Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e29873a6-87bb-39fe-9863-9325084e350e.roa
File: e29873a6-87bb-39fe-9863-9325084e350e.roa (raw, json)
Hash identifier: rJtZK7jXpUn4FTDVNmugi0rDS0OkT0wXjpcAAGV5NSU=
Subject key identifier: AA:CF:1C:73:CD:25:5B:5E:3F:EC:92:34:A5:00:05:90:23:3E:32:AB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848B27497B3D746C3849BBEF500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e29873a6-87bb-39fe-9863-9325084e350e.roa
Signing time: Tue 28 Jan 2025 18:15:42 +0000
ROA not before: Tue 28 Jan 2025 18:15:42 +0000
ROA not after: Mon 28 Apr 2025 17:15:42 +0000
asID: 0
IP address blocks: 206.173.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:74:97:b3:d7:46:c3:84:9b:be:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 28 18:15:42 2025 GMT
Not After : Apr 28 17:15:42 2025 GMT
Subject: CN=94304fab-a7d1-448c-9fac-19168d6b5912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:5e:a0:4b:6b:7f:e7:37:f3:ef:d4:88:86:
ee:b6:ee:4f:45:4e:25:fb:a2:18:08:b9:e3:a3:17:
60:9b:01:4a:a7:98:15:64:b9:d0:d4:0f:f3:af:38:
fa:69:aa:17:68:3f:ac:74:00:97:84:65:cc:f3:b0:
1f:7f:8c:11:bc:e3:2f:83:aa:e1:df:2d:33:f1:95:
be:f0:a4:43:06:85:64:01:76:bc:1b:6f:77:16:b7:
3e:08:2d:6b:d0:04:3b:8d:10:24:23:77:bb:d7:d0:
e2:41:7e:80:25:6d:ea:21:6b:d0:ae:08:e2:e9:87:
d9:45:85:7f:a6:ac:99:d6:ab:f2:54:eb:1a:a2:8c:
96:3a:1f:69:03:f1:c7:90:2b:fa:a3:f4:45:38:6e:
15:3c:67:cb:0d:d1:00:d8:b3:6d:d3:08:44:b1:25:
21:76:12:c6:ef:83:c1:9d:68:5d:42:66:31:31:c5:
22:2a:04:8b:42:8a:0b:ea:a5:ba:c8:6a:cf:cf:25:
fe:93:0f:80:0b:e0:1a:1a:41:ad:ec:6f:e6:26:42:
4f:31:af:dd:31:fe:b1:15:ac:f4:30:a9:d1:12:5e:
1a:9b:c3:47:23:35:19:a6:e9:ac:57:9c:ff:80:35:
a2:6a:62:65:a3:06:4c:79:e4:b3:93:35:fb:0c:a0:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:1C:73:CD:25:5B:5E:3F:EC:92:34:A5:00:05:90:23:3E:32:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e29873a6-87bb-39fe-9863-9325084e350e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
206.173.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0d:5e:5f:3d:f7:e3:3e:46:23:9c:00:f4:a5:29:3c:97:7e:
be:7b:cb:9a:52:3e:ad:87:eb:42:06:89:a7:d6:54:dd:47:bc:
bc:47:0b:39:71:e6:76:ee:ab:eb:83:24:3d:5d:3d:01:ac:b1:
6f:be:a6:49:bb:1e:ac:db:58:aa:ff:95:53:ff:6a:e4:7f:f2:
c3:34:49:2f:5f:81:b6:73:d9:16:16:ed:76:f4:ee:84:5a:ba:
a0:47:1e:1f:a3:99:11:7b:6e:4b:cd:fd:46:51:8a:7e:e2:52:
72:0a:be:f5:37:cf:b2:e0:bb:03:7f:33:f7:17:21:48:1c:76:
64:c9:af:10:68:7d:c5:0f:e4:f2:d9:c5:4e:79:c2:53:ca:ff:
be:9a:80:f4:31:0e:37:f8:95:ce:dc:96:df:4b:84:d2:eb:21:
33:0d:d7:de:d2:80:b5:d1:e4:f5:6e:5f:bf:ec:4a:a0:49:d8:
cb:04:84:7f:6d:fa:b0:12:87:36:72:37:91:26:87:ba:d5:89:
73:86:4d:dc:71:94:f6:34:9a:3f:d3:50:a6:c5:d9:7d:fb:a0:
e6:b9:09:93:1b:c2:6c:01:ba:4d:d6:ae:df:55:fb:f5:ec:a5:
13:eb:96:e5:8c:47:75:af:80:39:cd:d5:37:0e:94:05:4c:15:
43:a7:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:17:28 2025 by rpki-client