Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa
File: be1b1e98-e9da-3e25-958c-00742b2232fb.roa (raw, json)
Hash identifier: XfgQfL5K8i8+QU2cMwWmzq0PuNBRaqjeXBLJeNlyrZk=
Subject key identifier: 1F:42:CF:86:12:CD:DD:25:43:01:15:91:DC:2B:05:48:78:A6:DD:30
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858488BA96AD60C970DE4E8D7C080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa
Signing time: Tue 14 Jan 2025 20:45:36 +0000
ROA not before: Tue 14 Jan 2025 20:45:36 +0000
ROA not after: Mon 14 Apr 2025 19:45:36 +0000
asID: 0
IP address blocks: 67.104.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:a9:6a:d6:0c:97:0d:e4:e8:d7:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 14 20:45:36 2025 GMT
Not After : Apr 14 19:45:36 2025 GMT
Subject: CN=dc98ce3f-8f36-4e5a-b42b-cebdca98800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b0:b3:56:a2:82:2a:b6:91:95:41:21:68:41:
f5:84:51:af:fe:49:4a:01:be:89:77:72:d9:81:55:
cf:f3:85:90:bb:76:86:f2:fc:03:6f:f8:2d:2e:d4:
5b:42:30:7c:0a:84:50:a7:51:e3:b6:e1:15:5e:9c:
f4:d5:6b:82:cd:ac:bd:85:f2:0c:fb:8a:40:f9:6d:
8c:64:ae:97:7f:ae:5c:f0:3a:12:d9:cf:c0:37:2b:
bb:84:06:1b:62:86:4a:5d:0c:cf:de:24:58:95:85:
87:4e:0a:79:96:f6:5d:7a:5b:14:c3:a7:09:f0:47:
39:96:80:8d:5f:60:40:d8:d0:c6:e6:61:93:18:3c:
3e:86:43:dd:a2:74:af:36:11:1f:de:84:19:b0:f8:
24:d4:85:88:6f:a2:97:4c:7d:eb:94:ff:bb:da:64:
c8:a0:67:2a:87:f6:87:79:e9:f4:11:ab:b4:87:6a:
a0:4a:35:42:b1:e3:a1:65:8f:9e:de:9a:5d:d6:44:
28:1e:5d:51:fd:bf:2b:9a:3e:39:1e:96:6d:4f:e2:
65:5a:78:5d:92:10:24:72:f9:df:73:ea:cd:06:97:
bd:0f:31:0f:3e:f4:2c:ab:e2:7f:3d:9b:0a:88:a2:
c3:64:83:76:a2:34:35:6a:88:87:fe:be:22:41:43:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:CF:86:12:CD:DD:25:43:01:15:91:DC:2B:05:48:78:A6:DD:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
67.104.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ca:9c:f5:3a:22:3c:31:b9:b5:d2:d1:6c:18:26:cc:9a:1b:
52:5a:8f:ff:22:eb:f3:c0:38:6a:2c:25:28:d0:0c:da:c4:88:
22:79:9b:6a:55:b9:99:e0:7c:1f:36:39:ac:b7:4b:1d:51:de:
91:94:6d:f2:6a:e5:ae:a1:bb:ec:21:1a:46:f8:ec:14:77:ea:
7a:ed:62:0f:b1:5e:68:b8:85:42:97:c5:53:78:81:b5:50:94:
1d:60:b7:ba:7b:18:22:5b:d4:0e:bb:12:97:40:45:d4:f3:ba:
ef:95:9e:e0:94:7e:69:fd:38:b0:1b:36:d5:eb:a4:fe:e6:f2:
d8:75:8d:ee:d7:d2:aa:f5:0c:93:40:9a:65:cb:d6:88:64:43:
bb:05:5f:c9:92:6f:6b:60:ee:84:42:05:07:ac:9c:4e:ff:30:
53:98:cf:2e:43:4e:7a:e3:10:48:e0:37:03:56:c2:03:9e:69:
9f:3c:9a:c5:10:a5:91:c5:e0:71:20:22:39:f7:5f:7a:5c:61:
96:c2:42:12:10:b4:94:3a:32:fe:02:0a:5a:6b:12:25:cd:51:
3f:5e:aa:22:59:a5:af:94:a2:46:c9:f5:7a:fe:eb:b5:c5:83:
69:b1:63:d9:7a:55:2e:36:70:70:c3:b8:cb:72:27:5f:c6:59:
85:f1:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:06 2025 by rpki-client