Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa
File: 8e1c68eb-3226-3840-9908-9bb928de3ba6.roa (raw, json)
Hash identifier: Ht9ZIzTXb2xbERIiZ/9/uHZI+pC9ipACy5Ini1wjRvE=
Subject key identifier: B1:EB:5A:41:E6:5B:90:7D:0E:8E:1C:17:63:A7:CF:97:EE:AF:F3:19
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB413142E9C9958E1EA980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 65.216.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:41:31:42:e9:c9:95:8e:1e:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5b89339d-1afe-441c-ab21-da183d96358d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:01:04:80:b4:bb:d6:3b:cc:be:1f:49:72:d5:
f1:b6:65:42:3b:91:d4:0b:82:08:c7:ef:94:65:1f:
0a:86:ed:c1:a6:0c:80:7c:dc:e1:42:95:25:b2:b1:
33:eb:1d:1a:3e:c3:14:c4:3f:ec:e0:01:ab:7f:c8:
1a:d6:74:b1:29:04:d9:c2:7b:09:86:1a:26:8b:46:
d4:2d:d2:d4:7f:d6:49:f8:33:64:70:68:a9:c4:bf:
b3:85:40:cf:27:3d:89:0b:09:91:47:53:c5:64:7d:
a6:26:cf:1e:f5:32:bd:76:11:cc:01:72:03:4d:00:
5c:86:25:35:8f:bb:b1:bc:63:cd:91:60:f6:23:5e:
27:f7:3a:d6:05:61:6b:56:7c:48:c6:00:6d:3c:65:
50:0a:93:10:ba:46:66:0a:4a:15:81:19:0a:5d:33:
a5:20:6c:81:61:de:75:d4:81:a1:16:e4:68:ff:38:
bf:cb:00:a7:d2:c2:8e:d7:94:65:3b:bf:97:05:d1:
8c:8e:92:87:2e:49:c6:53:bb:de:76:1e:42:41:e8:
05:3e:12:e0:dc:52:90:a5:4b:88:f4:e4:a6:b8:2d:
94:02:82:7a:b8:72:7c:01:94:6d:9e:49:c1:fd:95:
4a:4a:e4:c0:52:90:86:27:b8:5e:83:c4:1e:9b:de:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:5A:41:E6:5B:90:7D:0E:8E:1C:17:63:A7:CF:97:EE:AF:F3:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1c68eb-3226-3840-9908-9bb928de3ba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
65.216.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:d9:ec:b6:9d:1f:78:e7:53:9f:8b:56:fd:1b:ea:f0:69:76:
51:a6:a0:5f:50:f4:75:e7:e1:b7:e1:3b:e1:e9:e5:3f:aa:7d:
12:69:f7:dc:86:0f:f6:e3:1e:a5:91:29:97:84:0f:62:e9:4d:
84:df:b1:52:99:21:53:87:9a:2b:d9:25:d6:2f:df:2e:cd:73:
e1:cd:83:44:b2:9b:04:f6:81:b1:68:a5:64:f2:24:0a:84:f0:
b2:54:af:eb:4e:c4:bb:fd:ca:b9:ad:2d:20:9e:da:e2:38:1a:
a6:3a:cd:fa:5a:02:e1:f3:c1:e7:9d:5f:a8:2d:54:32:a8:54:
f7:72:b8:1d:86:64:0b:49:ef:b5:17:23:07:91:82:1e:fd:a9:
19:8d:fb:13:e3:17:16:64:8a:4e:31:e9:2d:7b:18:08:89:f9:
d6:99:7d:e8:45:a4:36:7b:06:df:8d:97:98:fe:78:7f:7b:a8:
16:ea:c7:ea:90:76:bf:da:5e:8e:c7:5b:2c:d1:17:c8:b2:06:
4e:70:86:b5:ec:90:b0:85:ce:6b:e7:f3:c5:92:91:ac:f1:54:
09:04:1e:e4:e0:e5:f3:90:ca:50:85:5b:fc:69:63:86:7a:7f:
c8:91:e8:ea:d5:5e:2e:91:f5:54:2f:ed:16:d1:e5:ea:f1:06:
03:82:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:59 2025 by rpki-client