Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa
File: aad83d5b-8945-38be-85c0-f24fefd6a02e.roa (raw, json)
Hash identifier: 10376R8MzWFl19V/4ai4HJapmnX6dlhmI4RSlFf6lr8=
Subject key identifier: 23:40:7F:BD:39:24:43:54:E5:31:DB:DB:09:71:C4:37:E4:BA:D2:52
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584922E8F75E98C04DA0E09E7CA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa
Signing time: Mon 10 Mar 2025 01:00:39 +0000
ROA not before: Mon 10 Mar 2025 01:00:39 +0000
ROA not after: Sun 08 Jun 2025 01:00:39 +0000
asID: 6167
IP address blocks: 97.204.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:22:e8:f7:5e:98:c0:4d:a0:e0:9e:7c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 10 01:00:39 2025 GMT
Not After : Jun 8 01:00:39 2025 GMT
Subject: CN=68b0e209-1017-49a6-9587-b3696c7740ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:b6:90:23:53:35:19:9d:1a:7d:0c:22:f9:
fd:86:2f:e7:9b:57:9f:42:4a:44:fd:35:35:ad:24:
b5:72:73:1b:b3:e4:e1:18:3b:68:e8:3e:96:15:6e:
a7:c4:24:90:d0:f8:c2:aa:0a:61:2a:2f:f2:f3:45:
d5:15:dc:9a:f1:31:eb:e9:d6:ad:48:7e:b3:21:d1:
32:e8:1c:22:72:5f:05:44:f6:17:be:33:41:0a:7c:
9f:1f:1d:9d:4e:a3:15:8d:d9:f5:29:93:e9:00:9b:
de:e0:ce:7b:cc:5d:60:19:83:51:99:8e:75:f4:c3:
b3:59:61:8f:4b:1e:b0:7c:86:92:a6:ec:ce:01:a2:
dd:3b:a6:96:08:ec:35:37:e1:96:fa:62:a1:60:91:
2b:47:6d:87:e8:a9:bd:08:02:44:38:35:b8:4b:78:
95:a3:72:5c:a0:bf:ff:89:42:1a:b4:81:c3:8c:db:
99:e4:73:df:33:56:61:2e:6e:eb:73:83:d5:bb:d3:
6c:e6:34:58:49:7f:6d:1f:20:29:fb:a8:cd:0e:4a:
c0:43:97:18:97:c3:ac:a4:e6:55:28:90:74:a0:19:
84:e3:f2:d0:e1:a9:4a:78:dd:81:0c:20:18:1a:0c:
b2:52:ca:fe:93:b6:13:b7:ba:62:2c:63:18:ec:d6:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:7F:BD:39:24:43:54:E5:31:DB:DB:09:71:C4:37:E4:BA:D2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.204.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:eb:9c:aa:d4:b0:68:ad:b9:98:43:dd:1b:4c:a3:97:06:82:
93:8e:fe:e8:06:71:8e:72:e8:4c:1d:3b:4a:4a:8e:06:b1:ac:
14:9f:47:7e:3d:a4:a4:aa:d5:98:e5:27:1c:ce:3d:80:bc:70:
c8:17:5c:87:a1:85:30:ad:e0:5f:ae:90:30:b1:0f:d9:3e:6e:
36:d3:ae:d0:84:16:50:fd:c4:50:b9:8a:41:5e:da:10:19:cb:
dd:6e:0d:3f:2a:8d:4f:97:e7:da:72:2c:d0:12:b6:6c:66:61:
63:be:2c:bc:45:ab:75:86:25:95:2a:79:38:5a:53:77:f8:d1:
4a:8d:4a:1e:0f:02:9a:02:83:c7:bd:98:1c:52:64:7d:b6:e5:
6c:47:09:67:72:b1:7c:38:26:c7:96:e1:5b:80:f8:f6:46:8c:
5e:af:15:f5:5b:89:43:12:7a:a2:43:9a:c4:8e:c6:31:ab:82:
75:18:02:e3:31:bb:ab:2b:96:53:cb:bc:e4:10:b1:10:ae:c0:
24:42:50:52:31:04:3c:09:80:5e:32:0d:1f:bb:3c:ae:fc:54:
e5:aa:e3:11:ae:ee:49:7a:bc:44:82:93:a3:93:d4:c0:8b:bf:
39:03:23:30:bc:cf:65:42:6d:25:bb:bb:69:ea:0d:6b:3d:04:
b0:20:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:30:23 2025 by rpki-client