Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa
File: 8675e898-b072-3c36-9560-a1fd317bc131.roa (raw, json)
Hash identifier: sXJo8ucWpvQ93dz/5o7iuwqqXBmup0aO1cmXgbFmyh8=
Subject key identifier: B6:0D:70:8E:6A:79:6A:F5:C5:8B:A5:05:EA:FE:A1:52:02:4F:E0:56
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB73375525EE1BF51BC400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.242.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:73:37:55:25:ee:1b:f5:1b:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=059a1fda-b9b2-48c8-9045-8b5902c77b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:36:93:5d:1b:04:2e:d1:03:57:d3:69:ea:
a9:40:93:1d:6d:8e:d3:af:e2:4c:e5:93:d3:87:9b:
39:a0:6f:3b:b4:94:6f:96:ab:0e:57:39:43:83:99:
95:94:68:d1:40:94:59:98:5e:43:f1:58:3b:8f:21:
0f:c4:86:3f:c5:e9:dd:90:c5:d0:b6:01:f4:fe:18:
09:c4:22:34:30:e0:53:59:95:e4:07:16:74:e7:e0:
8a:33:75:b7:08:fa:58:2e:ca:ff:52:b5:55:59:8c:
6d:7b:c0:e5:5d:f0:2e:37:02:41:77:4d:c8:3b:5f:
24:c0:a4:41:26:17:dc:de:7b:61:eb:6f:13:43:06:
d2:7f:3a:9d:eb:82:54:c6:4c:15:b3:3b:7c:61:7a:
21:7d:53:d4:ee:92:e7:17:cc:fc:d1:48:d0:cb:d0:
ce:c1:6b:ec:14:00:19:77:45:be:e7:3c:5f:24:5a:
75:f4:57:18:fd:aa:76:63:d2:63:03:25:32:b2:3a:
0d:cd:70:ec:3f:d1:35:83:5d:4a:5b:40:f1:f9:04:
da:d7:fb:92:97:3c:e7:74:4e:e9:b1:8c:d2:fb:e3:
e7:98:09:69:81:8c:ad:a4:68:dc:87:d0:1b:05:53:
67:f3:be:3b:39:c2:80:be:4f:82:e8:ee:20:69:23:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:70:8E:6A:79:6A:F5:C5:8B:A5:05:EA:FE:A1:52:02:4F:E0:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.242.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:cc:8a:c8:9a:53:b3:96:d0:59:35:ac:af:f6:63:69:dc:bd:
b1:e5:86:8c:dd:53:a5:49:f2:76:06:f3:e9:73:69:e6:23:60:
ee:a4:61:4f:2a:5e:ef:b4:72:b3:12:0f:2d:74:f3:6e:b0:b2:
b4:82:bc:cf:bd:16:0b:db:7e:05:a9:a6:22:73:6c:dd:2e:b3:
9d:3e:b3:64:fe:18:61:1c:ff:de:9d:f2:fb:e6:4d:08:e4:f8:
99:61:28:39:27:96:40:28:4b:54:46:8d:9a:ce:89:56:9b:e4:
40:34:55:0b:ff:60:ca:f1:98:d3:50:45:2d:0a:f4:a2:0b:8a:
9a:55:f4:b6:78:2d:23:bb:79:26:e3:7c:a0:fc:04:16:90:6a:
af:51:9a:1a:44:33:96:58:ee:c7:d0:8a:ab:0b:31:a7:38:f9:
d5:5c:9d:1d:05:c0:79:41:81:62:60:26:a6:78:18:d0:3b:0b:
e8:d9:48:f2:ea:09:ff:9f:09:eb:93:7b:ed:d8:a0:16:15:a2:
d2:d3:4c:49:16:00:fb:6f:a9:65:28:39:6f:43:fb:dd:33:a3:
e1:49:00:2a:07:9c:50:a1:88:32:55:f6:21:5f:ed:7d:7d:ce:
a0:3d:45:5a:2d:85:f0:33:c4:43:b6:bf:0e:18:4d:bb:84:95:
1c:be:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:40:54 2025 by rpki-client