Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a363497-0500-368f-84fb-47170b297db3.roa
File: 7a363497-0500-368f-84fb-47170b297db3.roa (raw, json)
Hash identifier: BG9GfY3VvHS9HC3HBEX7zlQLQZCyViI6Yu/1iVG5MXQ=
Subject key identifier: AD:38:0F:E5:ED:DF:36:F8:F1:9E:C1:EF:82:66:B6:9B:75:C6:6E:AF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C34A5EBC958A6940C4A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a363497-0500-368f-84fb-47170b297db3.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.176.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:34:a5:eb:c9:58:a6:94:0c:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ecee6c5d-e287-409c-a46b-3487b7341fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:bf:98:e8:44:4d:57:08:51:22:65:54:dd:
ad:af:53:d3:9b:c1:43:a4:09:30:1b:ec:b4:e8:32:
f0:bb:01:28:22:13:83:43:16:4a:ee:c6:68:e7:2c:
81:ec:ad:9d:d1:01:6f:ab:7a:85:99:88:1e:d7:17:
ed:e7:05:ef:33:f1:81:60:05:82:df:6a:36:4d:1b:
b8:1a:2f:67:52:b8:d5:3d:58:0f:53:a0:ee:95:81:
62:7a:75:a7:71:67:25:0d:fc:d7:b1:11:2f:d1:a1:
75:e0:e0:d9:09:c0:2e:db:7f:e7:18:5b:24:2e:85:
6c:2f:47:8b:4a:9b:65:2f:55:34:c1:4d:3d:ff:ca:
f7:d9:62:c9:3f:09:00:cf:64:c9:cd:ec:7d:9a:c5:
a5:24:fb:41:2f:50:46:cc:84:15:89:91:f3:12:86:
f6:a3:42:42:b8:51:87:94:d6:b6:ec:3e:c1:d6:18:
ee:a9:03:45:49:5f:3b:5b:ae:be:bd:31:95:e8:f0:
e3:4c:dc:de:37:b1:51:91:cf:af:82:0f:a6:c7:df:
83:e3:50:1e:bc:02:1c:8a:8c:24:0a:55:48:13:41:
25:05:02:87:6b:78:bc:f5:34:01:ad:80:bc:a4:d0:
e5:f0:30:ec:d2:04:9a:d3:d9:6d:b9:b4:9b:31:78:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:0F:E5:ED:DF:36:F8:F1:9E:C1:EF:82:66:B6:9B:75:C6:6E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a363497-0500-368f-84fb-47170b297db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.176.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1b:37:7c:4c:05:6a:f2:b0:49:b0:bf:03:db:5d:30:95:57:
8f:5b:9a:92:59:2a:60:66:78:cd:b9:cc:03:2e:cc:11:6b:6f:
5c:d5:9a:3d:ed:b7:84:a6:2a:d9:7a:32:f3:47:e5:bb:f1:bd:
15:16:4f:41:85:cd:c6:84:d6:89:e1:73:1f:68:d4:0f:01:5e:
1e:9a:c7:02:f3:ab:e7:b4:a3:78:ed:fc:0f:74:06:43:19:a8:
af:59:63:b7:56:d1:2d:76:81:1c:5e:e8:f7:c1:e7:a3:eb:4a:
d2:cc:e5:02:f8:e2:c4:79:c2:a5:e8:60:cf:1a:2b:8c:ab:07:
5e:02:78:16:de:f9:05:6b:7a:1f:86:00:a3:03:bd:90:b8:96:
f6:d2:1d:ab:39:a0:dc:45:ff:22:c1:28:4b:99:fd:1b:1c:c9:
d9:36:b3:12:58:4c:1b:fe:88:b2:f4:60:ff:a6:54:ed:55:6e:
89:7d:33:00:ee:3e:a5:d5:41:f8:4e:5b:55:2f:c9:8c:9c:d3:
a2:25:d7:1c:ac:75:1e:13:a4:d5:ef:66:bd:e8:0f:d4:86:a1:
55:64:a9:8e:cc:b6:30:d7:41:66:71:f5:4d:ad:0e:34:9f:a0:
26:b3:2f:db:74:1c:0f:9f:dd:16:e6:61:38:32:2e:b5:2c:a6:
9d:3c:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:06 2025 by rpki-client