:bc:bc:e6:73:b9:
17:70:6c:a6:ae:fc:6a:a8:d5:26:2f:33:a9:c6:0c:
0e:c9:34:94:b1:35:6f:1c:9d:22:29:12:d4:ec:e6:
1e:a6:14:aa:b8:45:dc:c1:c2:0b:42:d8:8f:2b:df:
21:9b:7e:bd:cf:14:8c:be:d1:a3:bb:73:55:96:b0:
69:c9:81:0d:97:88:5c:23:62:c4:39:8b:0b:21:ce:
e2:91:42:55:55:d3:23:06:e4:5e:c6:07:0b:5c:59:
83:e9:25:45:8c:a1:63:c4:3c:95:0d:b5:91:0e:09:
f3:fc:35:de:c0:ca:11:10:9e:d3:35:5e:bc:5d:f0:
42:b0:08:57:ec:e5:86:58:e6:46:fd:92:60:cd:1a:
24:a8:7d:dc:f8:b1:95:a3:0d:86:73:44:c2:b5:4c:
12:e1:ca:ee:f4:90:23:9e:35:f4:f5:b2:5e:6c:90:
7b:b2:f9:b8:00:a5:15:a2:ee:d3:07:48:9b:b0:dd:
70:bb:04:7c:a4:5d:ff:f1:da:16:28:2b:82:a1:38:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:2D:8D:C3:8F:05:17:7C:B9:F3:19:BA:9C:99:32:89:99:13:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7565e354-8acf-3457-b21b-ea078f5e1792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.176.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:2a:5d:19:80:95:24:d1:c6:b0:2d:0c:a9:c5:69:a4:c4:00:
65:99:d7:1c:ef:fd:6e:ac:f3:e7:68:ab:83:1d:97:06:7a:4f:
2a:b3:23:99:31:aa:13:d0:c6:7e:de:03:bc:8a:0b:54:a0:66:
06:11:18:49:85:b9:70:83:fe:e8:b8:09:75:1f:71:ce:10:02:
56:bc:0c:6b:55:c2:0f:0f:6b:0a:be:26:e6:e3:12:35:f8:6c:
99:44:14:40:9a:fd:d5:f9:8f:31:81:bc:3a:d3:ce:46:09:61:
10:43:af:b8:16:85:6a:d0:ef:53:a6:a2:f9:73:36:c0:af:d6:
d9:7d:20:d8:9f:00:4d:7d:26:fe:fe:6b:ef:34:50:f6:95:d2:
5d:03:a1:09:13:67:de:0f:f4:62:86:a1:ca:3f:46:aa:bc:5e:
71:21:f8:ba:fa:6a:aa:c7:ea:fc:6d:ba:e2:3e:85:ab:55:18:
38:18:70:4a:03:c9:d9:c5:3f:6e:25:ae:b1:df:4e:63:4e:73:
d1:e1:a6:8a:9d:9a:2a:08:93:b5:16:19:41:50:72:1e:53:3c:
67:ee:c8:63:43:d0:e5:dd:af:a7:a3:64:77:8b:fa:33:84:ed:
6a:f0:e5:e1:ac:d6:fc:ab:11:dc:22:6b:0e:f4:26:61:4c:52:
85:f6:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:00 2025 by rpki-client