Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa
File: 8b5d6daf-2afe-3baf-bc66-46b648705958.roa (raw, json)
Hash identifier: zfe7FzXvPq+q7WUERqOh+r6kTf4t8xCanqyjz+VVwek=
Subject key identifier: BE:CE:F0:CF:AA:A8:DA:29:BE:50:32:50:39:15:F3:FB:E0:F7:E6:FD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C6380B4A5F8E5B8800615D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa
Signing time: Tue 04 Feb 2025 20:09:52 +0000
ROA not before: Tue 04 Feb 2025 20:09:52 +0000
ROA not after: Mon 05 May 2025 19:09:52 +0000
asID: 6167
IP address blocks: 97.213.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:38:0b:4a:5f:8e:5b:88:00:61:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 4 20:09:52 2025 GMT
Not After : May 5 19:09:52 2025 GMT
Subject: CN=a4e25f70-74ca-4a0e-bb9b-6f4440b947a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:22:58:72:cf:9a:d8:f1:da:96:36:b2:b6:
99:ab:db:c9:bc:e9:a1:78:80:29:f2:2f:5c:f9:31:
68:6c:f2:a3:d5:dd:97:e2:28:72:2e:b2:53:25:c8:
03:18:82:f0:cd:96:ed:5c:d7:fe:cb:b4:3e:de:a5:
94:d6:69:49:a6:8c:5d:9d:ed:5f:84:92:9d:e3:e6:
6e:0d:56:11:a1:06:ae:ed:c7:ba:3c:81:16:3b:25:
a3:83:1a:5f:7f:fa:02:a7:f0:47:a7:eb:37:18:97:
ae:33:3a:74:ac:82:d7:66:cd:aa:1d:0f:b6:8e:0b:
94:67:b4:89:67:9c:c4:6d:99:a0:16:5e:62:8e:d5:
66:13:cc:26:94:9d:a6:d1:c7:93:db:e5:2c:68:39:
71:2a:1e:e9:77:88:2c:ee:50:63:05:8a:c7:ae:d4:
18:5d:4e:9a:39:c7:c6:4a:bb:ee:eb:dd:17:ee:34:
00:68:00:17:ba:90:8e:53:2e:e9:cf:9b:2c:8c:c4:
08:27:36:53:2f:ea:a4:b9:0a:25:df:63:14:39:59:
cd:68:a9:c2:ab:d8:74:df:5a:2f:05:3e:27:58:1d:
bd:77:41:0b:61:e8:88:8f:6e:72:1c:a9:58:c6:9d:
d6:66:a9:ee:64:74:27:63:5d:e5:73:3a:94:41:4e:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:F0:CF:AA:A8:DA:29:BE:50:32:50:39:15:F3:FB:E0:F7:E6:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.213.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c7:1b:81:bf:ff:bf:b2:fc:c9:7e:01:e9:cf:f6:1f:a3:82:
46:52:26:46:f2:35:80:7c:00:17:e8:79:5f:c7:7e:26:97:07:
e3:ca:87:81:8c:51:58:d8:51:9a:9d:fb:d8:41:63:1b:de:46:
e8:69:58:fb:8a:d7:fb:d5:84:22:a4:9f:88:92:9c:08:1b:73:
4d:d1:af:7c:5a:a3:6b:e8:15:f6:88:6a:e5:8f:3b:06:bd:14:
36:7a:7f:fd:f2:59:35:54:63:b9:4b:ed:62:03:35:c6:5a:cc:
44:5e:04:09:fb:b8:82:c3:69:7e:dd:50:f3:f6:ea:97:28:2f:
c7:d5:59:fe:39:3f:03:6a:41:1b:80:9a:2b:4b:4e:89:f5:4e:
c7:e3:c0:65:a9:c3:c4:e6:4d:89:25:3b:8c:32:1b:a5:99:bd:
65:63:0b:c3:00:f6:1b:b1:43:0e:83:4c:aa:76:7a:01:bf:cf:
bb:78:75:98:7d:75:88:97:a4:fa:76:7e:99:74:ec:46:96:f0:
49:55:a2:81:49:92:f5:16:e6:28:59:15:6d:93:70:e5:ed:85:
ae:89:5f:e4:0e:6f:d6:ec:5c:5e:c6:24:72:a2:00:f4:97:27:
cf:ad:28:cd:63:0f:d5:15:b2:75:94:23:28:61:b3:4c:bf:f3:
cc:35:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:48 2025 by rpki-client