Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa
File: 77fea8a5-65d2-3763-8908-9c8452de4d41.roa (raw, json)
Hash identifier: fZ5UdmjdMDWlXXfn8sGY+hqMJqEo0zQSz6SmCjFBqeo=
Subject key identifier: AD:13:FE:42:D7:40:F0:A6:97:E5:AA:28:EB:65:60:8F:9D:24:6B:33
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F1A21206E59986838100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 70.20.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f1:a2:12:06:e5:99:86:83:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=0bcb9e2e-ad7a-49ca-99da-63131f3a5bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:2d:10:dd:8f:60:5c:64:db:ce:b7:16:8e:
f5:a1:b4:21:6c:22:e9:45:c1:63:28:f8:65:19:5a:
95:ab:cb:37:c6:af:34:d6:89:82:2a:fa:cf:3d:11:
a9:70:e2:e7:43:76:60:ce:ea:15:3a:ac:8f:f7:f4:
6c:14:22:47:55:6b:af:ba:4b:85:9b:66:a8:99:3b:
39:ec:5b:a4:58:e5:10:bc:34:46:91:07:f4:69:64:
93:88:a4:f5:fd:e0:0d:f2:28:a8:64:ca:92:7b:7d:
c6:4e:0c:1e:cc:ac:cc:57:a9:44:4a:c0:c8:69:8e:
6a:04:ae:de:8e:b4:82:a1:f0:91:73:8e:9c:c3:0d:
23:46:29:9d:40:1e:70:dc:8f:dc:e4:75:9d:91:a0:
3b:ce:15:6f:bf:3a:c7:6b:59:9c:b9:11:ad:9d:3c:
f3:02:f7:a3:eb:9e:10:cb:1c:f5:ea:d6:56:9d:9b:
8d:15:61:af:93:50:8f:51:df:44:98:26:82:50:77:
74:23:3c:0d:0b:16:10:78:4a:5e:e4:a1:08:16:2c:
a3:2c:18:73:16:00:ff:c5:83:23:1d:98:bf:f1:18:
c1:ce:58:ec:e2:fe:2e:b1:ec:2a:c0:23:92:67:fe:
ec:8e:5c:db:68:64:42:f4:c1:06:67:28:a4:c8:8a:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:FE:42:D7:40:F0:A6:97:E5:AA:28:EB:65:60:8F:9D:24:6B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.20.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:dd:d5:28:a9:f2:c7:9c:ea:5d:79:26:21:18:b6:92:21:90:
90:30:60:5e:c6:ae:23:0e:7a:35:2e:3c:3b:99:77:fe:b5:46:
6e:fa:d6:32:42:22:b1:22:df:70:11:76:cb:4a:41:d6:42:0d:
35:05:e4:4c:cf:e6:dc:95:b9:b6:20:b3:15:17:cd:ed:04:19:
dd:10:0a:53:e4:76:0a:19:c5:4c:c5:12:ee:33:8c:d1:18:1d:
34:e4:12:82:8c:1a:07:2f:48:61:14:38:f5:0c:c2:12:17:f3:
22:52:fb:33:91:ad:0c:09:e3:39:b3:4e:2d:f2:74:2b:4f:d3:
64:9a:d4:cc:34:e0:87:e8:7e:54:d2:d5:de:ce:de:e8:ad:29:
d5:19:87:0c:7a:c5:e3:3f:ca:44:b9:ae:aa:0c:01:a9:c1:65:
58:03:2c:8d:ee:b9:ba:1f:bc:ad:55:9f:d2:a5:58:fc:64:ea:
49:00:a0:a6:11:a7:1c:4b:c2:4c:e8:77:69:93:f1:71:95:e8:
91:63:b9:81:17:6b:1a:db:bc:c2:fc:dc:9c:e3:b8:28:a3:b2:
97:a8:e3:01:ad:14:93:cc:fe:d9:9c:52:a4:43:33:61:e2:b9:
32:da:12:24:ed:ef:a9:19:84:74:f3:95:68:86:2e:b6:7d:3c:
57:f8:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:09 2025 by rpki-client