Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa
File: d3ec3111-595e-378e-a332-2caa25072fb0.roa (raw, json)
Hash identifier: EqZuD/DkHQSIUQo3eXsKfBKqIkbzAIwyVNyzcdU6OqI=
Subject key identifier: 4B:79:51:DF:DA:92:79:96:CF:C3:84:FE:E3:40:F3:50:75:DE:0A:DB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB6F962D11147AF28E6A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.161.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6f:96:2d:11:14:7a:f2:8e:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=357b2e3b-5807-45c3-9e69-a3d4e7ae683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:5a:c1:52:76:c8:6d:07:c1:72:6e:42:32:
c9:72:75:e8:7a:e4:74:66:77:6c:f0:53:66:b6:32:
ef:ec:48:ad:07:08:87:5b:1e:ec:ec:75:73:72:a7:
c6:05:7e:e0:16:f5:52:39:ac:1b:92:96:af:45:ae:
7f:9a:08:ca:a1:5d:7f:86:b6:d4:3c:ba:13:48:b1:
03:8d:c3:67:3c:37:38:3a:ba:18:af:61:a7:29:62:
4b:01:2d:32:3e:dc:48:9a:36:6b:be:6d:2a:5c:a8:
eb:c8:90:d5:52:e0:65:d4:0e:99:d8:86:92:0d:a8:
7e:d2:ab:5d:f1:3a:62:da:77:6a:ea:e2:f9:c0:c6:
23:ee:46:e1:bb:ac:d9:ed:3e:58:af:0c:03:dc:fc:
7b:13:e6:af:43:99:ea:81:0d:d6:c0:2d:be:c6:26:
37:37:89:40:ee:2b:f0:08:7e:49:92:55:56:df:0a:
16:aa:aa:17:7d:c6:2e:90:f9:00:21:8e:0d:14:50:
70:3d:7d:1f:67:99:e9:28:0d:eb:3f:d1:60:1a:75:
95:34:c3:dc:38:6d:3e:2a:ca:39:88:64:3d:e8:fa:
b6:1c:07:3d:51:c7:34:fe:9d:3d:18:ca:ff:78:46:
66:e9:0f:e2:98:6d:b5:4f:51:f5:3b:b5:e1:fa:c8:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:51:DF:DA:92:79:96:CF:C3:84:FE:E3:40:F3:50:75:DE:0A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.161.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:e7:15:42:9c:58:cc:ce:1d:21:8e:50:e0:f4:c7:0c:27:f5:
42:53:76:50:07:24:7f:2f:b4:7b:ce:fb:d8:42:0d:b9:04:46:
a7:28:99:0f:45:c6:90:d5:1b:1c:2a:8e:49:25:b6:7e:82:2d:
fd:b1:e0:14:93:71:4d:e0:41:cb:e1:c0:c1:28:0c:30:a0:e8:
e2:df:18:ee:32:db:37:09:09:24:7d:19:20:11:91:0c:11:41:
74:8f:97:48:32:52:f1:7d:ae:17:1f:0c:4b:be:93:86:da:34:
19:00:e9:24:8b:6f:3e:26:6b:e3:02:83:2f:19:b8:f2:cd:ce:
02:46:fc:fb:0c:9c:f9:df:4e:66:94:f1:0a:db:d0:42:52:3d:
62:f7:f7:d9:70:26:e1:83:d1:45:ac:a0:62:79:6b:a6:97:3f:
97:87:6e:41:f1:76:cf:43:32:7a:f3:c0:02:24:50:ce:c2:d9:
a8:8b:df:37:b8:f8:92:53:2d:0b:cb:97:8f:c6:d1:90:ce:45:
f5:58:5e:c0:14:3d:ce:6e:94:ff:3c:52:16:9c:3e:18:3c:84:
a9:53:2f:7d:dc:73:5b:dd:ba:44:c3:48:f5:ce:97:fd:d3:4a:
2f:00:56:c4:7a:65:f8:3d:b2:01:19:12:05:06:30:25:5b:a7:
9d:e9:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:48 2025 by rpki-client