Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa
File: fadf5763-ad1a-33fa-b59f-332991248b53.roa (raw, json)
Hash identifier: y5jj6LTlIz6WWbTsDsu+5ufsP3dcCStWawUlP0pQHSU=
Subject key identifier: 8E:4F:13:34:93:1E:45:5F:53:E3:F0:44:C2:97:E6:8D:C6:1B:D0:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB422DDEFB29ED29FF3960
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 209.158.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:42:2d:de:fb:29:ed:29:ff:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9615f81e-2015-4b29-9c5f-0e6976240a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:fc:08:08:53:fa:e3:1c:62:d9:da:d8:50:
e2:43:9a:d1:7a:f6:a2:7e:af:a2:98:c0:58:18:75:
90:79:bb:10:af:b3:30:c0:4e:1d:11:41:a5:51:bb:
e9:da:37:6b:e1:29:d3:82:3e:c4:ea:fb:b0:77:e3:
56:65:b4:c5:b1:05:b2:90:ba:1f:6f:ad:65:29:d1:
bb:9b:e6:ff:cc:b8:4f:bc:fa:0f:6b:e1:68:d1:02:
dc:da:de:e4:a4:4c:3c:0b:f5:11:f6:76:9b:e8:cd:
0a:21:0a:5e:47:d5:a8:02:a9:a4:5d:cf:65:c4:74:
52:2a:4b:0a:94:71:f4:39:ac:ad:58:dd:c8:18:75:
a3:d2:c0:f5:4e:b7:8a:77:7a:48:98:97:f6:18:0c:
81:66:65:b6:42:57:d6:8b:6d:53:e2:79:04:b5:d5:
c3:c6:d5:e3:cf:a9:d3:ee:67:e9:b3:2d:0c:b4:72:
42:71:a7:8d:df:1f:95:2d:40:b7:01:48:a2:d7:72:
be:7e:00:30:b0:c5:08:e3:69:44:58:cf:35:5b:e6:
50:07:ff:d0:20:21:d4:b0:71:52:2b:29:ae:b6:d2:
86:64:be:55:1c:a9:79:b1:eb:02:35:9d:ad:ed:1b:
50:76:ec:7e:f9:79:f1:b7:c4:b2:fe:82:c9:cc:5d:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:13:34:93:1E:45:5F:53:E3:F0:44:C2:97:E6:8D:C6:1B:D0:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fadf5763-ad1a-33fa-b59f-332991248b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.158.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d7:ce:5f:bb:98:cb:6f:44:62:74:08:51:90:57:10:19:8d:
5e:f2:32:3f:de:5b:09:be:e3:58:f0:de:3b:0b:04:0d:b7:ae:
6c:07:6b:b7:25:f7:91:54:3c:2e:57:ca:50:c9:28:d6:88:45:
cf:f5:21:e3:b5:95:53:77:50:2b:6a:bc:56:48:95:32:5b:ef:
e9:ad:e9:5a:f5:63:7a:5b:e9:32:b9:10:cc:9e:6f:f1:a0:d7:
85:9c:ad:62:ae:cf:d4:99:47:ce:4e:cf:28:75:0e:d6:ea:87:
b8:d7:38:4c:7e:ae:0a:b0:b0:fc:6d:fb:2a:61:e4:5f:7c:30:
ff:29:ec:c7:01:15:92:e0:e9:e8:ab:34:30:f0:fb:33:03:d4:
02:8c:89:d2:ef:35:45:b2:73:d8:d9:b9:35:63:0b:be:9f:ac:
ae:3c:b2:07:13:02:f6:7c:c9:40:dc:e0:18:41:47:d0:7f:fd:
6f:a9:e2:f2:50:1b:cc:a7:e9:37:e2:ab:4a:e3:50:ba:05:5a:
e5:c4:91:98:d3:0f:91:c2:71:cd:be:63:16:f2:2a:07:3a:00:
e4:c3:b9:22:af:20:70:cb:ac:b9:93:48:ea:95:e6:10:d5:c1:
17:91:fa:b3:97:58:1e:7f:38:20:33:65:db:77:2a:83:6c:a8:
69:2c:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:25 2025 by rpki-client