Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
File: c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa (raw, json)
Hash identifier: CmPzgk4eLPa4vR0KZC8lIpjLdcVmnRtIRctgW0HxSr4=
Subject key identifier: 1F:F4:6B:66:1E:1D:7F:F7:4F:7F:42:E2:CD:91:57:2B:80:A7:30:4E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F72E58F88667BFB657C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.183.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f7:2e:58:f8:86:67:bf:b6:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=8666d7ae-ddf4-45b5-a802-ad41eb4ee3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:0d:69:cf:9a:2e:f3:13:aa:d4:c5:4f:de:
75:89:7f:35:14:00:9b:e7:e7:de:e6:86:bb:ef:1c:
48:43:13:a2:56:bb:cc:1a:73:8c:55:f8:5e:74:f2:
74:25:33:47:0e:60:c3:2d:34:62:b0:f7:1a:65:dc:
f1:00:29:cb:11:65:a4:a1:7e:37:10:dc:74:6b:96:
1a:9d:95:fc:96:99:b7:19:84:2c:b8:da:c9:8f:32:
d7:28:ae:d9:67:ad:a0:0e:1a:ed:14:a7:0c:dd:77:
cc:32:28:88:f9:10:6b:e1:6a:93:4c:36:7e:87:14:
f0:d7:79:fb:74:0a:dd:c6:74:09:ca:bd:f4:43:6e:
5a:9e:9a:de:fc:cb:c3:dc:b1:0a:cb:a3:65:d5:57:
23:6e:e8:42:cf:7b:74:21:86:4e:88:cb:03:1e:9c:
b6:27:2f:68:a3:56:5c:86:07:af:fd:b1:89:82:64:
52:d9:63:60:4c:54:45:40:b8:a8:b3:1d:e9:bd:0e:
7f:15:40:ad:27:e2:00:20:68:50:f4:2d:81:ed:d1:
93:a4:98:b9:86:f0:7e:32:a3:20:08:d4:9a:41:c7:
66:e0:76:36:17:f3:8b:e9:78:da:c8:e3:03:47:89:
2a:81:bf:6d:3f:d9:0f:10:71:f2:c3:d7:5e:e6:7a:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:6B:66:1E:1D:7F:F7:4F:7F:42:E2:CD:91:57:2B:80:A7:30:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.183.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:31:08:46:b5:2c:e5:0d:18:99:95:4e:7b:03:4f:15:94:05:
09:c8:ba:d0:74:ef:04:64:a9:df:7b:ed:85:34:99:9b:0d:84:
cd:9b:67:54:2f:9e:a7:03:36:f5:26:f5:07:43:bd:cf:0c:03:
4b:ae:65:ee:fb:6f:a3:16:d2:94:bf:11:2b:82:c8:98:47:01:
ff:3a:61:6b:6e:07:da:8c:f3:45:e0:dd:ec:57:9e:9f:23:60:
f5:77:32:84:04:c4:77:08:a3:fc:52:b8:9e:09:70:0b:91:5d:
43:f7:78:1c:ef:ca:21:3e:24:85:48:9c:95:7c:f8:8f:b6:00:
8b:47:9a:a6:b7:57:86:d6:16:be:b2:fa:64:f5:50:5d:d9:bd:
94:cd:98:a1:2e:e0:3c:01:d0:3b:1a:65:4d:a4:a1:b0:c6:83:
52:11:ce:35:0b:cd:e1:7b:4c:ad:53:36:67:92:3c:8e:24:cb:
c6:61:7f:a3:32:70:43:1c:29:3e:17:25:53:a2:73:14:ea:79:
3d:8e:33:6d:e1:39:67:4b:d5:8a:f0:f4:d2:f5:ae:84:9f:af:
72:a4:91:d0:83:7d:3a:89:fb:33:be:db:47:91:d4:0b:a5:b3:
a7:fa:23:2e:e4:a6:a6:6b:00:88:d2:75:25:7b:09:50:87:e5:
93:56:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:10:50 2025 by rpki-client