Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d274b92b-f9f9-3412-bb2e-046e8e296a70.roa
File: d274b92b-f9f9-3412-bb2e-046e8e296a70.roa (raw, json)
Hash identifier: p7iqCYkJWA/ixF5t70+nIDA2gj1ZawOoOBEiTrwn7xs=
Subject key identifier: C8:A9:DA:C5:A7:27:29:EB:2A:18:ED:5D:B1:CA:F4:08:94:A3:24:C4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B6059564BD57C37161680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d274b92b-f9f9-3412-bb2e-046e8e296a70.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.205.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:60:59:56:4b:d5:7c:37:16:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=1a481b05-9e6c-469e-abe0-1078da503899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:91:3e:33:b4:f2:2c:c8:23:8e:23:33:e8:
8b:62:a7:fa:af:5b:3b:eb:36:18:0a:cc:fd:30:ce:
53:ac:79:9d:69:d0:8d:bc:cf:74:ab:b8:34:bb:b4:
27:d4:e7:58:bd:df:67:bc:ef:2c:25:82:d4:d3:97:
65:1f:8f:56:03:d9:54:2c:f2:15:e4:bf:d2:df:0a:
f6:f5:ab:0d:38:64:49:f6:f4:36:9e:24:d1:60:c2:
3b:bf:3e:e0:91:db:5b:2d:86:50:ad:6a:97:fb:73:
31:74:02:ce:c2:65:92:8a:7d:90:10:1e:98:ed:e3:
97:05:a3:e9:69:c6:66:29:84:88:cc:dd:3c:ba:a2:
ea:4f:f4:2a:79:38:14:d3:b7:32:98:7a:ae:b7:a2:
1a:c1:7a:1e:dd:57:55:54:6d:c1:60:95:d7:cd:93:
39:51:5d:f6:20:61:d9:88:87:72:93:6d:33:ac:c7:
16:82:de:c0:2a:6c:db:89:eb:a2:f0:76:28:10:7e:
42:f6:18:0e:c3:05:99:9d:cc:b9:74:72:85:01:af:
76:6c:99:02:06:97:d0:cf:a6:83:93:c1:13:1f:4c:
4a:3b:a3:04:1d:1f:13:41:4a:db:da:68:81:0e:69:
a8:cc:7b:42:24:ba:47:1e:e1:a1:e1:0c:06:77:7b:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:DA:C5:A7:27:29:EB:2A:18:ED:5D:B1:CA:F4:08:94:A3:24:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d274b92b-f9f9-3412-bb2e-046e8e296a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.205.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:56:9f:70:d1:93:d3:17:7f:d4:ad:35:e3:2a:08:27:eb:37:
33:77:b2:83:8a:1f:4d:89:72:0f:ab:d0:65:65:68:a5:4a:0d:
a5:cd:f3:5a:11:44:a1:5f:b4:02:61:b2:ea:01:c5:dd:5d:f6:
0c:98:4a:1e:eb:fb:d7:8a:94:8f:d5:72:55:ea:11:9f:62:59:
82:ce:25:9f:45:02:17:e8:66:42:76:08:67:4b:b5:fd:5f:cf:
82:92:a8:e2:b6:b0:84:05:6a:f2:5e:cf:de:1e:f1:f1:62:5a:
8c:93:8d:4d:e2:b1:55:4e:78:38:06:e9:0c:16:47:ed:f0:85:
2d:65:41:a7:ba:c5:62:a3:6f:48:b7:0f:b8:f6:26:a4:7e:6f:
e2:58:f3:14:4a:80:16:34:e2:9b:0d:cc:c7:7b:bf:ef:ae:2c:
29:eb:b5:02:d1:bd:ab:c0:b8:bd:f3:55:e7:63:96:81:08:a3:
1b:69:6a:c1:08:08:14:48:f9:ae:f6:8c:9f:d0:38:43:e1:93:
ec:d3:4f:e7:e2:ca:68:1a:ae:0a:cc:f1:23:a9:c7:c2:18:88:
b8:9f:0f:64:d9:82:d9:4d:15:09:c9:1f:64:0d:de:24:5a:3c:
b0:76:30:2e:cb:6f:e4:80:93:94:85:5e:4f:60:3f:b5:f6:6d:
4a:5d:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:58 2025 by rpki-client