Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa
File: b7d3a498-8245-32c5-bd52-02058f22413f.roa (raw, json)
Hash identifier: hcAkx5YlmwK8kuu0Djmu1dTdNsRji7pNUyDC4Q03TU8=
Subject key identifier: 3D:E0:BD:C0:A8:A0:5D:05:02:AF:47:55:26:80:17:AC:CE:08:1F:A0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56050E973031770CD7C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.236.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:60:50:e9:73:03:17:70:cd:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=ce650c90-ee34-4994-bd4d-89631df7b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:1b:7a:35:92:cc:fa:b3:d0:fa:0e:88:67:
b4:c8:12:53:d5:6a:8c:8c:77:5d:5c:03:7c:1f:70:
38:f9:59:78:4f:e0:a0:73:e3:bf:94:ea:3c:10:2f:
bd:fe:95:51:a3:c4:03:b8:05:30:ca:a4:86:15:2a:
25:9e:8c:08:ac:0d:50:c2:33:b6:ec:2d:7e:df:5d:
20:b2:98:37:ac:6c:b7:e1:36:21:dd:f4:a1:8c:a4:
56:f9:46:b0:0c:f7:02:a1:2b:21:81:06:ad:90:19:
24:8b:45:f9:30:4b:fb:32:7b:e4:9f:d1:3a:13:8b:
ab:dc:63:e7:ff:62:d3:a5:8d:c0:76:51:5e:3f:a5:
0f:ad:48:c8:71:c7:7d:00:48:b4:cc:a7:b5:86:e2:
7b:d1:65:43:af:1e:6d:d9:f8:39:63:ae:04:d4:ee:
d4:cc:b5:be:11:f6:d4:cf:99:0f:40:f5:3f:3e:40:
fd:69:10:f9:ad:51:3e:04:5e:ce:51:fe:0f:3e:bb:
89:a5:c9:72:07:ed:93:fa:c8:da:95:dc:1c:00:8a:
be:ac:f7:a9:f1:4e:6b:87:0a:27:96:38:27:83:e9:
d3:c1:be:7a:bf:68:a2:2b:b0:b0:aa:72:41:3c:64:
ad:92:e7:df:28:a7:fa:d6:54:fe:a8:c8:31:f0:ba:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:BD:C0:A8:A0:5D:05:02:AF:47:55:26:80:17:AC:CE:08:1F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.236.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1f:b7:52:b3:29:af:3b:3b:4a:83:19:1f:07:db:e7:e1:d4:
85:b4:d7:ac:77:d1:c2:d7:e5:a8:33:ba:c0:24:e3:96:85:db:
aa:20:9e:d8:a5:66:5a:d6:72:7f:9b:17:f0:30:75:ac:67:0e:
97:32:02:4d:33:9a:53:ae:07:31:68:2c:6b:5c:fc:ab:25:cf:
26:16:b0:2e:d5:ea:56:49:4b:b2:1f:a8:7f:4a:0b:00:c8:76:
0f:5a:65:a6:d8:46:ca:5f:2d:f6:00:1e:54:bb:59:28:82:5b:
b5:b0:1c:67:8d:a3:44:4f:5b:46:d1:13:bf:62:db:a0:99:6c:
09:fc:30:10:49:32:d2:cb:b0:8e:d4:50:dd:15:65:a5:43:aa:
3c:26:07:82:e0:8d:de:a1:d0:d3:e4:fa:66:ec:72:2d:aa:1a:
c7:95:ad:cb:90:cf:42:7c:c2:a1:e3:67:1d:de:e2:11:34:a2:
e2:81:55:22:68:98:b9:fe:94:79:bc:67:ee:21:f3:10:c4:ec:
80:98:af:9c:24:c8:4d:16:4a:ed:4e:99:ff:17:30:ed:f1:46:
8b:dd:10:f1:ac:29:d8:63:ab:ec:de:a2:ba:10:0a:69:bb:89:
d0:0d:aa:93:b7:ee:18:2e:f8:2f:b4:0c:af:a4:e7:cd:59:71:
2d:9e:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:42 2025 by rpki-client