Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
File: f49fd56f-b68a-3afa-a0b4-076325835c0e.roa (raw, json)
Hash identifier: CaBD1PrcXjtHjnDl7Uv6NMwj/HdJATFQy7k7WnB3hCE=
Subject key identifier: 80:4E:5A:07:52:5E:3E:9F:99:6A:35:2C:72:C3:B6:62:9C:A2:20:2F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC35DE02293433716A0D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 65.44.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:35:de:02:29:34:33:71:6a:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=9f459e3a-fd87-4633-bc5b-f1684b86820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:c4:10:77:9d:7e:83:33:e8:a8:5b:40:12:
e3:07:25:db:04:c9:b0:98:5d:f8:f5:e6:d1:6f:78:
4d:ec:fb:af:a0:a2:b1:10:f0:01:8b:5a:9b:a9:30:
a1:fd:d9:73:6d:21:fc:7d:12:a0:72:39:28:83:f3:
b1:5f:4e:a8:36:9c:b5:05:90:ab:3e:18:2c:08:b4:
52:fb:02:62:67:76:49:89:ce:91:f2:9a:b5:13:50:
dc:20:63:a4:3e:12:4d:92:e0:da:c3:ed:87:f9:68:
10:ec:90:85:00:99:85:87:26:b4:95:1d:19:6a:6f:
fa:44:1d:36:08:e9:8a:f3:e4:8f:6d:c4:ad:a9:64:
7f:78:a3:01:13:76:d4:70:8e:e7:68:01:9d:6d:c1:
f4:1f:08:92:21:36:31:23:73:70:00:68:d0:a0:b1:
8a:08:fb:b8:8a:29:a0:de:f2:13:c9:15:cb:2b:3f:
ba:ef:93:44:69:90:ca:99:ee:ad:fb:53:14:d0:41:
88:50:f0:f3:4e:7d:85:2d:83:a6:e4:27:85:6a:03:
d1:bd:7f:73:b0:16:3e:71:13:d1:7c:fd:f1:dd:b2:
c9:b6:cd:1e:a4:30:7a:2d:d4:84:f4:ba:99:7c:b8:
55:e4:f8:a1:a7:52:2b:47:3d:65:b9:80:aa:0e:28:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:5A:07:52:5E:3E:9F:99:6A:35:2C:72:C3:B6:62:9C:A2:20:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
65.44.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e6:fb:c3:00:7d:93:7c:16:ea:40:da:54:a2:5a:88:ae:60:
91:8a:9a:46:8e:34:f8:94:bd:ea:38:a5:fc:fa:ba:2d:ae:32:
bf:e9:c9:a6:9f:e8:0f:65:d3:c0:07:24:c7:d4:ff:4c:72:f3:
25:63:34:4f:42:bb:82:84:38:53:60:dd:91:a8:c7:62:1b:0a:
6b:71:3a:e1:e4:c9:fb:aa:69:31:ba:7f:bf:e7:c1:97:3c:04:
c8:8f:98:2b:bd:5b:6f:eb:bc:fa:ff:ac:67:20:fb:ca:fd:08:
8a:35:9b:81:83:36:13:f4:19:20:93:50:8c:76:97:86:8b:be:
1d:c1:9d:3c:62:93:3b:84:04:60:6b:17:40:4a:72:cc:17:e9:
19:ce:99:3a:25:1f:e0:01:de:df:fb:f2:46:4e:25:75:06:77:
59:3b:c0:0e:b5:3f:6c:70:9f:c5:5c:71:1f:f2:9e:36:18:f6:
5f:b5:f9:56:32:f0:8d:f5:03:b7:ca:5f:cd:5d:1d:e5:db:ef:
0b:1d:c2:5a:cd:62:5d:d4:90:ec:26:e8:4e:d2:93:ff:b6:00:
bc:10:4f:ed:11:0f:71:c7:da:a2:1c:80:ec:2f:eb:4c:31:43:
38:ee:4d:a6:26:b4:cf:bb:c3:43:17:55:30:ff:f3:df:36:eb:
7a:64:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:20:25 2025 by rpki-client