Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa
File: 6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa (raw, json)
Hash identifier: 8B60kA66ahCvaX4EhZdLxXrTp2gDXMzLKZTKw5rWCFQ=
Subject key identifier: A7:14:90:E3:A9:CF:2F:EB:CB:00:EF:22:18:2C:B2:27:44:AA:2E:BC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56D62CC2F602E4E19DD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.248.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6d:62:cc:2f:60:2e:4e:19:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=af98a3e1-2d20-4a92-abf4-a26c43578b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:d0:20:d8:db:18:06:5a:14:15:5a:80:ff:
e1:d8:36:43:37:a5:ce:c4:54:30:6b:9b:e7:83:a7:
d0:a3:a5:3d:27:98:66:a1:71:d2:7e:c9:92:a8:e3:
f7:f7:3c:fd:0e:63:d5:22:53:ee:f2:bd:d8:f3:12:
b9:d1:50:cf:03:05:cc:20:89:77:aa:a8:60:1a:d3:
5b:ff:ea:5e:4d:e6:9c:13:77:e5:38:74:70:8d:f7:
87:eb:62:ad:c2:53:e2:bc:44:5f:ab:22:6b:da:04:
40:26:18:57:70:af:e2:cd:35:e5:20:7d:75:38:b1:
54:8b:01:a8:95:74:0f:01:f5:4c:f4:6f:4e:af:4e:
06:50:d2:c2:74:38:97:4b:30:ae:63:59:aa:c1:ba:
0d:95:35:9d:72:16:39:42:6b:c7:80:e3:21:5f:c2:
83:d7:90:c3:ab:0f:8a:49:83:74:68:a6:f2:02:9a:
45:76:a2:b9:b4:4f:5b:c5:65:67:ed:31:b2:b1:57:
c1:4a:4b:f3:17:af:b6:3d:ad:9b:c5:7d:d2:ef:f5:
a1:e9:2d:27:2a:00:bc:78:04:b1:7b:d4:25:c2:02:
96:63:6d:68:7f:4b:a1:01:2e:0f:0d:0d:77:09:15:
7a:64:2a:62:23:33:7a:ca:40:b1:ea:90:a7:54:0e:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:90:E3:A9:CF:2F:EB:CB:00:EF:22:18:2C:B2:27:44:AA:2E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.248.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:a1:0f:1d:5f:62:f7:cb:8a:b3:55:a6:b2:b0:9e:e4:79:c8:
4e:09:29:80:c7:39:da:b9:c1:08:80:ae:57:d0:25:4c:5c:9f:
ce:91:f9:d5:7d:1b:1a:62:50:5f:4d:16:d9:cd:a8:ab:20:a7:
9b:80:4a:f2:e1:02:25:b0:e9:5f:6e:a1:2d:2a:ec:cf:8e:9f:
65:ea:37:51:2e:f4:d3:8b:e9:41:fa:50:1b:91:1f:5b:3e:a3:
34:27:54:f5:d8:5d:25:01:fe:13:1c:27:03:e8:b0:dd:c1:f7:
47:70:85:b2:bb:65:0c:58:ec:41:71:6e:3e:de:5b:f2:be:4e:
64:0b:3b:e2:33:9d:6f:15:48:81:87:95:97:f5:51:98:8d:6f:
cf:70:37:50:10:f6:05:3c:a0:e0:4f:1a:dd:54:e1:1f:f9:91:
39:7f:fe:38:38:e1:5f:39:7c:da:d0:ce:29:b0:20:62:b6:2e:
0d:f0:32:c7:6d:f5:91:31:57:cc:30:50:70:69:2e:0e:1f:4a:
99:c4:a1:17:cd:09:64:8c:87:d5:63:04:99:71:4f:79:75:a4:
34:64:e1:a9:fa:6e:7a:04:d6:9f:64:59:ba:00:e1:87:a3:9c:
fb:3b:68:28:a4:1d:2a:5d:1a:d8:a9:e5:90:4f:8d:16:08:7e:
f2:fd:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:14 2025 by rpki-client