Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa
File: 9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa (raw, json)
Hash identifier: czp/4g8Bf85chUL/Oy6vRvIkT+d5mU1Pt7YZ1sCpV6w=
Subject key identifier: 54:FD:07:11:02:17:AF:EA:EF:A9:C5:A3:91:4C:9E:C2:88:09:5E:DA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F970C7183A154E1CF480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.69.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f9:70:c7:18:3a:15:4e:1c:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=d9d82dd9-13fc-4f56-9636-67cf6883616e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:7d:5a:5d:3d:08:6a:44:c6:bc:25:9b:48:
ac:32:52:fc:30:cb:3f:42:a0:35:98:21:33:f8:6d:
1c:60:f9:9b:b1:2f:65:b5:fe:6e:0d:de:26:b6:83:
5e:04:87:59:16:9a:b9:80:36:26:3f:7d:ba:68:a7:
98:b1:41:cb:af:e1:b2:9b:ea:26:8d:2d:8d:b6:22:
8a:ca:db:e0:6a:ce:45:be:3e:83:5d:7f:b4:9d:71:
74:01:a3:60:e4:44:53:3b:31:23:07:42:cc:15:1a:
00:4c:f9:6b:fd:7d:f4:9d:e9:b5:35:ac:67:36:be:
a4:9b:89:7b:ad:af:0c:b7:68:96:eb:01:0c:8f:c6:
9e:a6:4a:bd:2d:c5:0f:ea:cc:a9:10:b5:09:6e:00:
cb:0f:5c:4d:7c:71:a1:88:cd:bd:d3:e2:4a:12:0e:
9c:a2:e1:ea:22:16:87:3f:ea:d1:ad:9a:ba:3a:be:
89:45:a6:c9:20:7f:e0:52:0b:30:a9:fb:be:74:81:
d0:f9:75:ea:3a:84:19:f2:a6:9b:39:c0:cc:1d:8a:
7b:5f:44:02:e4:5e:9c:b6:12:5a:d1:49:f8:ed:6f:
da:e1:e2:58:a5:c3:e5:19:73:3f:8e:7c:a9:76:29:
97:14:49:fd:38:a5:40:79:d1:20:de:55:d5:f8:0a:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:07:11:02:17:AF:EA:EF:A9:C5:A3:91:4C:9E:C2:88:09:5E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e987752-7dfa-370d-8d07-2c04e2e6d2f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.69.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:a6:6a:0b:11:81:64:75:62:9d:65:93:34:f2:55:76:2b:e2:
79:b0:5b:43:de:cb:fe:a4:7d:26:b8:be:ec:8b:95:5c:50:f0:
31:97:d7:e9:69:c2:4b:9e:42:ba:57:64:af:d4:64:80:c0:f5:
49:e2:a1:48:80:0a:a6:ab:82:14:41:9c:58:dd:eb:ee:a8:68:
b3:ae:e6:05:7c:0d:4b:cc:55:dc:7a:ab:bd:ba:57:eb:e7:9a:
4b:5e:be:31:88:68:2a:f0:a8:46:47:50:1c:c8:50:db:dd:f1:
c9:8c:ab:7b:a6:c2:89:53:c2:ba:18:31:d9:36:73:7c:1e:4a:
f2:bc:1e:4a:65:8c:49:13:c8:38:33:c7:37:b8:71:2e:8d:d9:
f3:8c:bc:4c:cb:94:58:f5:a2:06:d4:7d:c5:dc:3f:82:42:00:
d1:03:24:9c:b6:e7:aa:ea:75:d2:08:0b:cc:ef:0e:8f:57:fe:
44:09:fa:a2:0b:cb:79:73:1e:2c:45:79:bb:20:38:bf:95:5b:
76:01:74:09:71:38:94:9a:dd:f9:ce:f5:f9:4c:d3:4a:84:a5:
4f:76:37:3d:77:1b:c6:60:1c:66:bd:6c:d3:e0:b8:ea:52:f4:
f8:2e:61:41:0a:a9:b4:00:a8:bd:7f:4e:17:10:65:80:48:8e:
d0:25:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:17 2025 by rpki-client