Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
File: df502e9b-f90e-3a84-8ea6-9d557d426070.roa (raw, json)
Hash identifier: KgqlI+PUZCnLXIxBeXKiowkqc7/2kq+0SnRpCKrQQeA=
Subject key identifier: F9:B8:0C:2F:3E:A7:6E:1F:38:E5:C5:90:75:82:3E:5A:E4:75:98:84
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEB14790C791CD7DE7A380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 0
IP address blocks: 174.8.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:b1:47:90:c7:91:cd:7d:e7:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=6b2a9fcb-4e61-4f58-b404-f201d13997a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:72:dd:2d:c5:d3:07:d3:9b:af:81:db:9a:
14:19:bd:c3:27:c3:89:2f:d0:a7:13:b1:e7:87:ce:
b5:9b:5b:eb:08:1a:e7:db:77:15:c9:08:9a:36:24:
76:ef:ca:0b:d9:77:33:6d:52:3e:33:ff:a2:5d:95:
62:98:dc:a5:cc:c4:68:f7:94:f6:dc:d3:e8:58:4a:
c1:69:d8:4d:26:8c:a0:85:d3:2f:c5:4e:65:20:12:
10:41:30:51:1a:cb:3b:23:20:1a:5f:f6:1b:dc:5d:
e7:a0:55:6f:80:57:46:0f:3e:f4:44:f3:ff:91:8d:
78:75:19:31:bd:a6:b1:fe:f5:c3:40:41:21:ea:4e:
84:d3:13:8d:bb:30:bb:f2:b5:58:da:0c:b9:50:1f:
55:d0:e8:48:aa:b7:6e:2b:dd:6f:51:d3:82:d6:99:
ef:65:7c:8a:6d:0f:31:fd:25:39:cd:4a:91:f7:f0:
1c:cb:00:ab:f1:67:94:2c:b7:53:1a:8f:9c:3d:f3:
be:49:77:4f:f7:8b:e6:10:80:d9:fb:6d:79:10:bb:
78:eb:6d:09:62:1f:bb:ca:8e:47:cb:e8:a9:ba:58:
24:52:1d:b9:1c:ad:03:5e:fa:c9:fb:4e:0c:9e:a7:
cc:aa:04:3c:f2:9b:5d:b8:c1:2f:e8:4f:6c:55:9a:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:0C:2F:3E:A7:6E:1F:38:E5:C5:90:75:82:3E:5A:E4:75:98:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df502e9b-f90e-3a84-8ea6-9d557d426070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.8.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b1:9a:5c:e7:fb:29:9c:d2:90:fc:43:00:cf:5d:52:d0:ac:
31:68:31:6f:02:f2:04:05:4d:75:f4:c2:40:b0:86:c0:2b:6b:
f3:bd:fa:b7:6e:e5:10:71:a1:d9:f6:cb:f4:e3:20:35:0c:d6:
7d:bb:f1:23:be:ff:8e:b5:33:ac:43:3e:8b:6e:06:2d:ca:32:
8d:02:bf:08:b6:33:b3:1e:f4:0c:48:1a:3b:85:dc:36:b5:3a:
29:ca:20:dc:fa:34:26:25:74:eb:af:de:0e:93:a7:c3:26:6a:
62:cb:4c:6b:9a:c4:68:c4:2b:79:ff:e5:ef:fc:38:64:47:80:
74:42:8e:a9:68:38:c6:27:c4:2f:e3:5a:51:3c:09:0a:04:0c:
f8:c1:33:6a:8c:47:55:af:f0:93:45:00:86:c1:6a:4e:62:b7:
7d:cc:a0:42:19:f6:20:2b:e7:92:80:c9:b6:bf:a1:6f:c4:c2:
0d:e0:ea:02:32:c1:f0:1e:59:b8:cd:47:4d:ac:d9:49:0a:e1:
58:82:b6:e0:d7:83:39:34:52:cb:26:8c:20:85:25:e1:62:19:
cf:80:65:55:ab:87:89:07:1c:50:82:12:dd:37:d7:c5:f2:23:
00:6e:39:fa:4f:58:1c:a9:47:41:9c:cf:b6:96:4d:fe:3d:46:
f1:07:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:19:09 2025 by rpki-client