Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa
File: aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa (raw, json)
Hash identifier: SWlW3E2U+XZqL0iHjFucy53Z07V0MAIMV9Btp+92OhE=
Subject key identifier: FF:C1:19:67:8A:17:B0:6E:90:F2:57:0C:DF:C7:04:2B:8E:88:D3:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56C8E456FE155F1EC1B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.243.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6c:8e:45:6f:e1:55:f1:ec:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=4fe7da90-a1f2-4c67-bd9c-3fdb4647604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:d2:02:ea:23:01:d3:20:4a:27:3e:1a:ad:
1b:5e:bb:29:6c:df:0d:64:ad:8f:2f:8b:bd:68:16:
6a:26:88:1e:aa:6d:60:4e:17:f7:e8:5b:3a:30:de:
23:ed:d0:ea:db:e1:e9:72:f0:8b:e4:9a:76:15:ab:
cd:8c:08:9c:cb:bf:fb:c7:56:28:23:88:ff:43:9b:
88:b4:2b:7e:24:e7:d0:51:30:10:9c:7b:cb:1a:ae:
c0:89:15:85:fc:9c:1d:f3:1c:a4:c9:6b:ee:a9:ff:
91:7d:37:8a:3c:54:cc:35:85:35:98:41:eb:69:b4:
db:91:e5:80:43:75:ac:d7:fe:86:e6:85:f4:3d:d5:
5c:be:f7:27:04:20:55:4c:ae:10:f1:72:9d:ae:c1:
21:fd:49:32:9e:52:78:21:4f:09:c8:70:d9:1c:f6:
da:93:c3:f5:99:96:49:34:68:e9:ac:63:e0:e5:4e:
a6:79:b5:59:a9:c0:d6:eb:db:d8:c5:57:6e:bc:a4:
9a:8e:1e:48:d1:c2:b3:45:8e:34:2b:e3:6e:e6:4e:
cf:89:1c:e4:a7:6b:c2:7a:d0:72:d3:ad:a4:1f:3a:
91:e4:32:7e:6e:44:c4:3d:af:1e:1b:5f:b7:82:26:
bc:68:08:30:86:e6:cc:11:63:ae:5a:b1:32:9d:bb:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:19:67:8A:17:B0:6E:90:F2:57:0C:DF:C7:04:2B:8E:88:D3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.243.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:29:5a:44:49:61:6e:57:9c:00:e9:25:40:e2:ab:fb:19:37:
b2:52:5c:59:14:81:0a:c1:4c:a4:e2:95:97:8e:a8:c7:40:89:
45:ed:9a:43:85:ed:31:47:3a:e5:b3:0a:5f:18:1a:13:99:90:
0a:5d:69:51:a7:62:4c:c0:11:3c:2d:ea:76:c6:e9:c0:e7:75:
7b:aa:ce:1e:2b:0e:70:8b:8a:7d:ac:10:4e:5d:40:cb:d0:4d:
3b:38:8b:b2:10:ed:fc:25:ac:23:08:07:11:07:67:fb:25:28:
ba:d7:e1:98:33:ab:b3:50:ac:b9:1d:34:f5:97:cb:d4:16:53:
86:2a:06:14:d9:37:e2:5c:8e:ec:e7:12:d1:48:4b:2d:c5:54:
b8:20:7a:9f:67:0d:ce:a8:e6:e1:05:8e:b4:8d:80:b5:9f:51:
60:84:aa:c1:d1:cb:33:00:7a:98:8f:5a:bb:18:53:a0:8d:15:
0a:01:55:ec:1f:42:17:71:13:fb:cb:d1:be:cd:08:2f:a3:6f:
28:ce:68:84:6b:07:f4:04:e1:03:a6:3b:5a:8b:0d:47:ea:3d:
5a:68:bb:1f:5c:05:de:4e:98:71:5a:c8:1b:a5:c1:76:67:48:
dc:16:6a:7f:85:b2:54:a8:5b:8b:83:a0:9d:22:ec:d8:4a:d8:
6b:25:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:41 2025 by rpki-client