Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa
File: 3664426d-c4f1-385b-835d-18c7071aaaa1.roa (raw, json)
Hash identifier: Lg3U6Tbc6rxpOTNWDU58tG/0RJ0UyyBdpQHhbeuceAE=
Subject key identifier: 1F:0C:96:4B:A4:C1:FF:FA:A0:DA:0E:03:85:A8:2C:C3:FE:5C:F6:F6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04D11C9D2292E53669C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 96.249.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4d:11:c9:d2:29:2e:53:66:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8ef78725-dfeb-47cf-a6b6-89b1719d3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:0e:9a:b0:53:c4:3f:3a:98:7e:e6:41:18:
4c:2c:48:e9:53:23:7c:a9:0d:92:e7:62:2f:a5:86:
b9:8d:21:37:c8:bd:34:1e:a3:75:c0:b8:62:b8:ba:
86:43:e6:57:da:bf:b5:5e:c0:5f:b4:61:61:9e:20:
6f:7b:a4:9e:cb:63:26:7e:62:e6:4f:6e:34:6a:52:
9f:88:24:4a:ad:47:67:72:ff:09:ab:b7:29:4b:a3:
f1:14:a1:24:bd:05:48:e9:2f:41:80:55:c8:67:83:
3e:10:0d:4c:45:85:f9:76:07:bc:d5:4a:f4:15:09:
d1:0d:4e:99:24:11:e5:77:34:5e:34:88:c3:88:85:
33:9f:62:bc:3a:c4:31:93:33:a4:d1:06:ec:b5:6a:
3d:ee:d2:e3:89:05:b4:61:e6:7f:9d:7a:d2:72:8e:
0b:fe:70:7c:9b:35:4c:a6:67:84:ba:f4:ab:34:50:
d3:c8:de:41:27:67:29:e0:90:5a:4f:99:00:42:66:
27:ff:f6:b0:e3:9d:13:d5:96:62:f7:39:1b:79:95:
0b:22:55:fd:bd:7f:46:0c:20:3a:f3:08:4b:bf:df:
b7:e2:75:4e:2c:38:0c:2e:e0:ea:10:34:3d:42:93:
88:32:d6:b9:18:43:ef:91:ef:80:71:10:99:7e:31:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0C:96:4B:A4:C1:FF:FA:A0:DA:0E:03:85:A8:2C:C3:FE:5C:F6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.249.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:48:b9:77:9c:37:e4:e4:61:39:77:ba:60:6b:a9:fd:c6:d2:
1c:b3:f6:ed:4e:7f:9b:98:28:bf:b1:16:23:c1:72:d2:21:80:
9f:1d:f2:d0:09:6f:a7:b5:83:e1:ab:9a:dc:dd:8d:78:76:b5:
36:f1:be:40:0a:a5:51:9a:01:d2:ed:05:df:37:95:c3:7b:34:
2b:6f:8a:88:d8:ad:28:dc:eb:94:ad:41:3e:10:d1:5a:81:0b:
92:e9:15:55:d3:a4:bc:1d:b1:63:9a:45:5c:50:fb:41:67:fc:
6e:5d:fe:57:ff:61:9d:e4:90:bb:e2:a8:60:ce:dd:2c:bd:fb:
1e:04:f6:d4:88:6d:d3:81:35:cd:aa:ab:3a:0c:09:3b:03:a1:
a3:00:a2:a0:a1:4c:32:98:21:d2:fd:2e:19:7a:c2:ee:13:e9:
8b:0e:0e:37:66:a9:84:8b:d3:30:94:c7:c1:5a:a3:d2:d9:f4:
8f:9f:0b:7d:8f:c6:3a:20:85:44:51:bb:35:02:fa:69:7c:d6:
24:0a:2f:09:38:82:2e:e6:c2:a1:ca:e9:cb:39:dd:d8:dc:1d:
c6:ae:cf:96:7f:b6:6e:09:e1:27:91:ad:11:0f:45:18:69:da:
8f:3e:13:d1:20:16:a2:11:16:ca:cb:12:00:76:28:24:8d:34:
8f:f1:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:10 2025 by rpki-client