Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
File: 0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa (raw, json)
Hash identifier: tRriT3iDjiZOrKINPONbg+d5hoMP0ZKDNl9RyeeZJOI=
Subject key identifier: AA:49:4B:D6:19:83:0E:D9:C0:23:11:6C:26:94:E0:07:17:11:43:39
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB42EA84CB3205CF1F12E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 70.23.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:42:ea:84:cb:32:05:cf:1f:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5bd1acec-1356-4478-bffc-9597210224f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c3:5b:cc:55:9f:b0:a0:7c:a4:b6:2b:06:83:
74:78:fa:b7:e3:a0:41:c9:74:a1:d7:49:f8:40:62:
bd:ee:cd:28:3e:9c:2c:66:b3:0c:61:d7:d7:0e:3e:
23:c5:61:4d:11:b4:90:25:89:7c:4f:7b:2c:63:65:
e6:96:d0:05:8d:1d:bc:d4:af:8b:1a:2f:5e:47:4b:
39:8a:b4:66:65:d5:72:16:23:8c:51:d3:69:04:d7:
2d:19:3f:d1:22:fd:9a:53:d1:e8:2d:bb:e2:ee:88:
11:f9:46:9c:ce:8a:be:27:d4:1f:19:ce:67:f8:33:
85:ca:19:df:57:b0:3d:a0:ef:50:98:a0:b2:a3:76:
7b:24:d0:61:64:f3:4d:7e:c4:4a:a7:72:71:50:2c:
1b:c9:09:2a:f0:28:bf:7e:25:5a:08:64:4e:14:b3:
0e:6a:11:f9:72:b3:f5:98:64:a0:fe:c3:ad:f8:ce:
45:d0:85:b4:b1:96:4a:54:17:c1:38:32:76:75:45:
75:76:7a:f5:ab:5a:ce:7d:73:4f:8e:fd:3e:53:53:
0e:21:5c:03:ae:d1:8a:0e:6c:7d:ad:f6:10:75:93:
76:b2:69:6f:1b:dc:84:1c:30:0a:af:db:e5:30:60:
e5:90:f8:4f:a1:98:7c:1e:93:c5:bf:cd:bf:de:c1:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:49:4B:D6:19:83:0E:D9:C0:23:11:6C:26:94:E0:07:17:11:43:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:f5:6e:ae:9a:14:2c:a2:be:fb:3d:8f:e1:3a:ff:44:07:a5:
d6:99:44:cd:45:df:26:43:6f:df:a0:aa:0f:ee:37:70:57:07:
7b:79:3c:54:da:5d:4c:a7:88:19:7b:61:cd:69:ee:a8:c1:16:
3d:e5:2a:e2:5a:9f:3e:0b:9c:44:cc:8f:86:6a:0e:2d:be:af:
30:bf:dd:d8:32:23:f8:d3:49:7b:0e:06:86:9b:27:23:e0:ec:
d9:8e:d6:1c:f3:97:fa:b8:20:cb:ed:60:58:56:ac:c3:44:97:
dd:b2:a7:ff:3f:88:b8:40:ad:28:d5:7f:29:b8:71:a7:74:c8:
3a:bc:f6:9a:8a:1f:82:23:c1:3f:0a:62:6f:72:55:4a:b3:27:
05:20:85:ac:e8:4b:b7:cc:40:2a:f6:0c:80:61:23:63:2d:63:
7e:e8:45:70:f7:10:ef:d2:89:fc:31:90:95:78:fd:31:c0:6d:
e9:f5:24:c7:7a:af:d7:ba:e3:f9:63:a9:26:3a:6d:ed:30:e3:
58:18:bb:40:e9:7a:dd:9e:94:22:b7:d0:a8:92:81:27:f3:5e:
9b:7f:45:a9:7e:d6:f6:ca:2e:61:b9:94:fc:b6:59:94:9a:98:
0f:4e:18:ae:65:18:6d:7c:e7:39:ec:1e:04:1c:2c:05:04:3d:
01:b8:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:05 2025 by rpki-client