Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa
File: f3be981a-b818-3e2e-8d71-c19e831db0b0.roa (raw, json)
Hash identifier: 5v9b8M/BskrBcAUFRrLRfzFfljAbYX387XMcWpXCBCY=
Subject key identifier: F0:DC:3F:1E:F8:45:1D:40:80:2D:4C:D4:7B:E5:99:8C:1B:F1:A8:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246CF6896C95A5762F24274
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 71.162.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cf:68:96:c9:5a:57:62:f2:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=19385362-e68c-431b-aca4-f6026b5e0230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:a6:91:66:82:fb:c0:78:d6:b0:26:08:f9:
f5:de:77:be:c0:7b:10:af:49:cf:73:ab:9e:70:b0:
80:64:90:f6:a7:f8:5b:5f:06:d0:00:9b:ca:8d:88:
61:36:e1:49:e9:21:32:c1:0e:bd:3d:f0:62:6c:d9:
8f:4a:49:bd:dd:c8:fa:7a:82:66:cf:b8:13:cb:9b:
95:fa:86:4c:58:b5:f6:15:b4:fb:3c:58:fe:c8:14:
2a:6b:3a:e1:da:bf:e7:b1:9c:af:81:d1:cc:61:0d:
ba:47:66:ec:ef:a9:0e:e2:9f:e7:7a:38:3a:5d:71:
2b:97:4f:c4:d7:c2:95:50:0a:25:b4:43:4f:c2:2e:
bc:4f:76:44:b5:57:83:86:f2:0d:2f:33:3f:6b:60:
65:c6:e1:ff:11:d6:6d:fd:20:7c:7f:aa:99:7e:e7:
87:98:6c:df:c1:58:1e:9f:d9:c2:e6:f5:e3:73:ba:
3f:b7:1c:2d:27:f2:b8:51:56:72:95:81:7a:f7:5c:
e2:c8:4d:98:e6:c3:f4:71:62:33:54:77:cc:b0:6f:
57:88:e3:78:23:28:54:fe:ae:94:43:d6:5a:c0:1d:
5c:be:e1:28:3f:fd:60:78:d3:d2:0d:b1:7a:0c:de:
85:52:a2:b3:1a:58:3d:e6:99:d0:b5:51:a0:81:fa:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:3F:1E:F8:45:1D:40:80:2D:4C:D4:7B:E5:99:8C:1B:F1:A8:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3be981a-b818-3e2e-8d71-c19e831db0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.162.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:cc:7d:bf:ea:fe:8f:a4:8d:98:46:aa:63:80:30:41:16:40:
0a:74:82:35:57:da:ef:f9:70:14:70:f3:e5:0a:c8:f8:f0:70:
a3:29:59:a6:eb:cc:23:c7:b3:98:65:56:d1:00:00:6c:23:9a:
15:d0:00:ba:c4:2d:b0:86:06:22:c2:e7:25:33:46:e3:d3:26:
fc:4a:bb:63:e0:22:7d:76:75:41:cc:39:1b:a9:f2:52:b1:1c:
2b:e8:e3:58:d6:54:94:01:b4:c3:c3:39:6a:dc:ea:b4:ab:13:
a0:ef:71:c1:3e:2c:5a:b4:28:a0:34:ce:e1:fe:8c:69:24:24:
85:26:ee:6a:36:e6:44:c7:e0:f0:e3:a4:92:1a:db:8f:15:44:
34:14:38:37:1d:0e:32:b8:d6:33:a4:ea:6b:26:98:b2:0e:fd:
18:db:f1:c5:43:fb:0d:21:de:dd:c2:8d:48:60:09:51:d9:d9:
a1:13:47:41:82:80:58:8a:86:56:2a:95:b7:e2:4a:0f:6d:b4:
59:42:2b:6b:0e:d5:9a:f0:d5:1f:94:65:50:bc:01:04:58:39:
5c:37:c9:65:b5:34:de:e0:28:c6:10:3e:dc:46:bb:46:b1:25:
2b:b4:c9:f7:85:22:03:45:0d:74:90:d1:8d:c0:0f:c9:0c:f0:
65:c5:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:53 2025 by rpki-client