Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
File: 96d8da12-f8f5-3746-a362-c6834b9b3d69.roa (raw, json)
Hash identifier: tFQdd/Qjgu3CU9a7e2oVhucNMOO4r4RIEjEoWkVDh/o=
Subject key identifier: AE:69:D3:A1:AE:6A:4C:F1:CB:6E:2A:32:C3:EA:43:A2:43:60:72:CF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2ADB3E58E1BE3519A500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.168.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2a:db:3e:58:e1:be:35:19:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=f52cf0a9-b314-4f6a-8605-5027e2f70d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:53:e8:37:01:64:6e:29:df:8b:a5:d6:d6:
f7:71:7d:83:46:22:76:30:09:a0:9b:a6:c2:93:37:
dc:a6:3b:78:4d:47:c1:6d:f2:f1:a9:b6:9a:ed:c6:
a6:41:91:9d:97:c5:cb:09:56:59:90:ac:60:65:55:
73:55:86:53:34:54:03:0c:4d:86:02:4d:34:de:13:
6c:7d:d7:94:da:37:54:1e:7c:02:c4:db:11:72:e4:
2f:c5:9c:3b:e1:2b:e0:b4:50:ec:a6:15:2d:24:13:
1c:61:89:df:1c:9c:0e:c2:89:94:bb:15:4a:07:ec:
b0:1a:93:d0:6e:a6:b1:bb:19:69:16:a2:67:30:49:
38:c5:79:33:a0:2e:83:bc:b7:d5:f2:92:22:ce:47:
34:16:ee:43:c3:19:93:5b:5c:12:b9:97:1a:86:87:
6d:c9:63:c6:84:97:e6:46:c9:32:1f:80:61:d8:48:
11:d6:08:0d:50:1e:62:28:ce:93:7f:08:89:f7:a7:
7d:3c:d5:48:9b:85:8f:1a:63:94:ed:6a:f7:d5:cd:
9c:9b:d3:df:64:14:a7:e5:b6:e7:ec:8a:bb:25:3d:
63:1b:23:2c:ab:bd:1c:af:5c:53:b6:42:50:91:9c:
07:90:1c:42:18:6f:2e:56:81:c3:37:10:4b:a3:fe:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:D3:A1:AE:6A:4C:F1:CB:6E:2A:32:C3:EA:43:A2:43:60:72:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.168.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:24:de:cd:f5:c9:68:f3:f7:0d:b4:e7:c2:a6:6f:ea:07:64:
aa:24:da:f8:48:2f:a8:b2:39:a9:2a:3a:1d:03:e0:28:bb:01:
65:9a:97:1e:36:e0:d0:cb:96:96:0d:f5:41:2c:ab:87:68:91:
b6:f3:9b:26:a1:0b:e0:1f:11:11:8e:35:34:4f:9e:4e:a1:6f:
be:b1:d3:29:54:ef:29:0f:b4:d4:e5:6e:26:fc:82:fc:19:28:
11:45:29:72:8f:6c:a5:89:27:a6:36:87:14:7d:fa:61:df:e8:
6e:3d:60:82:60:93:01:81:42:e8:65:f9:17:18:cf:fe:d4:d1:
ba:fc:38:bf:7e:16:73:c5:77:90:0b:86:c6:72:be:9d:c1:3b:
08:e9:ff:b7:a7:e7:fd:b7:bf:5d:22:6e:be:b1:15:de:5f:b5:
1c:20:29:bf:3b:a2:bb:db:1e:6d:3a:03:38:b9:22:55:4b:ab:
82:50:10:03:c2:2c:df:65:dc:4f:b9:c2:aa:ce:a0:0f:ab:b9:
1a:d0:a7:c2:02:21:5c:bb:29:6f:5a:d4:9f:3c:c0:71:1f:cb:
13:49:d2:cc:e7:b2:84:b1:ee:d0:27:9c:78:36:1e:7d:de:a4:
49:6e:4d:b9:05:a6:10:f8:df:26:33:4c:b0:d4:a1:4f:c2:8c:
68:e4:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:26 2025 by rpki-client