Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233fc9e-2b03-3be3-8727-2e4cd952f791.roa
File: a233fc9e-2b03-3be3-8727-2e4cd952f791.roa (raw, json)
Hash identifier: jyf1hBdneT4TaLfHRU0mDAXDuCJEmtcYNcmHdfxYDCo=
Subject key identifier: 34:CD:77:F3:3C:EC:CF:99:87:2A:13:3E:DD:84:E6:F3:55:EF:0C:30
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA32DB6A4EA25E31DBE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233fc9e-2b03-3be3-8727-2e4cd952f791.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 63.40.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a3:2d:b6:a4:ea:25:e3:1d:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=29451896-340a-4d7d-a278-8d4fe839ca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:fa:e8:be:41:0c:ae:66:2e:95:57:f9:62:
e5:7a:1d:b2:4d:b4:b4:c1:4d:af:c2:a6:46:c2:a9:
cf:49:61:12:8f:a7:26:2c:a8:02:12:95:63:08:80:
0a:1e:c9:15:9b:ba:db:77:41:c5:1e:b4:73:e6:54:
12:5a:d1:de:95:59:26:68:bc:08:bd:66:ac:56:02:
9d:2b:fd:90:09:f8:21:95:14:cc:b7:72:e7:a0:61:
a0:12:83:ee:80:bf:73:7d:d7:f8:03:0f:c5:40:ba:
1e:a3:96:7d:d3:fd:7f:45:35:47:d2:0b:58:ec:15:
0e:fe:d5:0c:02:83:08:97:e7:50:e3:fb:7c:9a:9d:
02:a3:39:dd:8d:4c:10:94:9e:78:64:fa:3e:27:37:
40:fa:98:f8:f7:89:dc:bc:16:c6:48:17:c0:82:98:
6f:09:52:eb:a1:69:b5:68:ab:b6:58:d7:54:f3:62:
ea:31:a9:15:0e:42:a7:b1:13:81:7f:b3:56:10:3e:
4f:8c:9e:b4:84:2e:83:a5:0f:01:92:3b:5c:81:10:
78:de:9c:8f:c5:7f:b8:82:ec:30:57:ac:e2:a1:29:
52:5e:2a:4c:f5:41:33:15:8a:0d:ba:49:00:50:22:
ad:b7:c5:50:bc:ce:e0:b3:4f:79:d7:2b:fd:2c:82:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:77:F3:3C:EC:CF:99:87:2A:13:3E:DD:84:E6:F3:55:EF:0C:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233fc9e-2b03-3be3-8727-2e4cd952f791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
63.40.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:fd:b0:8a:6c:bb:b4:19:e0:8c:26:72:52:39:73:a0:64:7a:
05:e0:c5:ac:e7:1e:56:6e:27:99:38:ed:a7:82:b1:6d:ac:cf:
d4:03:68:ef:e4:d8:78:38:31:ac:8f:f3:af:be:98:91:cb:10:
ae:c6:68:68:28:81:10:f9:35:d5:f5:e1:b9:46:39:07:c4:ad:
b2:9f:2d:2e:f0:2f:cd:a9:94:5b:b1:08:33:a7:c1:09:e4:ff:
47:4c:34:ca:58:ff:08:3c:3c:b0:f1:e6:e5:37:f2:2c:95:a2:
a4:6e:36:bd:dc:68:5f:82:e7:12:3c:23:1a:b4:94:0d:27:a6:
59:60:15:94:f8:f5:2e:cb:95:bb:94:27:2a:f0:c9:fd:01:7c:
81:c2:72:6b:f8:a0:45:3a:d5:e4:a6:a1:fd:56:d3:3f:4e:67:
e2:68:d0:f5:06:96:e7:02:46:63:1c:28:50:a9:5a:44:a5:85:
64:0f:c8:a6:22:81:8d:88:e4:56:2d:a6:33:36:ad:9f:ba:1a:
8a:c5:d9:cd:fc:87:bb:dd:e5:8b:47:4f:c1:92:2b:e8:40:2b:
20:b7:a3:86:1c:d0:51:81:ed:bb:e9:f4:91:d2:70:09:5f:aa:
d6:a0:2c:1a:e2:0e:c8:96:25:e0:b6:5e:cf:5c:9e:6a:3e:fe:
41:4f:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:18:21 2025 by rpki-client