Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa
File: 6c829838-1482-3a20-82ea-a9981a23fcae.roa (raw, json)
Hash identifier: rhv+jZWsMIKUpcTwbeaxWjYIK/CpzZPYye+zB7k1bAk=
Subject key identifier: 17:B8:A2:A9:41:84:D4:8C:8D:47:F3:9F:A9:31:A3:14:8B:C0:07:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F050C0834A88CA1020A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.21.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:50:c0:83:4a:88:ca:10:20:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1c87bc4f-88d3-44a0-a630-66afe680386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:9b:86:9a:a7:71:2f:6f:e4:90:46:40:cc:
e5:93:f2:e0:b9:bc:ea:4f:39:46:bf:bc:99:b0:3e:
f5:b1:60:3b:7d:15:87:eb:5f:1b:4c:26:d3:08:45:
17:bb:92:2f:e3:de:48:36:14:cc:86:3c:0c:b5:1a:
94:15:77:5d:83:55:b2:99:37:93:12:ca:22:7b:73:
5a:9e:1c:4c:3c:35:47:9d:62:2a:1b:9e:26:a9:02:
ed:d5:9c:57:05:0b:31:e2:4f:a9:f0:c3:85:be:1f:
da:8a:f3:1d:86:d7:e0:22:a9:76:35:a9:4d:94:e3:
b8:42:fc:a0:70:5f:91:af:5b:9b:58:31:03:c6:34:
7e:76:e7:49:58:0d:b5:80:a7:2b:8b:45:1e:93:1e:
1c:32:0b:90:e2:30:74:ca:f7:cb:bf:5e:ad:7d:47:
e4:3a:9f:23:45:f9:fe:0e:aa:5b:58:5c:94:c3:d4:
79:88:3f:d6:d6:97:23:4a:83:27:3d:e3:ad:d8:95:
b4:8c:ee:18:73:3d:2d:44:ba:aa:cb:bd:a9:df:f2:
17:26:a1:53:cb:5a:da:12:c8:cc:22:32:2f:cd:66:
a8:3d:19:7b:63:51:f2:82:10:60:e0:71:d3:1b:c9:
4e:7f:88:a1:67:75:1e:ad:19:c2:aa:66:bf:d2:e8:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:A2:A9:41:84:D4:8C:8D:47:F3:9F:A9:31:A3:14:8B:C0:07:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.21.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:16:ee:bb:7f:21:44:8e:f4:e0:f3:14:d1:64:41:28:e7:78:
d2:50:09:0d:35:ad:9a:c1:f8:b3:dd:f4:de:6a:bf:7a:4c:b0:
e2:fd:f7:3c:3c:4d:fe:16:11:89:62:20:95:64:95:b3:d0:c2:
29:31:a3:68:4d:db:8d:5a:de:6d:fe:a4:d4:83:b8:bf:34:90:
01:ea:5a:99:7d:28:79:34:e5:5f:f8:c9:1e:b8:19:2a:2f:b1:
ab:83:66:e8:1a:37:81:30:d5:b5:52:e6:3e:53:33:88:06:b8:
49:4c:3d:75:39:0e:11:9b:fc:3e:75:1f:9c:1c:d6:a4:cf:3d:
ff:1e:c7:3f:d1:da:5f:90:74:7e:9b:66:5f:60:f5:ed:c5:3f:
28:30:4a:3f:59:54:68:aa:46:21:3e:68:93:0b:c9:25:a7:64:
c9:6f:d5:eb:42:65:4f:6b:32:18:12:91:5e:8b:d0:db:7e:2a:
bd:88:93:dd:bd:84:fc:c3:42:ce:80:90:7a:4d:d5:75:2a:6d:
b3:ef:3f:68:a0:38:fd:0d:be:5f:6f:ea:7e:0d:9f:93:f0:e4:
d5:77:3c:e0:d4:db:72:a9:1b:ce:73:13:f7:b1:75:38:ab:54:
54:54:84:f1:35:1b:3d:54:0a:60:5f:9e:de:89:ac:a6:f5:8b:
17:8c:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:43 2025 by rpki-client