Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
File: e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa (raw, json)
Hash identifier: AOT5aMriNKrhB0WhojoBvi7CA3Qrs3e+Ps2AQWg4Uw0=
Subject key identifier: 57:84:82:E4:C8:B2:C5:D7:D4:E0:78:41:12:4B:4D:E1:56:36:01:21
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FB58AC3F12D2EC2D8280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 173.64.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fb:58:ac:3f:12:d2:ec:2d:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=7debb384-5d52-417c-bb03-e7f2a7df182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:65:e2:f2:b6:d2:7e:ed:e8:d6:98:d7:76:
40:19:94:0d:f3:ec:6a:b5:9f:70:a3:41:18:68:d6:
63:fb:91:62:a8:34:ad:52:ff:03:c8:b7:8c:27:e5:
28:cc:ff:bc:96:38:be:d6:46:f6:1d:30:80:de:e6:
e2:43:7e:f4:8a:2d:2a:e3:51:d8:18:a5:84:eb:9c:
b3:38:c2:86:03:19:80:38:07:84:a9:90:f5:6f:16:
11:bd:3d:24:10:fd:9a:07:da:3a:e0:05:6b:c0:d4:
15:0c:07:ba:9b:41:fb:40:ba:e2:ac:9b:2b:a8:7d:
14:06:4f:55:95:c8:39:83:02:66:da:04:1f:ec:16:
c0:f5:4e:a2:99:fe:20:07:23:e0:67:2b:d7:7b:cd:
33:f5:27:38:d8:e8:87:b8:35:f2:8a:ac:c9:31:5b:
24:17:d6:9c:0d:bb:83:91:57:ba:ce:27:c0:19:aa:
38:00:25:ba:5c:6b:5c:47:0a:80:8b:5a:8a:2e:76:
8d:8d:b7:d2:98:91:61:f7:8f:6b:ab:81:79:cc:e7:
b3:fe:31:15:ef:c0:24:0f:f9:6a:14:10:55:80:72:
9e:48:6d:14:f7:33:33:3e:c7:f2:19:e7:23:c6:9a:
f7:23:06:58:b5:62:a4:dc:97:db:e0:43:3c:7b:13:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:82:E4:C8:B2:C5:D7:D4:E0:78:41:12:4B:4D:E1:56:36:01:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.64.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d3:69:5e:62:1f:93:ec:41:00:cc:ef:cd:55:83:b9:b1:4e:
d6:3f:15:b0:9f:80:b8:a4:fc:d2:db:50:3b:13:84:59:3e:64:
2c:db:2d:38:ae:7c:43:67:37:e1:83:03:0c:92:59:2f:58:57:
53:8d:eb:77:4b:50:49:b1:c3:b3:b7:7c:23:53:fd:17:82:2d:
0a:39:46:83:1e:bd:68:44:ba:82:c0:be:42:f3:2d:8f:ad:ab:
32:55:77:86:3a:a9:5d:fb:d9:c3:97:c6:fc:77:bd:24:1d:4b:
3a:fd:be:6e:ea:39:7b:e2:e3:80:c2:c3:53:fa:90:49:15:22:
1d:42:9f:95:e7:26:9a:ca:c4:2d:c2:fe:a9:75:85:ca:83:bf:
f9:42:60:d2:26:89:9d:d9:94:68:b8:39:0f:60:87:88:cf:a5:
93:64:0e:6a:28:9d:3b:26:ef:3b:03:42:8d:67:f3:d9:41:e0:
d1:1c:fc:15:06:eb:6c:17:b8:39:06:09:c5:be:e8:9b:b3:ff:
36:98:bc:ab:60:06:4c:29:1f:60:4d:1e:4e:82:1e:c4:04:da:
4a:85:7f:f3:4f:f0:f2:d1:95:77:1d:4d:39:ce:80:6d:bb:65:
32:57:ac:de:05:0a:d5:1d:5d:47:e8:db:25:0c:54:50:8a:5a:
15:98:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:05:16 2025 by rpki-client