Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
File: 84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa (raw, json)
Hash identifier: QiieRAlN60iO5JQYD17U9EvWEYs2IPWIe+Dj/T1ygs4=
Subject key identifier: C2:D8:E8:F3:95:40:5E:7C:70:CB:0C:6D:E8:F4:A3:AF:4B:69:40:0A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584909E698453AFB889C7F749B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 97.207.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:98:45:3a:fb:88:9c:7f:74:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=6fa522e1-2768-4973-b5df-ab8a11f2d19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:8a:9e:ae:af:9e:f7:18:ec:d2:12:d4:ad:
df:5e:ef:00:76:de:bc:78:34:60:36:70:0b:a0:1b:
29:41:79:95:dc:f2:e2:9c:02:00:b3:19:98:33:89:
35:26:fc:c6:c4:ce:c7:85:1f:e6:f6:53:a3:a9:6e:
9b:aa:05:02:f9:6e:f1:eb:70:a3:46:00:d8:08:b3:
ac:27:b0:5c:e7:fc:b2:aa:20:1c:5d:11:93:d2:da:
c9:f2:09:50:05:69:9a:5d:b6:0d:8f:a0:8b:1e:44:
13:af:25:28:4c:4c:e0:40:15:74:2d:a5:32:22:49:
52:47:45:c0:86:9a:0c:4d:32:6b:68:44:5c:b9:3b:
2e:7f:b9:2f:ac:25:59:ce:78:34:78:6a:67:ec:75:
c7:7a:14:77:0b:0a:b8:a7:b7:59:b2:ab:78:87:6f:
fb:62:59:04:d0:38:61:08:88:b2:79:53:9c:58:dd:
1d:fe:75:9f:0d:7b:37:52:1f:b8:46:91:e7:60:11:
d1:bf:fb:9a:02:26:2e:bb:04:ad:41:14:f7:38:94:
4c:59:c8:1c:54:8e:e7:c6:66:b6:3a:94:0f:89:07:
32:a8:05:ad:d0:ac:db:1f:6b:1e:fb:ba:b5:aa:a4:
85:0f:5a:0f:48:53:f9:ab:c6:07:c6:9a:71:3f:24:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:E8:F3:95:40:5E:7C:70:CB:0C:6D:E8:F4:A3:AF:4B:69:40:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.207.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9b:6a:35:41:1d:32:39:f8:7d:db:d0:03:fe:10:b7:b1:3e:
92:cb:ff:7a:a3:ae:e1:94:12:db:05:64:6e:97:71:d3:cc:63:
ce:2f:1f:49:4b:fc:16:c8:51:f8:52:4c:df:7c:9d:34:fc:54:
63:ef:2c:1d:ca:27:23:64:ae:7c:01:ba:0b:7d:48:2b:3b:77:
0a:c5:42:de:b5:38:27:4d:31:e0:22:77:8c:a7:b0:01:98:cb:
e8:f6:3f:f9:82:3c:b9:8d:09:76:aa:d7:69:aa:24:ed:b9:6e:
3d:4a:62:57:90:fc:12:c7:87:ee:cb:a7:64:e7:63:96:64:a6:
6a:49:d7:b6:23:22:3c:3c:67:6c:9d:c8:dd:d3:84:60:df:9d:
0f:d9:fa:e7:8a:ff:fe:e5:3b:30:09:8d:e7:b9:3c:91:e0:99:
1f:72:0d:fb:ba:4f:a5:90:60:9f:ca:a9:33:7f:58:50:ef:11:
2a:ba:92:ce:eb:74:ab:f5:97:2f:80:a7:76:57:fc:cd:5d:bb:
42:7b:f8:8b:2e:37:fa:47:07:cf:0d:1f:66:f2:1d:8f:f9:74:
b1:3e:2d:c4:b5:b2:19:1c:68:0e:1e:ee:9a:e5:b5:b0:36:cd:
43:c9:f5:05:6b:16:80:0e:c3:71:4c:ad:9b:1f:c1:b0:c8:52:
e8:bb:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:12 2025 by rpki-client