Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
File: 3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa (raw, json)
Hash identifier: Ml+H5q+NFGE3tFo0Ye/ReMnBd4tO6P3+JhdjFpN9llg=
Subject key identifier: BA:22:B9:E2:6D:97:CE:5C:4F:2D:58:BB:F9:38:C8:D3:32:D7:89:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B552A8796FE91AE1D2100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.194.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:55:2a:87:96:fe:91:ae:1d:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=91c7b43b-25ca-49b5-bd49-7522d2908d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:38:12:3d:46:d8:ab:65:4b:9c:26:f0:3c:
73:44:59:99:5c:f8:c8:30:f9:5e:7b:e2:fa:1b:27:
8c:24:14:b6:2e:5c:41:60:cb:c0:20:93:2d:d4:be:
0d:7f:06:29:4f:c9:66:59:66:94:3c:3e:9d:7a:f0:
f8:5a:c7:c6:c9:0c:46:f8:bb:3f:ca:d9:8a:08:3b:
5c:33:59:6a:e9:64:53:63:ad:1d:45:82:cb:de:ca:
74:64:a0:66:04:cb:16:72:52:cd:46:e1:1b:6f:89:
bc:f2:03:d6:2c:88:5d:13:a7:80:dd:ab:45:66:05:
25:5b:d0:42:b4:4b:b1:f7:b5:dd:99:77:f4:2a:90:
6f:46:89:21:52:15:43:70:f3:1a:49:f9:46:a4:d6:
59:e2:7a:b6:e1:3f:bb:8e:cc:57:2e:09:4a:77:ac:
a2:c8:0c:c6:b2:66:db:2f:fe:25:d8:50:a0:de:55:
3f:01:2c:51:10:5a:d5:84:b0:07:d9:17:0a:93:dc:
5a:ed:05:f0:51:8f:d6:8d:8b:55:bc:fc:8c:66:ce:
e1:ac:03:a1:17:d9:7b:fb:f6:ef:94:56:a8:bd:9e:
2d:00:7a:fd:f5:17:62:1b:67:d8:f1:eb:f1:d9:3f:
f2:1b:0d:40:94:df:20:93:19:14:ea:f8:c2:d1:b8:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:B9:E2:6D:97:CE:5C:4F:2D:58:BB:F9:38:C8:D3:32:D7:89:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.194.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:00:5f:a3:d5:bf:98:56:73:f2:ed:57:ca:1a:79:c9:d7:08:
c0:43:40:f7:08:4f:2f:8e:c7:73:f1:f3:c6:b4:76:20:44:a8:
19:11:af:a5:90:a4:04:6b:69:76:4d:cf:c3:18:29:1c:f2:47:
ac:de:99:9b:fe:71:17:52:56:46:1d:be:17:22:f6:e5:cd:16:
15:53:2f:40:6c:be:4f:60:68:1a:cb:16:23:e6:cb:12:8b:45:
bc:39:a1:b7:78:6a:24:38:65:5d:2d:92:08:77:a2:12:e8:19:
99:a4:13:be:70:d6:23:72:1e:0c:31:bc:a6:18:1c:55:96:86:
33:1e:db:e5:85:73:df:45:e0:bd:2d:7d:65:dd:2f:90:63:95:
0a:8a:06:99:8e:ac:b3:d4:a9:fb:8f:6b:dd:16:b9:55:e5:dc:
f4:35:cd:94:4a:1a:ac:13:ef:66:35:b5:4a:6c:dc:e1:12:ba:
31:02:ea:05:f8:dd:54:6a:2f:84:69:e1:51:01:83:51:0b:9f:
5c:10:cb:e4:8c:61:f0:69:4b:92:cd:9e:83:fd:62:0a:c3:25:
87:d1:8d:34:cd:2d:7d:b5:d6:88:b8:46:ff:5d:4f:93:e2:56:
99:ef:f1:be:04:47:26:c2:e5:47:07:b5:ed:97:e4:79:33:e6:
3c:42:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:06:35 2025 by rpki-client