Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43d74b33-8437-3b0f-bf94-d20b454b6ca6.roa
File: 43d74b33-8437-3b0f-bf94-d20b454b6ca6.roa (raw, json)
Hash identifier: APIx+0rttT+nfLauTj+dyIor2NFQrUFRB0qomiUqMCE=
Subject key identifier: 26:15:3B:FC:D5:A6:3C:A0:D7:7B:E7:BA:E6:F7:71:BB:CA:25:CC:0B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04EC748AC71ADB6A6B980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43d74b33-8437-3b0f-bf94-d20b454b6ca6.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.109.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4e:c7:48:ac:71:ad:b6:a6:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b044bade-eba0-4bb5-80b1-ee3e82e1350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:cf:99:c5:3e:b4:01:ad:fb:14:e5:93:bc:
a6:b8:00:1d:04:fe:55:81:f1:66:d1:ca:1e:6d:ba:
b9:04:f6:ac:f5:f2:a9:28:a0:56:45:60:55:31:7f:
f0:a0:0c:3f:fd:b2:31:73:20:6a:9f:de:8b:8b:d6:
6e:cd:35:f0:c9:b4:dc:3f:d2:b3:4e:77:cc:a5:a8:
96:4d:72:00:11:58:c3:32:4f:a0:d2:50:79:5a:28:
7f:c6:c5:25:70:3c:4d:4b:ed:7e:90:42:2c:00:f8:
dc:c7:7c:fb:2a:46:80:b5:f4:26:ca:2c:0f:92:89:
33:53:fa:3f:71:45:65:2a:c7:01:70:bf:8a:db:ba:
59:13:3e:24:44:3b:7f:ae:b1:45:11:43:3b:48:1d:
91:c0:54:33:cd:20:76:3d:76:ff:6e:ac:4f:21:7f:
06:93:6f:f9:99:db:bf:1d:ab:29:5b:9f:fb:1f:81:
64:79:9a:23:4c:3f:6b:df:48:47:c4:bc:b1:04:8e:
77:9a:e4:9a:56:39:25:94:f6:53:41:44:71:27:59:
0d:53:96:63:14:f7:91:de:83:25:51:b5:57:a5:8d:
2b:af:cd:92:f3:bf:a0:25:0e:ab:f3:bc:03:57:91:
c4:ee:44:e4:60:6e:f8:bd:ce:24:2f:ba:9b:0c:ca:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:3B:FC:D5:A6:3C:A0:D7:7B:E7:BA:E6:F7:71:BB:CA:25:CC:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43d74b33-8437-3b0f-bf94-d20b454b6ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.109.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:2a:9b:c9:85:92:c1:36:99:a9:8c:2a:5a:44:ad:57:35:60:
64:24:c7:f3:19:19:09:89:5c:a0:c2:a9:54:65:74:24:8f:c4:
08:e6:5d:7a:13:68:96:0d:af:fb:5e:50:95:7a:b7:4f:aa:d0:
10:21:d2:0c:4f:a1:3a:7f:d8:fa:02:60:4f:78:31:f4:59:d4:
38:50:01:a0:2a:23:85:b3:17:bb:a8:a4:e9:9f:b7:1c:a5:61:
12:db:70:52:48:99:53:fb:19:3d:ff:0d:ad:23:15:87:8d:7a:
c7:29:83:3f:a9:37:56:7a:43:b0:67:e9:ad:d7:aa:f0:bc:80:
65:d4:4b:66:12:b4:c6:3e:96:14:5b:d7:ae:e6:a2:5b:0c:a4:
04:6f:b3:8c:3c:63:ae:66:44:dc:b2:05:8a:91:54:a4:24:19:
dc:38:2d:83:74:af:a7:e1:bc:de:47:4f:1f:45:bd:91:32:37:
05:56:10:a7:d1:f4:7d:22:5e:51:e7:75:1e:19:8b:65:f3:35:
37:86:a1:51:02:67:19:76:ba:62:d9:8e:36:cf:53:e7:08:ea:
63:6e:0e:ca:4c:9c:0e:c5:12:76:5b:ce:19:0d:95:25:3d:9c:
f6:d8:bb:90:da:28:e4:31:ac:c4:09:20:24:ff:69:14:15:8c:
b4:8e:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:30 2025 by rpki-client