Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa
File: 35c1df24-99da-325c-ab92-21410a3f50a8.roa (raw, json)
Hash identifier: cr+UJ3W/qHD18MO3iK3B6SBBxdnSiKPzeol+6z/MdYg=
Subject key identifier: 34:01:CC:5A:72:B6:5C:43:C7:E2:60:4E:8F:ED:2D:F6:DE:3B:71:42
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584823955687BE8AB66683592B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 71.114.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:56:87:be:8a:b6:66:83:59:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=11263b6f-5578-4836-a4e2-b6732489a528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:78:c9:8c:6e:49:1c:e8:53:46:dc:b6:df:
13:1c:c4:d6:05:41:43:ff:18:e8:6c:9e:bf:08:6e:
5d:eb:32:e5:6e:8f:35:fd:60:ba:5f:c5:85:30:62:
fe:17:ea:22:6e:ca:cf:ad:f3:d0:a9:20:8d:b4:c0:
e8:d4:1e:c6:23:0e:fa:45:59:59:c0:af:22:cc:0d:
3e:35:eb:19:97:0b:13:02:49:e4:96:41:06:c5:42:
03:be:63:ab:3e:de:15:f4:2f:9a:6c:ef:54:8a:bd:
98:4a:dd:e7:e4:70:ad:9d:bb:d4:64:35:6a:09:ba:
9d:85:94:d4:fd:61:12:2c:69:b2:42:34:bb:8c:b3:
b4:6c:d4:08:ca:45:88:d7:67:63:c9:d9:0e:bf:06:
10:5f:85:e2:91:be:8b:81:8c:19:a2:95:46:44:05:
54:9d:3e:6f:24:b3:1b:89:75:92:90:50:88:95:5d:
45:01:27:06:f6:88:eb:53:6d:1f:66:a8:a7:43:db:
00:16:1c:ef:5c:91:c2:98:a7:66:87:94:cb:6d:f3:
3b:1c:66:be:f6:19:a4:72:86:0f:fc:df:34:c9:2b:
14:35:ed:50:d6:43:65:8b:40:b6:04:a1:b2:5c:98:
62:6e:93:4c:2f:4a:3d:01:b7:6f:8f:68:21:97:df:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:CC:5A:72:B6:5C:43:C7:E2:60:4E:8F:ED:2D:F6:DE:3B:71:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.114.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1d:2b:22:1a:e3:21:d4:89:7b:c4:b7:f9:11:f2:c3:f6:2e:
6c:e0:41:b5:cd:54:49:0c:94:40:bb:5a:bd:72:02:d6:81:b3:
58:c3:95:5f:2f:25:8f:76:9f:85:09:5b:85:e4:11:8f:57:5b:
13:23:11:1a:39:0d:b8:06:f9:73:71:d0:1c:9d:a9:69:96:90:
ad:2e:00:8f:02:43:c7:14:97:ed:84:c7:7d:64:4e:6b:04:94:
88:d8:11:aa:19:c0:b8:3d:58:c8:c1:90:00:d4:f2:a8:9c:b1:
74:84:23:4b:ff:07:83:52:b9:63:e0:d2:47:29:2f:68:a3:11:
4e:d7:87:26:d9:a1:b2:8c:9f:90:98:f5:f0:80:de:8d:de:a4:
1e:46:7d:3f:e2:19:f9:1f:3f:e7:ef:15:86:87:24:b0:59:2a:
a5:45:cb:8b:5a:52:1d:6d:d1:1d:9e:cb:2c:c6:0e:05:2e:24:
21:8d:e4:7f:32:9a:dc:c1:98:cf:21:5f:26:52:82:96:96:bc:
70:fb:0d:27:f5:ce:3b:1f:f2:6f:65:02:38:e7:22:e6:ac:e0:
f4:9d:df:90:78:09:9e:4a:37:fc:dd:60:ed:b2:84:1d:3a:91:
c2:ab:85:23:ef:a9:93:17:8a:aa:31:45:0f:f4:6d:f9:62:f5:
c1:a6:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:20 2025 by rpki-client