Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9231dfaa-050c-3281-aa54-bafc77872ff5.roa
File: 9231dfaa-050c-3281-aa54-bafc77872ff5.roa (raw, json)
Hash identifier: ZY7chTnWw3v2QqWf+7Vl4YAnRMMAsEb6tXQfkIhgxrY=
Subject key identifier: FA:E5:D0:24:CA:D3:5C:09:9E:EB:0D:E8:B4:3D:31:19:CD:04:77:13
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2C25E8CEF16CE2F25D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9231dfaa-050c-3281-aa54-bafc77872ff5.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.235.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2c:25:e8:ce:f1:6c:e2:f2:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=b9088e9c-7184-420a-8bcb-46d7c30ef922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:44:09:63:b3:2c:14:46:99:7b:42:2a:59:
63:f5:18:74:44:83:4d:84:03:ee:af:5a:7b:00:84:
28:6e:78:bd:cf:07:ab:fe:64:3b:2b:bf:6b:70:c3:
77:4c:c6:83:a9:33:d0:2a:bc:88:8c:be:79:95:a6:
de:53:65:0d:92:92:77:1e:c3:91:31:ef:7c:67:6e:
3b:15:fe:32:75:66:3d:94:a1:13:93:e8:e5:52:b7:
15:09:43:fc:1c:cb:7a:20:07:08:74:b5:91:43:ea:
74:5c:a9:e4:fb:a2:b5:e2:98:df:1f:a2:dc:9e:42:
f4:f0:6d:2d:a2:02:e4:a2:ae:b3:fd:ba:63:7a:5b:
fe:19:2f:cd:77:48:a0:1f:1b:5e:45:f1:41:3f:b9:
44:25:df:75:3c:e7:38:92:5a:b1:ec:4d:b3:82:8b:
4a:ea:00:4e:6f:00:53:fd:22:a7:ec:80:98:31:fd:
28:51:6e:fb:51:11:80:2e:1b:d4:88:ec:4f:bb:7a:
4c:da:c1:d4:e1:62:b3:71:72:19:8f:48:fd:c7:69:
bc:25:47:79:d9:1c:68:1e:f1:84:3e:9a:6f:0e:a8:
09:aa:8c:e7:62:9c:cd:03:95:d0:70:9d:72:ba:52:
10:cc:c0:80:19:8a:eb:ae:66:3a:a9:87:89:73:44:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:D0:24:CA:D3:5C:09:9E:EB:0D:E8:B4:3D:31:19:CD:04:77:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9231dfaa-050c-3281-aa54-bafc77872ff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.235.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:59:11:b1:da:2d:cb:b6:18:8c:a4:a2:8a:2b:a9:00:c4:5d:
98:38:6a:53:c1:b3:e8:88:71:59:82:d6:c4:96:b2:26:3c:4d:
f0:bc:b9:40:f4:ba:54:3c:fa:a7:c9:3a:69:78:08:2c:15:1f:
af:a9:5b:54:d1:91:ef:5f:a1:ba:ee:8d:98:25:e3:31:07:b5:
0b:c2:a4:73:43:72:af:ec:2d:1e:d5:72:24:80:23:f1:25:8b:
c3:50:86:74:a3:25:96:ef:ee:fb:b1:a9:b3:13:97:90:e4:58:
4a:53:c7:9a:ee:e0:cb:89:5e:30:4e:63:15:ca:15:fd:01:f7:
a5:9a:c3:dc:c4:e8:c2:71:50:da:ba:17:c8:a3:f7:fb:ef:c8:
f2:ca:56:89:80:14:bb:e2:c3:be:eb:0d:4e:b3:a3:b7:b0:5b:
b3:18:00:2f:18:b9:78:ea:2a:26:98:5a:cb:fb:a9:76:83:d2:
b9:e7:3a:d8:41:26:58:42:28:b6:e7:71:eb:96:6a:2f:47:b7:
b3:6b:bf:cf:61:39:38:5c:a3:11:72:cb:85:88:8f:5a:5f:b6:
d6:ee:45:db:7b:38:4f:28:8b:25:ae:7e:53:8a:31:1f:f4:23:
62:68:8a:b8:79:be:06:09:7e:fd:8f:91:a7:cc:f2:18:2a:36:
fb:7b:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:01 2025 by rpki-client