Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e767fb-be35-3dfb-a30d-75dda1715838.roa
File: 65e767fb-be35-3dfb-a30d-75dda1715838.roa (raw, json)
Hash identifier: G3CUqQdalcU0/LXRN5KyC+pBVC5NdbFm4cPyKgCGGL0=
Subject key identifier: 7B:EA:A3:DE:B1:56:5B:70:CE:D7:42:15:D6:F9:09:6B:23:E3:BE:FB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56EF47C8AB12ADAD02000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e767fb-be35-3dfb-a30d-75dda1715838.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.230.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6e:f4:7c:8a:b1:2a:da:d0:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=6a2933a3-9995-49a5-bedc-a4de415e4787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:1c:a6:4e:b3:61:7a:7c:cd:90:24:07:13:
49:7a:75:58:43:dd:62:0f:74:fc:ba:80:a0:32:f2:
6b:dd:76:4f:02:bf:2f:d7:0b:f0:f0:f8:ca:97:7d:
0a:63:28:06:23:f4:c5:7d:3b:ea:75:35:64:6b:43:
8a:1a:6c:96:2a:d2:e6:14:fd:b6:89:c5:d3:54:bd:
1e:b5:11:87:24:aa:59:ce:1d:5d:61:82:0e:04:03:
6e:12:a5:a6:ea:08:f9:ad:33:93:57:40:54:12:43:
1f:64:e6:5f:0b:2c:1c:a4:2e:af:20:78:3b:9f:e0:
f6:6d:a9:de:61:23:a4:16:ca:3e:9f:91:62:12:be:
c3:06:68:59:22:e9:2d:34:49:19:27:19:a0:3d:a8:
79:01:40:a2:ad:20:6c:94:7a:97:fc:5a:41:4b:b6:
1b:3d:c3:e2:0e:0b:25:20:36:c8:32:39:ec:d7:a2:
8d:09:00:f9:88:ec:6d:04:c2:be:66:a7:a7:fa:5a:
ce:63:fb:77:2b:83:6c:bb:c6:62:a6:af:64:b7:9c:
f7:bf:7a:47:ad:8c:43:1e:8f:62:5c:88:77:2c:5e:
58:51:91:86:b0:1f:19:c9:53:14:bb:f3:3f:bf:52:
dc:b9:96:ef:a7:64:04:72:02:ef:55:2f:cc:7e:bf:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EA:A3:DE:B1:56:5B:70:CE:D7:42:15:D6:F9:09:6B:23:E3:BE:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e767fb-be35-3dfb-a30d-75dda1715838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.230.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:b6:37:dc:f8:43:fe:21:07:52:e3:c7:36:ee:fe:50:70:5a:
17:98:c3:47:69:0a:ac:22:b6:91:b3:f4:1c:c8:a9:66:ae:6f:
53:0a:a2:3f:fa:cd:37:1d:0c:aa:f8:81:67:c8:86:07:ae:78:
ca:25:ce:9f:33:09:32:c9:a3:6a:21:6e:a5:f3:ff:7c:33:79:
09:2b:c8:de:7a:20:9d:cb:9b:be:47:ad:a5:ac:04:4e:56:a8:
fc:b2:ab:82:b9:0f:6f:e2:07:21:c4:c0:45:60:b0:14:cc:aa:
65:9e:66:2e:0d:f1:c9:e0:b7:96:2e:67:ca:e3:1b:7a:00:da:
ed:1b:a7:37:0f:15:6e:49:ff:01:6e:83:e4:64:46:4f:d1:35:
ea:6a:ff:ad:60:0d:50:7f:3d:8b:88:a1:50:31:83:c2:9a:83:
25:ad:94:96:ef:df:56:03:54:83:c6:21:0b:18:4f:60:45:b0:
d2:b7:92:0d:02:69:2e:ab:55:fc:f5:13:01:7b:e2:c2:98:55:
36:b8:db:77:a9:d1:9a:c7:7a:e5:c7:f6:6e:66:5e:65:fa:aa:
81:1c:b7:15:52:4e:60:8f:2d:62:3b:77:ff:89:e2:7c:77:0b:
80:ff:20:32:7c:57:9e:2a:1c:78:61:0f:9a:4f:aa:5b:7d:68:
a5:38:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:14 2025 by rpki-client