Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c41fa4a-8cdc-3271-a8a2-0be1a54f6b6a.roa
File: 5c41fa4a-8cdc-3271-a8a2-0be1a54f6b6a.roa (raw, json)
Hash identifier: Io7Ao1LX/EB8TnMfj2YO/e1tnrSuaxm2DbbRp9UxQ9A=
Subject key identifier: 53:C6:4C:51:CE:A5:BD:BA:C9:BF:0E:06:1A:12:E8:53:AF:07:F8:00
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848239556D428F4AF9CBEAC9380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c41fa4a-8cdc-3271-a8a2-0be1a54f6b6a.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 71.114.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:56:d4:28:f4:af:9c:be:ac:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=14533bc5-520f-4bdc-b578-bff7cfbf9ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:59:f0:16:dd:c4:31:7f:50:e8:83:45:06:
c2:26:83:28:5f:7c:ee:45:5b:c5:a8:d4:03:66:dc:
1b:e3:d3:88:58:5c:27:b8:95:4e:fe:63:38:82:2d:
3c:24:87:eb:5a:22:cb:f4:a4:41:ae:11:4a:bf:7d:
88:ed:ba:d2:d0:0c:be:16:61:3c:1d:9a:c9:3f:15:
5b:db:ac:79:f1:22:27:ec:5b:de:ca:2c:64:68:26:
5b:ca:89:cf:64:8f:45:f4:93:e7:4e:d6:4f:f3:e4:
f9:d8:73:d3:5f:93:cb:be:fb:02:d3:46:46:cc:b5:
66:21:a3:9c:3e:15:2e:50:07:63:c5:39:4a:f4:1f:
cd:69:68:c8:c2:02:00:fe:cb:e8:b1:a8:ab:58:0f:
59:f9:f2:08:b2:c0:40:91:d3:f4:33:5d:f7:f7:c3:
26:22:70:eb:a3:33:b1:76:b0:cb:ee:39:43:1e:3a:
73:cf:e6:b0:6f:60:83:69:0c:c8:f8:b8:64:22:46:
66:3d:6a:98:bc:c2:34:6f:69:fa:a7:65:07:81:18:
f9:83:89:69:56:56:17:93:95:8c:ad:a5:81:4b:49:
d6:1a:d6:47:90:19:c5:d6:4d:46:c2:cb:23:c7:4f:
34:3e:48:8b:41:f0:d6:b0:45:8b:5c:dd:10:06:bc:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:4C:51:CE:A5:BD:BA:C9:BF:0E:06:1A:12:E8:53:AF:07:F8:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c41fa4a-8cdc-3271-a8a2-0be1a54f6b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.114.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:dd:18:89:42:e8:d1:93:bb:ef:93:22:7c:74:25:fb:82:0c:
39:d1:1f:2c:0a:ac:23:fb:64:d0:7a:a4:f0:d3:fb:df:a6:7f:
2b:a4:90:1d:b4:34:e8:94:5b:71:37:81:70:4f:36:c8:62:1b:
d9:d1:08:b6:8d:ba:54:8d:db:cc:fe:15:38:a6:21:85:19:21:
41:19:79:ae:28:d7:e3:70:80:7e:00:db:3f:41:44:f1:0a:a4:
f3:f5:28:c6:e5:f2:a2:6a:1c:10:fc:ca:bd:b0:be:44:29:90:
f5:d5:04:34:f4:52:6d:59:12:23:78:e1:4a:a4:b3:d7:01:03:
45:75:4b:fa:8a:d0:9a:17:bc:9f:13:4e:6d:f1:29:98:42:06:
a0:6c:23:54:92:40:30:b8:b1:df:04:55:d4:b4:e5:19:ba:9d:
8f:e8:41:cd:d4:94:05:a6:a6:3a:d1:d1:7e:81:a4:31:71:0b:
0f:d2:e1:a7:1a:31:93:da:c7:6f:74:a3:47:fa:63:4d:10:ad:
6b:41:47:3e:b7:4b:19:14:d1:48:bb:89:17:f7:8e:66:90:57:
1a:02:21:c8:7d:ae:e8:9a:7a:fa:f5:7a:aa:90:a6:63:32:af:
6d:47:78:b8:f0:b3:06:7b:fd:e2:d3:6a:72:ec:cd:b1:06:c5:
86:dd:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:42:13 2025 by rpki-client