Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
File: 33dd2e0a-3c38-3dfc-8538-02c19f370233.roa (raw, json)
Hash identifier: uBq0OZGIchpm38D5seJgd4wvjaT1ZjzNqI7HIZzp7rE=
Subject key identifier: 33:F3:58:10:63:7A:57:F7:26:24:7F:66:E0:D6:AB:C4:84:50:B7:59
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04643FED074BA28781040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 199.202.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:46:43:fe:d0:74:ba:28:78:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=6cb25c82-7e20-4d4c-bbf4-66d290f6925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:08:56:19:e8:4f:4b:0e:57:85:33:e9:26:
92:3e:e1:39:47:1f:e6:bf:bd:b7:dd:5a:78:47:10:
0f:40:f8:f7:65:34:d8:42:fc:6c:b0:21:f6:1c:3b:
af:90:e9:ee:dc:67:16:24:42:97:cf:cf:7e:e9:cc:
dd:f8:16:74:60:82:9c:4d:57:bc:c2:8d:6e:e6:82:
ab:b7:d5:1d:95:1a:da:81:6e:d2:09:77:86:92:78:
c1:11:0e:6b:74:45:fe:8f:40:f7:51:5e:19:0b:c3:
65:fa:73:5f:d7:26:80:1e:aa:9b:ff:c2:34:ac:5d:
ea:61:fd:bb:b3:b8:02:61:e9:52:c2:60:74:8c:fc:
93:77:44:64:0f:69:79:3d:33:72:4e:e0:87:5d:ce:
fb:4c:29:84:38:dd:4e:5a:e8:1b:15:57:2c:8f:e3:
cb:17:e2:1d:7e:06:01:29:87:ea:bb:3b:51:a8:fc:
16:95:96:3c:b5:8f:07:b4:f6:08:25:7b:83:97:99:
33:8f:f7:71:8c:5c:9d:d7:ca:95:32:b1:72:f1:55:
d1:d4:32:43:04:bb:04:59:8e:c4:9d:94:9d:8c:ae:
e7:d0:5d:10:e6:82:e7:00:49:8d:ed:c0:1c:c7:e9:
90:24:d7:fd:ac:bb:48:3e:d9:fa:3b:6e:9c:30:53:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:58:10:63:7A:57:F7:26:24:7F:66:E0:D6:AB:C4:84:50:B7:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f4:64:55:dc:5c:01:5d:66:d7:68:0e:c3:07:2c:f7:ba:da:
bb:0e:7b:93:7a:2f:46:ce:70:d8:f2:8f:6d:32:8a:a6:6d:ba:
8e:a6:8b:1b:76:b6:19:bf:74:f0:bd:80:a4:a2:60:00:2c:38:
46:7b:bb:41:14:52:8f:96:7a:02:9e:9c:60:e2:57:c4:48:67:
3a:4e:a8:2f:2e:f3:a8:c6:53:d9:3b:90:76:b4:a2:96:ae:9a:
ae:80:3d:5f:b0:0f:a3:c9:f7:76:54:2e:9b:b2:f6:de:15:9a:
8f:9d:b0:8b:0a:d9:03:91:34:7c:c4:dc:cc:de:74:58:76:55:
30:0b:29:13:e1:cf:70:6c:d9:37:92:66:c1:47:d9:07:14:42:
fd:ff:16:19:0f:16:f7:1a:b6:d7:ad:4d:a8:07:4b:3e:f7:83:
4a:d1:be:45:75:08:a6:25:a0:b9:b6:da:7d:f4:96:13:d8:46:
46:f9:96:17:48:e9:2a:e2:44:be:3a:b3:d6:e1:35:9d:37:68:
05:b9:74:44:93:e8:52:7d:4f:f4:7f:37:c0:64:8a:09:2f:91:
47:98:e8:4f:fc:5f:0b:88:ed:6e:07:8b:f0:b0:00:69:82:c2:
87:00:b6:50:ee:23:26:d9:be:20:0f:04:b6:2c:e4:44:d3:8b:
74:5e:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:33 2025 by rpki-client