Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
File: 9dcab617-7807-367e-9401-361064e28966.roa (raw, json)
Hash identifier: qU76tntku5qOT7z4KaT/dkXdNH6T1YcmmmS+Q2yfauY=
Subject key identifier: D3:CD:6E:38:EE:60:62:42:77:2E:13:4C:02:83:64:A6:95:74:7A:65
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04A45AD549A26CDB32C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 100.33.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4a:45:ad:54:9a:26:cd:b3:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2afe0b5f-74a5-471e-b5f1-f0fd058381a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:98:ed:63:61:45:eb:07:7f:fd:88:e7:91:
16:c2:b3:77:e0:08:6d:a5:35:e4:7c:8b:3d:4f:c8:
2d:07:3f:f6:bb:54:95:4b:c3:e4:dc:e6:10:f9:a6:
ac:64:56:ef:29:2a:dc:81:34:eb:54:fb:51:ac:13:
1e:d7:99:67:fb:39:6a:4d:8c:8e:06:66:31:72:3c:
3f:a7:7f:f7:35:46:cc:36:8f:b1:74:70:c2:d5:08:
85:30:d0:e1:d7:48:45:ae:b4:15:29:bc:93:91:c3:
04:54:fc:b5:5a:24:ee:b8:cd:26:67:2a:00:1e:ca:
fc:f9:96:27:f1:3e:00:23:01:ec:3f:db:23:0c:f7:
0f:70:b5:13:a4:ff:4e:15:bd:05:c6:fb:20:60:8c:
8b:55:c3:13:fd:57:4c:38:5a:41:3a:85:bb:aa:66:
86:b8:c3:c8:2a:3b:da:9a:30:f8:3a:05:f1:1f:f3:
0f:78:bf:12:79:54:06:07:08:e1:9a:f6:4b:49:5d:
8b:b8:91:28:37:58:99:73:0b:c2:13:b5:f1:61:4c:
d1:95:9d:00:59:b9:cd:47:3d:9d:c1:9e:e3:b6:fc:
b7:f6:bf:5b:2d:70:62:d4:c7:0f:0d:37:26:9e:36:
ba:d0:9f:c4:61:e4:f3:e2:5e:71:65:ca:71:74:2b:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:6E:38:EE:60:62:42:77:2E:13:4C:02:83:64:A6:95:74:7A:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:a8:26:e3:f1:51:be:de:86:04:73:5d:42:6c:68:7b:f8:2c:
c9:5e:7a:a4:04:84:59:1b:75:37:b6:51:40:b0:a7:cd:38:fb:
8c:68:71:57:5a:f2:53:53:9e:d2:8c:04:f2:79:13:e1:67:72:
45:5c:74:de:cf:b9:6a:b3:be:77:86:66:61:15:d7:20:75:72:
67:a0:74:ab:55:09:79:94:c0:eb:58:39:ee:92:5f:80:48:37:
76:73:5c:f0:4f:3a:94:99:cf:48:4b:41:8e:bd:e7:39:fb:13:
44:f1:25:d5:1a:ed:09:a2:e3:ea:b3:0d:9f:cd:f9:ef:d4:50:
58:8e:e0:34:e0:c6:b0:38:78:21:92:eb:79:5c:f6:e4:23:30:
58:7e:29:e7:00:30:4b:4c:f0:56:ab:56:18:0f:46:39:73:ad:
a0:04:52:42:20:ab:48:ec:52:0e:17:ea:57:cd:82:f3:a7:ea:
c8:ef:69:99:e8:81:5b:10:99:58:83:4a:99:8b:89:09:b2:8d:
df:8e:f4:e0:43:31:a5:24:4a:84:6c:3a:9e:fe:46:45:a3:db:
fc:1b:c3:66:c2:68:f8:54:6e:33:6c:e2:cc:fd:8a:c1:6e:cc:
f3:ac:1a:ee:c5:cd:5c:62:48:de:64:3e:cd:d8:d7:68:a0:d6:
18:30:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:06:58 2025 by rpki-client