Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/890d1053-bd1b-3906-b5f6-e129f540de59.roa
File: 890d1053-bd1b-3906-b5f6-e129f540de59.roa (raw, json)
Hash identifier: d11MfWDnrgXphJtJGTPgmNIh8H18J7W9GJjxYj2Lck8=
Subject key identifier: A8:6B:0C:14:FC:42:8A:E2:EB:B8:7A:42:B0:49:A4:11:70:AB:CA:C6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2B10E3733B46E92905C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/890d1053-bd1b-3906-b5f6-e129f540de59.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.254.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:10:e3:73:3b:46:e9:29:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=7fc3fc19-0057-4c12-9563-2e4d2c0d4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:82:9a:3d:f8:1e:cf:66:2d:b0:ca:63:d2:
9f:df:49:1c:29:66:73:11:66:86:3f:bc:41:3d:1e:
9f:f6:3d:39:57:eb:3b:77:d6:71:54:ff:96:4b:4c:
fb:b3:ba:4d:02:d0:56:65:f1:af:96:02:51:13:2f:
f3:37:d7:ed:c0:21:67:e2:98:bc:1f:17:41:a9:66:
1c:8d:7d:51:84:a9:cd:b2:f0:bf:d1:a8:85:0c:4a:
9f:30:a6:ce:a3:10:bb:00:ad:d6:13:f1:88:85:49:
02:47:87:45:63:2a:64:bf:e1:a3:b5:96:4d:3d:9e:
81:1b:c4:8a:9d:31:4a:2d:07:5a:72:60:80:13:51:
0c:13:ea:15:57:b8:3f:52:0f:7d:ba:b0:40:59:d3:
a3:b8:31:58:76:c4:29:1d:1a:5f:9c:7a:3b:1f:90:
3a:17:dd:23:9c:5a:09:0b:97:de:17:38:2c:7b:7f:
07:21:ec:86:b8:d6:ce:83:80:d7:42:0e:40:01:01:
f0:0b:b2:2f:9c:89:ec:b8:16:59:a0:2f:f3:31:f1:
5b:c6:5b:5d:19:c5:bc:a6:ac:d6:91:af:d6:40:41:
ca:6b:db:33:00:c7:cc:d2:af:0d:67:4f:c7:a5:b1:
41:0f:fd:f4:fd:be:29:4b:7f:3b:3e:85:89:e1:13:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:0C:14:FC:42:8A:E2:EB:B8:7A:42:B0:49:A4:11:70:AB:CA:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/890d1053-bd1b-3906-b5f6-e129f540de59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.254.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:cb:b5:6b:1d:d3:90:f1:cf:95:16:d5:9b:72:e7:93:c6:8f:
42:f0:65:0f:7b:d2:0d:62:ee:e1:3d:69:00:7e:b0:21:34:66:
4c:a4:55:45:03:82:3c:ba:55:45:7d:5b:c3:9c:2f:36:97:3b:
dd:6c:2b:93:d8:07:6f:3a:19:28:6c:b1:ab:3e:1f:68:d1:14:
66:19:5d:4e:7c:6c:fc:6a:73:8b:a7:0f:8c:57:78:6b:27:4e:
7e:95:a3:36:60:eb:e6:98:15:db:7f:95:f1:a4:b4:5c:e5:27:
e0:34:35:28:fa:c0:e7:d2:8c:d6:e3:b5:fd:61:93:0c:22:be:
81:2a:df:23:96:1d:30:f4:79:a6:c1:e7:e0:d6:81:3a:a7:ab:
b1:f6:d9:65:7b:ce:7c:22:75:75:50:58:94:76:3b:1c:cc:76:
bd:87:a9:e4:87:09:e8:8b:62:72:ee:cb:9f:50:45:03:13:3a:
e5:fc:fb:66:16:71:2f:d3:57:4d:0a:ed:d7:98:c0:01:c3:f4:
b4:12:d5:3e:3c:98:8d:a5:96:79:28:d5:38:72:a8:49:f7:6e:
74:24:be:bf:b5:74:35:fe:ca:c1:20:79:06:1d:81:41:4b:1a:
8e:0b:34:f4:36:2b:b0:d5:e2:8d:e0:b0:e1:bd:40:05:c1:dc:
d4:9f:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:19 2025 by rpki-client