Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
File: e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa (raw, json)
Hash identifier: ICSRs7OZx+ZWXcQ4NuwlN39t40ARWlHqE8x3P++Qh8A=
Subject key identifier: 99:24:1C:59:85:31:06:D6:12:BE:88:07:4D:B9:0C:B8:6A:35:B8:BC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3296FA3C965BBA684BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 70.106.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:32:96:fa:3c:96:5b:ba:68:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=1fab2a8a-400d-48d7-979d-b00fbe2c0295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:ac:6c:48:87:ff:fb:8d:2e:21:c7:9e:9a:
f5:a3:2f:38:14:7f:8e:44:b8:6c:7f:79:98:76:46:
99:0a:ae:9b:ef:82:20:92:f0:f8:92:58:d3:96:2c:
c9:49:fe:75:30:87:1e:0b:fe:cf:8b:21:1e:61:aa:
be:ca:ab:82:1a:f1:16:db:d6:44:ce:3e:e2:81:6b:
41:71:47:e2:da:76:ef:19:fe:a6:fa:c6:65:db:0c:
a6:90:af:1a:d2:0a:d1:bd:87:72:15:0f:3d:f5:ac:
7d:3a:7d:d1:e5:09:b7:8a:25:e5:a0:0a:76:c0:5e:
a5:1d:ff:1e:8c:4f:f9:f2:3e:b4:0c:66:29:0c:dd:
39:40:ca:39:58:15:da:21:5d:9a:e7:f5:ab:17:32:
e2:c2:89:36:b7:e7:43:b9:46:8d:f1:64:c4:16:0a:
83:89:0b:65:0e:f6:8f:c0:4c:42:34:fa:27:a0:e1:
f9:6b:c0:d3:3a:05:8e:20:78:37:ff:74:d7:f7:43:
08:0e:97:36:14:24:5b:47:9a:28:50:b9:63:da:ca:
4f:85:db:9d:f0:49:75:f1:07:90:23:79:be:84:a3:
da:15:5e:e3:4e:f8:dd:f6:4f:04:be:33:49:67:e0:
ed:3d:d0:cc:f3:06:ae:f9:2f:c4:47:29:44:c3:a8:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:24:1C:59:85:31:06:D6:12:BE:88:07:4D:B9:0C:B8:6A:35:B8:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.106.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:4b:c7:6d:ea:a1:92:d7:5e:ff:80:cc:5c:2c:90:76:03:f3:
fa:8e:09:2c:2d:d3:32:90:d7:3c:d8:82:92:95:16:bb:1d:68:
09:87:08:0a:34:65:cc:74:01:8b:1c:ca:a6:46:15:bb:8d:4a:
ec:58:82:be:7a:9d:88:94:35:92:2d:c6:b1:9d:e2:cf:79:0e:
9c:e1:2e:d5:cb:43:f2:fb:74:ce:e2:96:29:d0:32:c5:d3:c2:
ad:65:c9:a1:77:20:01:e9:03:0a:85:e7:32:dc:1e:12:01:5b:
27:6b:bc:90:49:3b:28:6a:bb:1d:fe:3e:61:d1:eb:73:6c:36:
c7:41:b3:27:5e:84:f0:4a:5a:62:6f:23:28:ad:44:f6:76:e4:
40:9a:60:df:52:f6:06:e9:b4:20:54:de:15:87:d5:f2:1c:61:
71:21:15:fb:92:2b:11:51:56:44:38:ed:11:83:4c:8e:f1:6e:
da:20:f0:47:c4:47:51:5d:00:57:45:27:76:b6:ce:3e:b9:73:
f3:f0:4c:90:dd:59:2f:e7:56:22:c8:02:4d:c3:85:c1:aa:11:
d9:d7:f0:c7:f4:76:5b:96:ad:6a:90:ba:75:90:b9:ae:f0:28:
26:2a:42:f1:80:25:30:c3:53:12:52:9f:60:3d:ab:f2:3d:64:
b8:7d:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:26 2025 by rpki-client