Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
File: 1fab77cc-80d5-3ad0-a822-d65320d28965.roa (raw, json)
Hash identifier: kutg75Az/pj0lcCvlsdYqZ57MWsFe7IHZXiJ+VwBzRo=
Subject key identifier: 86:61:0D:AA:6A:F9:6A:33:33:B3:E6:FA:1B:0B:4B:35:FB:6E:32:C4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04B7CDC77C1684D2E1200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 173.70.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4b:7c:dc:77:c1:68:4d:2e:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=3e92d96b-8734-4697-8b28-46dbfc41fe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:5f:93:ed:e4:e7:29:ae:07:06:34:3c:01:
28:86:86:30:62:c1:5f:83:2d:a6:8e:f7:65:2b:2d:
e7:31:cc:cd:a8:b6:f3:27:cb:dc:47:26:ab:0c:c7:
f1:e2:df:7b:9f:ff:d4:a1:90:13:82:97:28:76:83:
6b:23:a2:fa:77:71:99:2f:77:1e:8a:a1:b2:96:d1:
4f:1d:93:a6:b0:bd:2b:26:3d:5d:29:b8:77:91:50:
40:c9:5b:65:8a:3f:57:bd:15:c1:e9:ac:02:98:3c:
c4:44:19:d1:e5:e3:c8:4c:57:e8:e4:26:49:76:e1:
4c:da:7d:50:08:d0:c7:5c:3a:a0:fa:4f:20:65:10:
2f:ad:75:ff:17:77:45:87:7c:0f:91:ed:c9:5d:d8:
f2:d9:d4:cb:c3:65:d9:31:bf:11:0b:9f:e8:e6:e8:
ee:df:7b:fd:f6:05:29:5b:9b:90:00:9c:f5:e3:b7:
30:7c:e0:3e:fc:e3:d9:28:6b:35:d0:d2:26:1e:d8:
e0:ea:2b:e9:e6:c0:86:54:ef:a9:15:6b:bf:40:25:
f6:3d:d1:e5:80:e7:a6:4f:ff:13:f7:f8:7c:8b:5a:
77:86:3e:a1:18:23:b4:db:dd:94:b1:53:f1:99:bc:
4d:8c:51:b2:dd:21:a0:be:f6:a0:16:8d:1b:1c:ee:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:61:0D:AA:6A:F9:6A:33:33:B3:E6:FA:1B:0B:4B:35:FB:6E:32:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:42:4c:36:f6:cb:90:c9:1c:15:92:ff:8e:ff:ff:77:13:76:
0f:fb:72:c7:2e:a7:a7:4b:df:c4:e3:17:85:ad:fe:3c:42:b2:
c3:34:0b:c1:70:e1:03:96:44:df:b5:4b:d6:18:bf:ae:e5:72:
fc:5e:f5:dd:2c:24:58:8e:26:77:52:18:96:9a:6a:69:26:dc:
aa:b5:26:ce:06:2f:7c:e9:8c:05:ef:76:09:a3:81:04:d2:47:
99:7a:10:5c:a3:93:4d:38:9e:9c:f0:71:e7:5a:81:d7:82:00:
3d:dd:65:48:40:c7:78:e0:01:7f:7c:d0:f2:d4:68:d8:ab:83:
c8:af:7d:88:96:a3:54:dd:d7:25:d1:ad:16:68:ec:8a:ce:c6:
59:db:af:bd:4f:f1:45:00:8b:25:71:58:3b:10:7d:f2:e3:ea:
d3:7b:ec:88:8c:90:6c:de:7d:fe:d3:92:0c:26:a4:83:8f:90:
45:1f:fc:9f:09:e1:f2:65:da:fe:33:13:06:2c:bf:ed:f2:e8:
ef:4f:ea:4b:ef:2d:21:76:fa:22:58:95:ba:38:0e:4c:fd:74:
ee:ea:f8:66:58:2e:cd:c6:6d:1b:73:09:20:15:bf:48:2b:e0:
00:f8:bb:2d:a1:19:6a:6a:bb:4d:99:ed:6f:29:42:5e:83:17:
f4:6b:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:29 2025 by rpki-client