Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa
File: 7db3851e-1448-3dc2-8743-74b6c158a3ad.roa (raw, json)
Hash identifier: KiXK12tR/dMkSvkGD4hkNP/UrHqMemm1hIrdlYeKzpk=
Subject key identifier: F1:0B:1A:A2:FD:C2:CA:2C:0A:18:6A:1D:27:F3:1C:58:CA:31:0E:39
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F056C86342E8ADDCDCCBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 152.63.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:c8:63:42:e8:ad:dc:dc:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a320bdba-176e-4967-8440-366f08467c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:40:b3:dd:c0:ab:11:6e:35:b1:24:a2:00:
29:31:d2:9d:6b:4e:c1:c1:52:29:ec:1f:07:c1:b8:
8c:5c:7b:8d:10:ef:57:a6:b4:c6:6b:10:3f:45:e7:
7c:5e:e8:a3:9e:11:81:4a:d7:95:3f:47:b7:24:b1:
21:19:63:93:04:2a:e0:d7:a1:45:16:d9:7c:de:9a:
32:4c:a4:be:63:3e:26:38:f1:73:ba:93:43:a2:76:
d9:f5:72:7e:34:f3:0c:a1:cd:32:f7:ed:da:54:ba:
67:d9:ba:47:af:bd:33:cb:73:ad:1e:34:72:e5:17:
30:8c:53:15:02:16:ca:9e:89:ea:fc:44:8b:55:ea:
74:43:b4:47:88:01:03:1c:d8:a4:37:e5:e1:1b:2e:
7d:27:08:c8:0e:20:65:cf:e4:2a:2a:29:41:1d:67:
f3:67:33:ea:cf:22:55:6a:47:65:0d:0f:62:0d:41:
29:1e:cc:91:d9:79:6e:f5:42:1a:7d:3e:5a:9e:2f:
2d:de:58:3b:da:eb:9d:5e:1f:0e:1a:27:62:12:bd:
6c:42:e0:49:76:9d:98:a8:8b:1c:1c:45:a0:bf:58:
13:45:dd:b8:14:ea:a0:c1:51:d3:64:cb:44:15:0f:
57:66:f2:5a:c8:a2:bc:b6:ab:68:17:db:34:73:bf:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:1A:A2:FD:C2:CA:2C:0A:18:6A:1D:27:F3:1C:58:CA:31:0E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
152.63.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:09:dc:d8:6d:d7:8f:c0:e4:3f:d0:5b:f3:9b:2c:a8:03:31:
a1:c6:34:93:d3:bb:64:0d:3b:a9:d8:ca:2f:ff:f9:95:33:6e:
5b:b9:aa:f6:b0:09:23:25:3b:44:f4:97:a3:2b:99:6e:90:65:
f9:5e:91:71:b1:91:93:e6:34:b6:f1:64:40:0a:03:b3:f9:45:
22:1d:8a:6c:e9:98:f5:7a:60:a1:16:83:a9:86:06:c7:53:23:
88:90:cb:40:28:24:f1:83:90:e3:7e:b6:1e:f8:cb:bc:7e:1f:
58:ce:7e:e3:41:12:53:d1:50:f8:24:9a:09:97:5c:7a:44:fe:
98:34:68:41:0f:df:4b:cf:22:61:1d:51:d7:f1:fe:de:1e:63:
e0:45:37:f4:11:63:66:60:73:0e:29:73:23:bf:cd:97:78:2d:
32:9f:68:5c:e3:1b:17:87:a6:a4:88:c9:43:7a:40:dd:64:0b:
a2:8e:5d:11:3e:48:c3:d6:f8:41:be:9a:3b:c1:33:32:1f:e0:
66:c3:3d:84:d5:77:c0:7c:aa:f7:18:1b:20:f9:83:38:0a:c0:
14:a4:ec:e3:88:e1:9f:36:47:82:35:51:59:a4:c4:f3:64:85:
f5:88:63:99:1d:4e:db:3b:52:41:cf:88:54:5e:97:70:67:34:
c3:70:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:04:12 2025 by rpki-client