Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa
File: e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa (raw, json)
Hash identifier: 4vw49yiWu4M0g/VDKQJBegaZyaoNshpxRS53zRML2O8=
Subject key identifier: 01:51:B6:5E:BC:6B:BC:80:3B:46:90:E2:F7:7F:FC:DD:31:25:B1:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C3577B0AAFD5DFE480D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 74.97.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:35:77:b0:aa:fd:5d:fe:48:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=b34f45af-b52f-4465-a781-f3d7ffcb84f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:0f:b7:2a:74:e5:00:40:9b:29:4e:dc:62:
97:8b:8a:3f:3b:b6:bb:99:f2:3a:09:07:45:8a:b0:
1d:d5:a2:34:53:96:7e:f8:94:cc:fc:49:0d:a6:8f:
e5:a8:38:be:ac:08:dc:47:f3:49:6c:3e:7c:3d:4d:
63:50:c4:6d:8f:15:01:e2:13:68:e7:2a:e8:d2:57:
63:25:4a:ed:bc:3a:f7:72:23:c5:97:1c:3f:f4:e1:
8e:bc:2f:25:81:23:82:a8:a6:1b:54:36:f6:6b:a6:
25:f8:d9:18:b8:03:b8:54:82:87:40:b2:ac:d6:9c:
93:9c:28:2e:24:3b:de:e2:0e:43:84:81:60:b8:91:
0b:d4:2d:c6:aa:50:cc:2a:0a:2c:07:a9:67:e8:d6:
84:d8:89:8c:5c:7a:7f:10:0b:ab:d2:36:64:27:42:
ce:c7:7c:71:79:97:3e:fc:19:fb:e8:69:59:95:5b:
ea:18:45:a2:77:b9:cc:02:66:c8:76:06:e6:36:e3:
ba:1c:02:7e:60:15:61:af:f8:b4:50:ef:39:d4:30:
48:8c:fd:aa:f8:ee:75:3d:aa:9a:19:90:31:c3:66:
1b:dd:54:d9:96:d6:68:ac:9c:08:52:76:e1:5a:cb:
cd:33:e5:c1:af:a1:bd:88:a5:87:53:32:be:63:c6:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:51:B6:5E:BC:6B:BC:80:3B:46:90:E2:F7:7F:FC:DD:31:25:B1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
74.97.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a0:22:e6:6b:c4:52:aa:6b:a9:db:0d:74:72:8f:0f:70:b5:
17:05:93:3e:b4:14:31:ee:1b:6b:5c:6b:d3:33:46:5a:68:da:
8b:b3:f2:7e:65:bf:71:f5:b7:bf:3a:a1:7b:ab:8f:0f:ec:7a:
62:43:dd:3e:ea:ed:a3:aa:17:c5:24:72:e5:93:d9:b4:af:d7:
b1:a6:bc:aa:68:fd:15:c4:98:6f:19:f7:d6:ad:4f:8e:a8:5c:
ef:5a:44:63:0c:0d:4d:f8:07:1f:8a:df:13:5b:9f:2a:b1:8d:
9c:ed:c1:98:36:0e:a4:2c:50:04:33:f0:6b:6d:39:7a:9b:a6:
41:d9:ba:bc:65:d4:0a:3f:06:bf:c8:f7:08:db:dd:05:8b:15:
a6:13:8d:65:f6:0d:2a:e6:44:59:4c:20:09:c1:e5:68:a1:c1:
a0:ae:8c:0b:38:80:2c:be:b8:8b:3c:60:10:62:79:2f:73:91:
ae:54:92:42:c5:30:98:01:f9:3f:c9:b4:8d:a2:d2:25:a3:ef:
03:83:e5:e9:bf:c2:95:a7:f5:67:e6:6b:b3:c6:b4:54:53:bb:
f2:cb:22:3d:11:85:e8:aa:b9:3d:32:00:55:bf:a5:6c:4e:7e:
ff:fb:06:ef:cd:3e:b1:ff:f7:0a:cc:71:6d:61:f1:46:96:3b:
28:12:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:46:43 2025 by rpki-client