Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa
File: 8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa (raw, json)
Hash identifier: +fyM1oO5J7FzvfSmhV0B9NmkW+89voLmPbvXpOrTyrY=
Subject key identifier: 7D:E0:BD:FA:8A:AF:C8:C2:27:53:D6:A7:68:F0:1D:CA:5D:CE:B5:B2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E9CBEE81D5AEC87D57569A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 63.69.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ee:81:d5:ae:c8:7d:57:56:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=1d410249-8eb7-4a4d-b6a6-6fc6bb1bb337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:4e:05:82:08:fa:7d:72:d8:45:d3:04:42:
96:4b:2c:76:b7:a3:df:d9:8a:5c:a1:c1:f0:ca:23:
7f:b9:91:41:8b:c5:81:21:41:18:34:3e:38:4e:23:
d8:27:44:ee:c3:9b:2d:74:0b:9c:e4:4c:68:2c:40:
5f:5c:84:27:cb:f0:c3:a6:64:b0:69:7d:46:fc:a7:
3d:87:ac:38:d0:2d:80:dc:7c:04:e8:08:43:68:59:
5f:ed:83:43:d6:20:ce:77:bc:5f:d0:de:f8:e1:1c:
f1:c0:73:58:e4:cc:70:8f:29:6c:6a:3d:03:32:01:
ac:ad:fa:a4:86:29:45:fe:1f:71:aa:8e:29:be:86:
46:46:fb:0d:72:c8:79:a0:10:87:09:e1:7c:4a:be:
05:49:5b:63:fc:6a:ea:c9:f1:e1:ff:b7:f4:12:d5:
31:b3:ef:b3:1f:c0:5c:f2:f4:5b:cf:1f:66:7d:c7:
c7:63:81:e0:5f:4a:ff:27:e0:b2:4c:c2:5e:a4:c8:
0c:4c:3c:9a:8d:b1:ab:82:75:b1:b0:0a:54:2d:47:
57:c7:0a:33:02:4c:c1:fb:e1:a0:9a:bf:6d:3a:ea:
8f:da:ae:23:31:33:c5:00:10:ad:4b:12:47:43:5f:
ab:cf:92:73:0d:23:6a:18:32:a1:01:58:15:6f:f1:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E0:BD:FA:8A:AF:C8:C2:27:53:D6:A7:68:F0:1D:CA:5D:CE:B5:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
63.69.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:8a:ef:38:07:c4:a3:68:4a:c7:fb:b5:3c:fb:58:1a:1b:94:
38:66:f8:0c:bc:4a:e9:56:95:e0:a6:1e:32:cf:ab:cb:fe:80:
b4:e2:c9:e4:35:88:fe:6a:9d:67:6d:db:f2:67:aa:cc:88:37:
0d:d0:d2:14:e1:97:57:e8:b9:4c:c1:24:94:9f:0a:91:57:92:
0a:68:9e:fe:60:4a:29:11:c8:22:e9:e7:66:fa:83:1f:ed:1c:
95:8f:63:82:25:47:a8:39:3e:47:55:d2:9c:a2:6e:d9:6d:ab:
59:69:6d:82:83:c0:78:ed:c1:81:51:76:a5:ad:fb:6b:2d:ae:
f6:e3:26:81:13:c2:71:45:2e:75:eb:54:8c:00:77:3a:3a:cc:
e3:b4:1c:1d:81:0a:44:06:1f:22:b9:1c:f8:b1:af:91:fa:47:
ef:6a:20:37:08:b8:8b:0c:9a:62:15:89:dd:7a:3d:17:51:0d:
35:30:86:fc:a6:e4:b8:4d:10:ae:97:52:fb:cd:01:67:b1:b3:
fc:7f:68:d5:da:9b:24:2f:ab:9f:54:04:ad:8d:10:70:7d:7f:
db:c4:13:21:db:1d:cd:de:b9:a6:30:a1:70:0a:07:e8:1d:f8:
10:ce:63:30:90:50:71:bd:0f:93:a9:8f:70:b2:06:ca:38:43:
af:e7:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:13 2025 by rpki-client