Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63fdfc76-cb77-3608-a5fd-8516e1576170.roa
File: 63fdfc76-cb77-3608-a5fd-8516e1576170.roa (raw, json)
Hash identifier: vKKpqyra5qxRwM6uOEyUsjHnCOf+457Zx1MPJFOE6tQ=
Subject key identifier: EE:DC:85:B9:53:A6:5E:01:69:58:9F:DE:40:9B:C8:6C:60:CF:C1:F7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56C6ED5AF5380E8885680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63fdfc76-cb77-3608-a5fd-8516e1576170.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.171.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6c:6e:d5:af:53:80:e8:88:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=d9e2d5c0-20bd-41db-8be0-b91489795485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:99:19:4b:ca:9f:67:69:62:ce:91:2a:35:
2f:53:e7:88:52:08:5c:e0:db:25:76:1a:a8:3d:65:
4d:2a:ef:16:01:09:8e:ce:54:a7:49:95:93:76:a3:
44:68:a1:72:46:6c:bb:b7:84:14:f1:51:ac:85:f8:
9f:69:aa:f1:20:d7:c5:31:6c:73:84:08:5f:44:a5:
78:d7:a5:1b:34:a3:ed:da:fb:51:9f:32:20:3b:f7:
d0:53:24:62:dd:46:8c:1d:7c:01:4e:27:df:78:11:
62:2d:3e:f8:42:e5:21:af:1a:dc:45:53:94:38:8b:
2d:5e:2a:20:c2:05:0f:5b:3c:eb:d8:d1:42:42:e6:
ab:96:db:92:88:f6:b4:3f:4a:0a:69:2b:b3:cb:11:
b9:dd:6a:12:7b:a7:0a:94:05:1f:60:1b:5d:2f:6f:
8d:3a:9a:06:d2:3f:48:a8:a0:19:fd:a2:8e:c6:a1:
de:ae:ed:9e:f4:db:6d:9b:e1:bf:83:66:d3:f3:9a:
9d:b6:7f:10:c4:0f:b4:14:b2:d0:70:8f:77:b1:ef:
63:f1:ef:21:29:98:29:ef:73:98:72:6c:43:73:3b:
4f:b4:c1:fc:bc:c2:e5:45:96:20:e8:b3:22:8f:d3:
1d:9c:19:78:95:7c:28:ab:06:16:06:c1:22:e2:06:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:85:B9:53:A6:5E:01:69:58:9F:DE:40:9B:C8:6C:60:CF:C1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63fdfc76-cb77-3608-a5fd-8516e1576170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.171.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:57:dd:c1:fd:63:38:a1:a2:d5:fe:a8:4c:9c:65:71:8c:ac:
71:88:dc:e8:0b:88:97:ca:04:d7:6c:87:c9:94:cc:ef:40:d0:
57:90:89:42:e0:16:50:24:49:d0:87:3b:62:9e:52:89:97:ae:
9f:a4:f0:36:7f:56:fd:dd:4d:85:bc:d6:47:8a:1a:19:0b:58:
18:4b:9d:15:0f:4c:f9:fe:01:d7:0d:4a:43:9e:6b:6f:76:56:
dc:bd:82:7b:86:a4:0d:1f:74:3d:7c:97:63:b1:30:26:28:62:
6f:49:16:ef:3e:27:29:43:ff:cf:42:3d:bc:78:a6:15:07:30:
89:81:4e:b1:1e:d4:97:f7:e1:ab:0f:4f:0a:f3:3e:98:e2:da:
b1:10:f7:3c:1d:f1:70:5d:fc:8b:a3:43:72:74:e3:25:20:8b:
b8:b2:93:66:3a:7e:ed:8b:ca:4b:de:d2:22:8a:19:24:ec:94:
df:f7:7c:a3:32:6f:b5:19:08:59:f6:64:59:34:9d:31:fd:22:
55:75:a9:67:60:c1:3f:be:8e:dd:19:76:75:ad:40:75:1c:7f:
a5:5c:90:28:4e:70:44:2e:f2:c3:44:01:80:98:1f:fd:aa:3f:
c7:ea:78:c7:95:ad:37:b3:43:15:ea:53:79:78:1d:95:2e:2e:
a6:6a:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:57 2025 by rpki-client