Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/659fc911-7097-3e27-a500-011201abf025.roa
File: 659fc911-7097-3e27-a500-011201abf025.roa (raw, json)
Hash identifier: G8IY3pPJaUCzKQ94T7amhCqlPM8LQD7sKwBs2X33428=
Subject key identifier: 45:35:15:D8:2D:7C:D7:4F:3A:42:A9:8C:32:8A:9C:E4:96:47:AA:72
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B166D938A3F3E81E32380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/659fc911-7097-3e27-a500-011201abf025.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.200.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:16:6d:93:8a:3f:3e:81:e3:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=57c75db5-3121-4edf-894d-7e73273602f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:e1:92:fd:c1:8d:52:e8:84:9b:dc:fb:eb:
9f:98:91:9e:0c:d0:6f:41:45:79:c3:51:a6:40:63:
dc:fb:41:b0:a4:d9:9e:d9:ee:41:85:34:36:44:8d:
c7:43:12:87:01:66:3a:9d:27:f9:b6:73:bc:31:8f:
62:60:30:1b:a8:6c:6c:68:4d:32:eb:69:5b:bd:81:
e3:7f:ac:0f:63:ff:ae:13:eb:4c:fa:23:ce:05:9e:
ea:c4:1f:c7:a1:66:39:94:b6:0d:21:47:4e:90:32:
60:18:81:85:0d:a6:7f:6f:33:b2:1e:11:89:4b:47:
b3:6b:73:7a:c9:3a:a0:b4:57:45:38:f1:f6:ef:1a:
fe:ac:3f:51:25:20:d6:bf:7d:d2:71:52:ed:47:98:
7b:04:8d:f7:35:24:c4:b1:b9:ea:25:0b:e0:6a:bd:
75:25:f4:e2:e9:bc:9e:80:cf:0e:6a:02:4e:ef:c1:
1c:47:f2:2c:2b:46:42:35:ff:eb:9e:a7:23:ae:f3:
7f:55:c7:68:52:50:78:00:ae:fa:82:40:08:0a:9e:
1b:54:ce:d6:f1:57:da:d6:dd:75:e8:b0:4c:4c:c3:
6f:a4:88:6d:c1:03:88:8d:5d:ae:eb:ac:04:75:84:
6d:00:cc:b8:5c:84:6c:0c:c0:88:b5:2b:ee:0a:c7:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:15:D8:2D:7C:D7:4F:3A:42:A9:8C:32:8A:9C:E4:96:47:AA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/659fc911-7097-3e27-a500-011201abf025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.200.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:96:50:69:bd:30:3e:51:7b:98:2e:f8:c5:30:44:0c:cd:81:
2d:69:2e:ec:be:be:3f:c8:ee:e8:8b:9f:e2:97:a5:e9:90:e7:
6c:0d:1a:48:5d:43:46:25:be:ec:0b:8f:d4:10:b7:90:9d:1c:
e7:3a:98:db:57:c8:9f:b6:d6:82:84:8f:1c:e6:9b:30:d0:c8:
fc:f7:11:88:5e:a2:56:75:66:df:4a:ca:64:df:93:25:13:3b:
62:81:6e:36:34:1c:05:f8:24:56:59:f1:a9:1d:bf:3a:c9:dd:
3a:ff:e9:c6:fb:f2:4a:fa:84:13:4f:8b:2e:7a:03:57:a1:08:
c9:01:63:b5:cb:8b:24:0e:36:bd:a2:ca:e2:b0:af:34:82:39:
7b:0d:e5:80:cc:d5:1b:08:64:10:b9:d2:7d:6f:1b:da:a0:68:
d7:e4:9d:68:c9:f1:37:c8:bd:02:25:64:6a:e0:71:7e:a1:22:
96:7e:f5:06:1e:05:e8:68:e5:d3:79:64:01:24:4c:28:1f:4e:
29:ae:eb:d0:8c:55:11:e9:92:05:28:ee:ac:88:5c:ee:8b:99:
ed:91:ea:21:a6:e3:b0:99:99:63:13:9e:9e:af:84:6c:53:c4:
cd:5e:7f:2f:6b:a1:87:f8:e3:08:4e:2a:d0:c3:b0:50:f3:ef:
ac:e9:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:45:32 2025 by rpki-client