Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa
File: 777c33ac-073a-308d-8f7f-3938856f4a9c.roa (raw, json)
Hash identifier: cP4zAv8OmRpOtkSQpYIwi9l+bRbz6rcOtfmr5KCKSmI=
Subject key identifier: 71:C9:80:C3:80:ED:7E:67:85:FC:02:51:F0:1C:C6:5E:4F:90:76:5D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF560964C3AADDF54366C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.98.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:60:96:4c:3a:ad:df:54:36:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a11c9548-dee8-4563-97d1-188f54f4164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:14:1f:a0:f1:6e:4c:23:be:11:a6:88:5a:
ad:75:76:af:95:07:17:8e:b5:ba:f5:f5:ff:63:75:
be:02:8d:ae:4d:f2:e8:fc:01:3a:47:a0:62:a7:93:
1c:ff:38:94:87:c8:bd:b5:2d:ac:38:b3:b1:82:bd:
3d:14:8c:12:d3:da:04:38:2b:87:34:88:21:fe:18:
22:74:ea:e3:11:c9:8f:16:26:b5:82:66:72:53:92:
05:a4:2a:8b:26:83:d1:94:ce:2d:52:cb:20:cf:78:
38:f6:0c:4d:b4:ab:04:63:f8:7a:63:29:1e:7f:7d:
00:fe:c4:57:6d:91:69:f4:e5:de:04:4e:8e:2c:90:
09:ce:6a:02:80:a9:69:70:86:80:30:c4:b4:4b:df:
eb:c3:65:4d:c5:5e:ed:17:89:99:7a:ab:72:8a:a5:
3b:f2:03:bc:3f:5b:d7:f6:a1:1b:2a:03:68:1a:70:
60:00:0f:3d:f8:2c:0d:3c:62:03:2a:d7:36:c1:8d:
f1:cd:c4:10:13:83:f6:70:c5:dc:f6:f9:0b:39:60:
46:31:a6:fd:6f:8d:d4:42:fd:58:f1:da:e8:cf:a3:
e4:ce:76:fc:c4:82:ae:e9:58:57:d4:d3:ab:3a:85:
24:01:9e:96:d9:6e:85:1f:aa:86:a0:34:55:65:f5:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:80:C3:80:ED:7E:67:85:FC:02:51:F0:1C:C6:5E:4F:90:76:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/777c33ac-073a-308d-8f7f-3938856f4a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.98.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:6c:7f:6d:e4:86:90:6f:f6:14:82:e7:4d:0f:2b:17:0a:a4:
20:d3:44:f6:1a:73:bf:8b:9c:de:78:e8:03:f3:4f:99:88:43:
d5:69:3c:c4:7d:7c:9e:77:ad:57:39:f3:ca:2f:76:f0:31:7d:
c7:bd:8a:23:27:5b:74:0d:6c:4b:52:d2:be:af:a7:3b:42:29:
3d:56:5f:2a:23:a7:f9:1e:f0:9c:68:63:97:f1:8b:0f:99:1d:
8e:c4:f9:8e:c2:20:21:67:86:ef:79:fa:66:ba:28:91:fb:fb:
85:af:43:30:9d:cb:0e:7f:eb:e9:d8:1c:52:68:5e:92:9c:b0:
fd:7d:07:26:70:ac:f2:97:20:54:06:b0:41:e6:be:d4:f2:e1:
50:36:57:a3:4a:c0:2e:64:3d:73:8d:1e:d7:22:45:2c:13:e5:
26:6d:5d:59:2b:b6:31:f9:3b:2d:a6:5c:b2:9b:c5:63:f2:00:
9f:61:7a:fd:25:e0:a5:9a:a9:7e:19:2f:7e:88:ed:8d:f4:e0:
3f:0d:25:5b:d2:57:c3:0d:89:57:2f:29:c7:f5:b3:c6:df:e3:
db:c2:31:61:47:8c:4a:c5:46:28:28:4c:63:18:e1:b8:9a:a8:
3c:c9:d6:49:74:ab:47:88:9e:1f:76:ba:43:e3:29:fc:a6:3f:
a0:10:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:32:58 2025 by rpki-client