Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa
File: 22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa (raw, json)
Hash identifier: iuakPE8XwIIoJz1jD9A9gMNlyEj0iI6RZe6Fribs8D4=
Subject key identifier: 75:CD:B9:5C:B7:FD:55:97:31:F7:1B:E0:60:DA:6A:2D:31:8B:A0:07
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F050E44BBE3FB3E5308B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.22.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:50:e4:4b:be:3f:b3:e5:30:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0cba653b-ae6f-4faa-b4e2-c20fe6617ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:5f:4f:54:c3:6b:68:05:bd:e0:cc:4d:49:
40:80:b3:3e:06:16:94:df:55:58:bd:e7:db:12:1c:
97:15:29:17:26:9a:47:2e:3d:94:2d:15:d9:3d:92:
67:b8:1a:27:4b:67:49:35:f6:17:30:30:16:22:15:
75:3f:1d:44:a6:ae:10:11:3a:73:12:29:48:4b:73:
01:b2:90:d2:96:9a:7f:bd:6b:1d:48:36:11:be:d6:
e7:8c:9d:d5:75:9d:cb:84:65:f9:58:df:d0:d0:27:
11:15:3d:87:25:95:c6:b0:ab:4f:a2:29:d4:08:80:
82:08:fe:a6:7b:89:ab:cd:97:0d:bd:24:48:75:ab:
8c:96:5a:2f:27:b3:19:bc:41:4e:bf:d4:60:dd:76:
44:5e:35:31:91:52:70:74:d6:c7:b1:34:3a:d8:85:
d9:54:bc:f4:24:b1:db:61:03:20:29:43:7b:38:c9:
ca:26:89:42:5e:69:0f:59:39:dc:25:2e:a6:2c:4b:
3b:46:00:d4:c2:d7:18:38:0e:16:13:5b:8b:51:82:
a2:80:1a:a9:af:d8:2c:9d:ec:3e:e5:d2:e5:bf:49:
58:45:0e:d1:5e:98:19:03:56:81:90:cf:75:a1:fc:
69:c5:3c:c0:16:23:df:ec:da:9d:f5:f2:97:18:17:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:B9:5C:B7:FD:55:97:31:F7:1B:E0:60:DA:6A:2D:31:8B:A0:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22a1a08e-ade9-3ce0-8ecb-1cedcfcd8433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.22.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:38:bc:48:14:32:62:60:27:98:06:06:1e:3c:8c:5f:ce:f1:
8f:d7:0c:30:d1:eb:47:a9:ba:39:21:b7:8c:37:6d:53:73:7c:
c1:70:7d:05:4f:ae:87:d2:d6:ad:f4:20:79:46:98:23:7e:f5:
1c:af:cd:a6:31:51:81:25:65:42:14:7a:1b:8b:aa:e1:20:69:
ca:ad:02:cf:d6:bd:07:55:1c:02:de:14:fd:85:f9:84:dd:ce:
71:2b:c0:94:b5:41:81:8a:b8:8a:ab:be:a9:b7:52:9c:0d:76:
c1:dc:bc:a1:30:55:4a:5d:bf:9e:41:9d:28:5b:60:86:d8:86:
d9:7e:bb:0b:76:23:8e:73:e7:73:4a:04:33:49:71:c0:51:da:
b2:bd:e9:32:57:47:6f:71:68:64:86:87:92:db:d3:d9:b8:67:
39:0f:21:8a:2e:58:47:0b:79:86:40:4d:ea:c8:f1:f3:b9:7a:
07:87:c7:52:1a:06:50:2e:91:98:7f:c8:d8:30:55:08:08:a4:
cf:96:f7:6c:10:c8:83:87:81:ed:ea:13:41:6b:d2:a0:db:ac:
92:3d:90:d6:47:8b:64:3e:1b:84:0a:a8:38:ae:37:b2:d5:4f:
4c:e1:7e:a1:14:cd:62:78:4c:b6:aa:a8:6f:2a:c3:eb:b6:08:
7f:47:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:09 2025 by rpki-client