Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/300a97b0-4aa4-322a-b05c-3e1ca4151d1a.roa
File: 300a97b0-4aa4-322a-b05c-3e1ca4151d1a.roa (raw, json)
Hash identifier: dP8hv+0tiMu2wEZ8/9r6G2EENaSPQvbiqnKekG2Wopg=
Subject key identifier: 8D:68:D9:0E:E2:2E:98:15:5C:3D:38:6E:41:E1:B1:62:81:01:F5:C7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B5F45667EB9DBDBCAE740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/300a97b0-4aa4-322a-b05c-3e1ca4151d1a.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.203.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5f:45:66:7e:b9:db:db:ca:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=8ea362e5-200c-4ee4-bde1-a2295517b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:fd:24:97:31:ae:c0:6e:d6:4a:9b:30:67:
74:f7:aa:12:9e:7d:44:d6:ac:6f:52:17:04:1b:81:
bd:0c:ea:c4:86:62:be:32:4c:82:8a:dd:7b:08:02:
0b:4d:f9:36:4f:2b:86:85:7b:e2:9a:9c:2c:3f:07:
93:15:aa:50:8e:b4:ba:44:d4:cc:45:94:57:0d:c2:
73:93:77:c2:23:94:40:77:b1:d5:39:46:ff:0f:c4:
35:ce:ee:21:a9:83:35:c4:63:45:53:14:c6:2c:85:
de:a9:95:0c:7c:68:7c:91:f2:54:02:ac:90:56:ad:
9b:04:1c:9c:eb:2f:5b:fc:0b:15:da:12:ca:8b:a1:
91:65:27:66:08:7a:89:74:98:45:22:1e:09:f3:88:
3e:c0:67:75:0f:1d:30:0f:08:a5:7b:c9:a2:40:0f:
3a:07:63:3d:e8:7a:f1:e2:a8:62:7d:91:e9:09:1f:
62:37:aa:4c:e7:44:14:bc:83:51:a2:d5:ed:8b:cd:
5f:8a:01:16:f6:42:d3:b9:28:d7:47:cf:f6:fe:2d:
e0:e6:00:b6:fc:5a:27:45:e7:c0:4d:d8:9b:e1:d5:
0e:bb:5a:c8:63:90:2c:cb:cd:04:20:b8:23:74:0e:
3e:a7:dc:47:c5:09:80:4a:35:96:72:23:99:5b:97:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:D9:0E:E2:2E:98:15:5C:3D:38:6E:41:E1:B1:62:81:01:F5:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/300a97b0-4aa4-322a-b05c-3e1ca4151d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.203.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:90:4c:ac:ab:5a:cc:82:04:c4:a4:06:79:57:ea:14:3d:20:
7d:ee:89:76:e5:17:1a:17:c6:17:37:83:ca:e0:bd:a7:9f:58:
46:00:30:47:7c:78:00:26:be:ee:10:d4:62:3f:46:f0:02:41:
59:de:b6:50:3c:41:fa:0e:00:61:da:89:11:0d:ba:9b:96:f6:
ac:0c:fe:cc:b2:26:4b:53:f8:78:59:54:14:01:c6:bd:77:51:
b6:e4:94:59:39:f2:14:db:b4:08:68:d1:92:98:36:11:96:cb:
59:c7:7a:94:a6:f5:74:74:37:4a:12:86:3d:cd:88:c6:77:fb:
f8:d3:f4:93:72:c9:23:35:18:bd:68:dd:9a:5a:92:52:ad:f6:
24:c3:dc:dd:69:b6:9c:83:24:b4:b9:dd:2e:8d:ec:c6:12:63:
a8:53:b9:02:9d:8d:e0:80:06:69:94:d4:8d:cb:2c:c2:7f:65:
03:08:7f:98:3c:70:45:ee:23:b6:23:e2:d7:78:6b:18:4c:34:
6a:b9:f6:e0:a2:f7:15:a0:e2:0f:00:41:6a:5b:f7:49:b1:c7:
50:92:90:de:15:52:36:92:4e:6c:81:c5:39:69:be:8c:fc:13:
c5:60:39:65:4b:c4:48:a5:b7:c9:97:93:d8:18:ca:38:4c:50:
0f:55:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:46 2025 by rpki-client