Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
File: 495291d5-df17-3d06-965e-bcc698922d0b.roa (raw, json)
Hash identifier: VtXtKQFXOOTk1r0ruyfQxmhKo3r7N7iugts4zqFUO5E=
Subject key identifier: F7:13:DE:6F:61:03:4E:B1:AF:E9:DB:AC:D3:6A:B8:12:0D:07:B1:28
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9090D4B32A0936CB9C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 0
IP address blocks: 199.170.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:90:90:d4:b3:2a:09:36:cb:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f6b2589d-8c05-48cf-82c7-d8cd305baef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:0f:16:81:94:77:65:b2:19:ec:b9:18:2b:
ec:2a:44:1a:b7:39:04:38:bf:e6:47:e6:82:9e:5d:
5a:51:8e:0d:d9:83:13:09:ed:5d:ee:ca:b4:24:ca:
d9:86:d3:4a:bb:3a:64:dc:7a:50:8b:83:16:32:17:
a2:93:99:76:ea:67:a3:c6:d6:e0:57:9b:2a:6a:e1:
99:37:85:62:66:b0:de:65:3f:5e:94:09:91:06:1e:
55:2a:ec:18:db:96:f4:43:87:dc:fa:f6:e8:b6:a2:
b7:45:d8:fd:9d:08:26:ad:7b:e9:99:0b:61:06:c3:
5c:4b:8b:f6:64:35:b6:5c:4e:a5:ae:b8:48:dd:85:
fe:77:b5:8c:b7:72:91:5c:f3:93:05:e4:11:1e:d1:
a3:59:3e:31:a3:51:13:2a:da:ad:fa:34:31:12:bb:
82:2d:07:d7:96:cf:66:ce:36:e1:53:28:2e:39:ed:
c7:5c:eb:c0:38:27:72:b3:12:ee:ad:27:66:03:eb:
58:ac:d4:89:97:54:67:36:2b:6a:25:24:ab:a5:04:
31:c8:9b:01:66:b5:84:70:36:a1:3e:b7:14:d7:d7:
c8:b5:77:a7:d2:98:1f:26:e4:d4:8c:1f:85:68:b7:
fc:fd:89:e1:74:26:4c:c7:6b:28:1f:3b:7f:3d:d9:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:DE:6F:61:03:4E:B1:AF:E9:DB:AC:D3:6A:B8:12:0D:07:B1:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/495291d5-df17-3d06-965e-bcc698922d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.170.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:5b:38:7f:aa:93:5d:11:fa:21:03:03:d0:3e:b1:07:d8:50:
ae:45:71:1e:af:aa:bf:76:c1:fe:e9:f2:57:f9:c8:4c:17:47:
f0:b5:cc:a1:d9:66:c0:97:ff:3e:a9:98:16:d0:e4:06:26:1f:
45:12:27:8e:9b:98:31:be:2e:29:46:51:87:5b:5a:ba:6f:52:
50:0b:6f:7f:c0:c4:29:52:64:b5:47:d7:ea:db:0b:19:17:cd:
9d:07:41:0a:1c:e3:e1:53:0e:2b:03:fc:57:69:23:00:fe:1c:
00:df:39:58:bb:50:ca:79:f5:31:8b:b3:1c:d6:5e:ac:33:a1:
8d:5a:82:9b:93:ce:ad:ff:cd:cd:d5:47:dd:4c:5c:8e:38:6d:
88:41:ca:95:35:2a:fa:ea:7e:d2:2b:78:a8:43:fc:87:30:2c:
d4:3e:63:20:ef:09:7e:fe:a2:39:ca:71:77:cc:10:e2:e1:1f:
d4:e5:fa:fe:96:56:34:80:6f:a0:da:62:e1:76:3e:e1:a8:ce:
5f:72:fb:e3:fc:ef:1b:70:23:9d:65:35:c4:32:65:74:f3:ee:
94:04:71:e7:33:5a:e4:3c:25:2a:68:72:bb:8c:0c:4f:a9:0e:
8d:62:9c:1c:d8:b6:79:c8:31:c9:de:ac:1c:20:f0:4b:9c:44:
8b:7d:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:16 2025 by rpki-client