Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa
File: ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa (raw, json)
Hash identifier: JeU08mtMUwBbht7gld7oqpUD717p2n9/qht7uC1jAss=
Subject key identifier: 12:1C:36:81:D6:D0:EE:19:C7:60:B0:49:8E:33:74:9B:0E:B6:4C:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2CDF4F0AB2F2461EE840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 72.70.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2c:df:4f:0a:b2:f2:46:1e:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ca22addc-1693-4672-a487-41d3091a9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:4d:99:33:dc:8b:cf:8a:57:32:c7:62:4d:
23:3a:27:fc:81:4c:a9:63:aa:f9:27:d5:79:58:9b:
fa:f6:69:7b:4c:be:9a:67:4d:1b:8a:47:a6:08:91:
c1:5f:a7:a9:6b:15:16:96:94:e5:ee:cf:9e:d5:d2:
1f:ea:ee:21:4d:40:a2:f8:4d:8e:e6:a8:ea:02:29:
42:1c:9c:19:d7:69:1d:a0:c1:a6:42:34:16:24:94:
b3:08:8e:e0:1d:e6:b0:0c:7a:d7:47:ca:35:aa:b1:
4b:06:cf:10:7c:fd:b0:e2:3f:e4:0e:d1:c9:f6:76:
20:4f:93:48:44:ec:41:f1:ef:94:ca:96:c1:51:b4:
73:31:99:42:dc:53:cb:33:fc:cb:d2:d8:9f:87:26:
99:ec:bb:9b:36:fa:db:dd:2e:ae:fc:7a:85:70:08:
ef:e1:57:7d:a1:9e:8a:f8:f7:68:ae:fd:fc:66:16:
72:56:a3:58:6b:99:7f:0e:84:b9:1f:02:8d:ca:02:
d5:9a:63:0f:20:fb:60:3e:01:6a:9b:3b:ba:be:53:
d4:86:36:73:68:23:23:44:44:aa:e3:78:20:5a:c1:
06:06:56:9e:d9:3b:df:a5:da:60:d1:fa:8f:aa:ea:
aa:b6:cc:ab:39:a4:e3:c8:1c:44:6d:b8:c2:bb:b3:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:36:81:D6:D0:EE:19:C7:60:B0:49:8E:33:74:9B:0E:B6:4C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.70.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:58:46:88:4e:a9:ad:44:6c:e7:7a:04:11:ee:94:2a:dc:46:
41:6e:07:a8:3b:86:51:58:43:c2:4f:3f:cc:46:7c:7b:17:78:
46:7c:eb:49:f6:21:66:d0:38:b5:78:d1:51:84:12:f8:78:89:
7e:bc:01:d5:60:4a:32:1f:c8:bd:ed:e1:c5:2c:a4:9c:ac:75:
bd:28:dc:af:74:08:2c:8a:f6:a5:de:20:5f:da:13:be:fe:ca:
b5:ec:69:22:ad:ae:2f:c7:f4:a2:83:d0:a1:82:35:6d:42:d0:
26:65:57:2d:ab:d8:87:d5:30:67:ef:26:d2:05:a0:30:80:eb:
9e:c7:62:cb:7c:ec:81:a5:8b:d0:b4:11:09:1f:5f:6d:e5:be:
6b:40:3c:40:9a:68:b8:d8:70:93:59:17:8d:1c:76:98:b9:e8:
b7:07:54:8d:2f:ce:2c:2b:17:b5:c4:5c:08:8a:ba:e4:fb:85:
fb:c5:74:f2:3b:a3:cb:58:a0:1b:a0:e0:ce:8e:9d:29:cc:47:
f7:cb:c6:3d:fb:07:33:03:a1:03:9f:e4:83:36:c9:e6:b7:a7:
4d:61:90:10:1d:9c:bf:6f:be:88:57:c3:b1:ff:e4:bd:51:dc:
47:48:09:3d:dc:ff:97:d6:30:3e:ad:7d:4e:2d:52:45:92:82:
5a:b5:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:37 2025 by rpki-client