Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d298b9c-ba43-3caa-baab-bc6141851397.roa
File: 9d298b9c-ba43-3caa-baab-bc6141851397.roa (raw, json)
Hash identifier: Mx0kD7Ovu9p0q+0hCBgeuGZvJ0L9ncv4G0xsxRdoXx0=
Subject key identifier: 61:CE:7E:7C:D5:2E:0E:31:A8:9C:A5:85:F0:D2:3A:40:6D:96:63:3F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF55E46E61877D4FA2AFB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d298b9c-ba43-3caa-baab-bc6141851397.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.114.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5e:46:e6:18:77:d4:fa:2a:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=e47e0154-6a22-49bb-b670-9dd3cb0c7e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:0e:3d:b3:e1:9d:42:3c:fe:5a:71:40:9d:
41:9f:17:d5:f8:b7:81:50:e6:9a:f7:0e:58:81:e4:
fd:05:d2:00:43:30:7d:99:d1:5d:54:fb:cf:b2:23:
27:09:fc:f9:00:f5:64:3c:25:97:cb:2e:a0:8b:f6:
0d:54:b6:10:89:7b:88:65:e3:9a:b8:0d:cb:df:28:
7d:5b:b7:13:ac:9d:bd:a6:10:01:58:82:09:0b:41:
fd:d4:64:6d:17:8d:35:52:0f:05:c9:3d:da:9e:80:
29:b5:e8:b7:f8:86:ba:06:1e:0d:6b:c1:4f:1e:85:
34:3f:ec:74:cb:06:e7:e3:ab:77:26:78:c9:ab:d6:
92:e0:6b:fb:2e:fd:c6:ea:f9:02:aa:d9:25:3d:be:
99:23:27:dc:99:ad:b1:58:34:71:6c:5b:eb:b2:af:
ec:97:22:a1:40:56:d0:6b:4a:72:96:6a:ae:9b:b9:
74:26:61:c0:3b:79:fd:4b:2c:f1:ec:a0:7a:29:81:
ff:59:13:45:54:e3:db:1d:c0:fc:0e:07:cb:dc:29:
bd:b8:36:c3:6c:33:6c:58:a4:03:c4:eb:50:07:09:
40:c4:82:67:9a:48:c3:57:00:f6:c5:69:9a:dd:55:
51:6d:49:50:ef:a6:66:62:d4:3b:c8:80:64:36:64:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:7E:7C:D5:2E:0E:31:A8:9C:A5:85:F0:D2:3A:40:6D:96:63:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d298b9c-ba43-3caa-baab-bc6141851397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.114.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:24:3c:b1:66:45:89:73:ff:b8:5d:21:b2:c0:bf:99:7d:1a:
32:46:a7:d9:8d:44:68:76:09:6e:27:c4:52:d2:9f:1f:6b:38:
f8:3f:65:f2:70:38:12:62:36:f3:e6:35:d3:65:bb:21:0c:15:
9a:e4:ef:c7:4b:2c:f3:dc:df:bf:59:0f:08:7a:6a:09:0f:26:
ff:b9:e3:c1:b6:22:23:be:f5:da:ca:fb:6a:86:54:a7:25:91:
2d:f1:27:31:e4:07:80:87:6e:06:dd:47:84:f7:dd:4d:53:2e:
7f:6c:41:ae:b6:93:2e:a7:54:f1:8d:f8:11:30:78:90:a8:db:
62:9c:8b:c8:60:1a:ec:e3:a6:98:b3:9f:c7:ce:aa:99:fe:19:
9e:8b:b9:9e:de:7c:e8:f5:d7:e3:d8:a7:ba:74:ba:a5:e8:81:
6b:d5:84:1b:6d:f9:21:9f:87:34:c8:c0:8d:cf:4d:5d:a5:39:
fb:61:2a:55:ca:1a:6f:c8:3a:ea:19:b9:47:86:ea:94:c4:ee:
da:fa:be:98:7c:37:c8:b2:bb:42:48:68:f6:7f:b8:17:58:9f:
40:22:56:3e:22:2d:ab:5f:0c:4d:99:47:1c:00:c8:b5:e1:22:
9b:eb:98:0e:b2:e8:f1:48:a0:9c:e6:bb:a3:4f:80:18:48:64:
2a:5f:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:14 2025 by rpki-client