Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
File: a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json)
Hash identifier: C79AGytZfnrtQkkUyA9FZstlX0iIZJpdni/OiVV2idM=
Subject key identifier: 64:3E:88:B9:9E:ED:C8:E2:D2:E5:40:5F:EC:95:4B:3C:84:3B:94:3F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D092C5D00DA6BD9B2B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.162.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d0:92:c5:d0:0d:a6:bd:9b:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5869b8b4-eea0-4a20-9f64-48e00ae57532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:fd:51:b8:a4:63:8b:15:0d:32:1d:e3:38:
3a:a1:c4:48:84:f3:97:d9:40:c7:7a:21:ea:30:76:
90:84:e2:50:88:37:65:dd:8e:2d:b8:fe:ee:b9:ef:
34:1f:bb:9b:05:58:37:22:d5:d6:07:69:ed:4f:37:
d3:27:6c:d4:f9:16:3f:aa:5e:b0:23:2d:c1:2b:a8:
ea:2d:46:91:c1:0e:e9:54:07:a8:67:8f:4e:be:ec:
37:2e:10:cf:0b:9e:3a:18:78:51:cb:68:bf:fd:1f:
48:44:76:ed:29:28:7b:2a:82:77:83:2c:a7:7b:5a:
85:2b:50:65:72:db:3a:e8:df:0a:a0:03:f5:d7:27:
50:b7:74:33:f4:73:44:ba:dd:b1:7b:70:b2:d0:7f:
b8:cb:62:c6:83:1c:00:2b:21:e3:b1:d5:cc:f1:bf:
70:7a:d2:3e:3d:3a:64:39:2b:f8:fa:f0:43:05:54:
b8:d9:eb:dd:82:7c:a0:5e:b9:7b:29:14:f0:8b:a9:
e9:c0:c8:7f:33:25:b4:d2:3d:ca:ce:ff:29:d9:a1:
5f:5e:a7:6f:fb:63:53:ac:d1:9c:42:d0:7f:17:59:
57:6b:14:80:41:ea:a5:8d:4e:ce:21:1f:72:5e:e2:
6b:90:5c:f6:8a:e2:61:79:7e:89:13:63:05:9d:9d:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3E:88:B9:9E:ED:C8:E2:D2:E5:40:5F:EC:95:4B:3C:84:3B:94:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.162.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:5f:31:92:3b:0e:30:12:5a:3f:e0:a2:d1:20:a9:39:0c:bb:
51:95:2a:f4:d3:d5:fd:0b:72:54:49:7a:87:a2:97:24:8d:3c:
c3:86:a5:9d:20:f6:19:4c:37:f4:1b:c1:0b:d7:e7:17:fc:00:
6a:ab:6f:d4:5d:4c:3c:2f:95:5e:42:2d:8a:0f:80:35:36:68:
0d:73:cf:e1:47:d7:4a:bc:f2:5f:56:57:aa:f0:81:ab:9e:68:
59:b0:14:9b:77:53:39:a3:8b:ec:d9:9c:63:46:e2:3d:b8:4a:
56:52:67:89:64:22:e8:a9:53:e2:52:aa:23:d3:b1:f8:71:f2:
ad:ca:96:74:46:8f:98:08:a3:2f:42:8b:f3:59:99:90:28:60:
6c:a2:5f:b7:9f:07:16:ae:c3:6e:18:d6:a1:23:8a:27:98:45:
46:46:1b:56:47:b1:76:6f:37:c5:fe:d2:96:0a:76:c5:d7:4d:
c1:dd:ba:0a:4a:23:5c:c3:8a:4c:72:0f:5a:9a:f3:d4:41:f0:
9b:91:21:ea:6b:11:c2:43:4f:87:bb:dd:66:40:25:49:be:6f:
3a:ac:2d:9b:c0:c1:a4:25:b4:81:4d:65:05:da:7b:77:fc:11:
b9:c9:72:5d:e0:f6:6e:70:ba:b5:eb:23:e2:fc:41:01:0f:0b:
7d:9d:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:23 2025 by rpki-client