Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa
File: b00aeef8-b710-36e5-a79f-67d1d8129595.roa (raw, json)
Hash identifier: GLpj5thwvMqzVxM2luOOhEi5+IOcizVM0ASw+tXNykU=
Subject key identifier: E6:9D:55:DE:2A:24:24:D0:30:FB:17:B6:15:5B:50:6F:FC:E9:69:AC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F2BFBD07201EB6F74B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.245.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f2:bf:bd:07:20:1e:b6:f7:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6de47591-6732-4341-9ca9-5c041509f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:bf:bd:b7:64:c1:b4:c0:06:65:d4:d5:9b:
0f:3b:2e:f5:09:3c:95:34:98:3f:69:e6:89:90:4b:
b6:2c:48:79:83:11:01:de:4f:7d:75:35:c9:fa:a4:
f6:a5:f0:5a:9d:d8:df:8b:f1:9c:c9:de:2a:4d:6c:
94:01:3f:a9:7f:5f:9e:12:de:71:c8:12:44:8d:4f:
ff:52:e8:ba:52:49:f1:95:26:f8:32:d2:76:17:10:
92:ce:93:77:16:bc:db:14:f4:ae:f3:24:c5:a5:81:
52:37:4f:33:03:ad:e2:3b:5f:97:98:f8:4f:89:aa:
e6:1c:84:af:ec:59:4b:1e:28:0d:cd:ee:28:8a:08:
6c:97:46:b4:2d:69:72:e2:b0:91:d2:75:a0:1e:cc:
f0:27:59:83:02:35:23:47:49:ee:94:42:9a:aa:c7:
72:16:3e:a3:a8:34:4e:21:3f:52:9a:29:21:da:60:
b0:3b:9a:f7:f5:fe:49:80:91:7c:f5:9d:cf:db:e9:
7d:22:94:fa:49:ab:c4:af:22:26:ad:d0:d9:a8:e1:
b2:ac:00:81:8b:f3:20:8d:5c:e6:e6:cd:33:d8:bc:
7a:2b:cf:4c:37:4e:f2:8b:f9:aa:e2:9a:8d:b4:33:
7f:ea:73:0f:8c:96:90:05:af:11:e3:7f:7d:0f:c6:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:55:DE:2A:24:24:D0:30:FB:17:B6:15:5B:50:6F:FC:E9:69:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.245.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2d:91:f7:13:e6:b1:43:54:49:ba:7d:e1:27:86:cd:94:6f:
0a:4d:9d:a9:23:99:76:5a:68:ce:04:c6:78:7c:f0:de:72:74:
55:49:4e:34:e1:51:47:e7:d2:08:70:0b:2f:ff:55:95:e3:39:
af:c0:6e:7e:24:73:51:0f:9d:4d:1b:49:9f:23:0a:57:85:ef:
9c:5d:b0:44:e7:a3:57:ee:11:66:23:4a:1b:17:58:b4:b3:4c:
d6:a6:a0:33:a7:a5:70:59:5b:9c:f7:e9:bc:85:08:28:db:2c:
20:47:33:89:09:05:b0:7f:d7:e5:5e:21:d9:fa:07:fc:52:8a:
90:03:4f:7d:f3:8c:a4:f5:33:7d:f6:52:7c:79:94:90:49:8d:
2b:a5:98:9c:db:81:f3:1e:cc:5d:c6:43:e6:d3:5d:8e:ae:3f:
eb:dd:26:92:08:97:c0:81:b8:39:e6:dc:3e:ba:5d:49:76:c7:
75:29:08:84:82:78:a7:30:88:94:a4:0c:b8:25:f1:fa:f7:69:
56:68:ae:30:0e:07:b8:9c:10:f9:05:42:f6:9e:2c:3b:16:f8:
cf:85:21:29:20:0b:ce:2f:7a:e6:9f:2a:08:77:7a:8b:fd:93:
b3:33:8b:fa:2b:a2:f5:4c:ce:44:b5:7b:46:57:f6:db:80:18:
a1:76:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:06:39 2025 by rpki-client