Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
File: 84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa (raw, json)
Hash identifier: PwjxPtRR3rbq/kHZcMRwFRc+mpmX0d6FrInC96QybKQ=
Subject key identifier: 47:A4:A3:22:BE:1B:07:43:84:C9:EC:BA:1D:9F:E9:8B:5C:9A:AD:71
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584829E30B06F307DC0E95DC0680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
Signing time: Tue 10 Dec 2024 20:12:30 +0000
ROA not before: Tue 10 Dec 2024 20:12:30 +0000
ROA not after: Mon 10 Mar 2025 19:12:30 +0000
asID: 6167
IP address blocks: 97.207.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:e3:0b:06:f3:07:dc:0e:95:dc:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 10 20:12:30 2024 GMT
Not After : Mar 10 19:12:30 2025 GMT
Subject: CN=2c2b7930-c686-4087-8c21-83167891dbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:e0:fc:95:f0:17:8a:14:b2:ad:a1:da:60:
60:61:00:97:fa:69:76:93:ca:7c:34:39:57:68:a1:
87:e2:c4:7a:04:5a:44:5f:88:6f:0e:79:98:0f:19:
93:18:71:de:4b:0d:cb:94:41:e6:85:11:a9:fa:b1:
1b:97:50:d4:01:00:ab:71:b0:08:2d:65:e9:1d:d5:
56:da:9b:cd:db:ff:48:e3:d7:fd:07:5d:a9:69:e4:
b8:56:86:58:f2:8e:39:5f:dd:3b:77:cf:b3:58:b7:
89:98:41:f7:88:dc:e5:aa:df:00:d5:de:e4:77:6a:
12:00:73:cf:fc:35:3c:45:98:42:c5:ea:44:38:62:
e6:b8:91:d4:39:92:f9:65:a3:f9:72:09:82:41:fb:
59:10:16:9f:27:b3:d4:a7:cf:ba:53:ec:17:9a:0f:
52:3a:2a:4c:ff:3a:14:71:32:dd:d4:90:f3:54:fd:
d3:cf:61:35:11:21:ff:60:99:c9:72:02:9f:8a:28:
32:f0:89:0b:26:a8:ca:02:3c:4d:63:8f:00:52:ab:
e5:be:97:4b:d3:5c:d1:36:e5:7f:fb:35:83:43:ef:
e3:91:2a:f1:7c:38:9f:d6:5c:72:55:18:4e:ca:f4:
32:e9:dd:ef:a1:6a:47:9d:8e:5e:97:f7:02:df:3c:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:A3:22:BE:1B:07:43:84:C9:EC:BA:1D:9F:E9:8B:5C:9A:AD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.207.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7e:25:6b:ff:c1:3d:aa:e5:c3:33:b6:c3:d4:00:2c:06:42:
59:f9:99:4a:06:e8:97:c4:04:9e:d2:53:c3:5a:48:7c:6a:b1:
b9:0a:6b:74:fd:00:0c:5d:f0:71:24:f0:36:fd:6e:bd:7e:45:
d1:98:e6:19:23:10:bf:31:5b:5b:51:11:0b:cd:0a:26:75:fd:
ac:c5:d1:f0:b7:b7:2b:a1:a2:0b:b8:67:f1:f8:f6:c2:10:3f:
3e:da:77:29:15:37:c1:fc:c9:65:8c:47:b9:0f:e9:25:9a:53:
4f:78:0a:57:54:c6:f9:80:83:d0:d4:29:50:dd:b8:d8:cd:80:
0f:c4:e6:7b:bb:59:cf:8a:6d:0e:b3:8f:9f:c8:d6:4d:bb:41:
ca:06:0c:a4:53:2e:6d:c3:0a:09:f9:5d:fb:a2:c6:05:01:47:
a7:eb:a2:20:68:d4:0c:50:a6:2e:00:82:fc:e3:3d:bd:a6:d1:
d1:4b:98:26:55:8c:e2:0e:c9:c4:b5:70:cf:59:49:92:80:0b:
e5:76:be:21:1f:65:ba:db:60:eb:f5:9a:f4:cf:38:58:bf:c9:
c3:25:29:42:23:52:4a:6f:5a:4e:17:cb:7e:d3:b9:8f:94:c9:
f7:fa:b7:e4:b3:36:64:69:4a:0d:03:eb:72:da:b6:30:5c:0d:
0e:26:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:32 2025 by rpki-client