Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa
File: c68e1926-8427-3e93-a573-e4c9f6684131.roa (raw, json)
Hash identifier: +/Wfo73Pei/In/7cxTufe/3J1/Nk/VCKYfcrLHX9iZM=
Subject key identifier: 3B:8E:7E:91:16:6F:D3:A8:C2:B2:0C:3A:0B:1C:71:85:DD:46:14:92
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF560FF741E08EDE173B1CA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.253.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:60:ff:74:1e:08:ed:e1:73:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=fb2c9a4c-3dc3-4ec4-9957-38e023b181d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:c7:00:8b:01:7b:4c:c6:f1:42:4c:08:46:
bb:07:ae:dd:51:8d:84:90:f5:d4:7b:6a:ec:04:91:
40:96:40:aa:aa:72:a0:f6:aa:99:9f:c9:6c:9d:46:
b7:8c:cb:d0:6d:a5:23:56:94:b9:61:44:32:df:83:
8d:4f:f7:5e:cc:fe:99:23:de:15:4c:dc:cb:88:d8:
5a:b6:d3:e6:c3:28:8e:8f:f6:3a:3f:38:7f:6c:23:
d2:aa:48:31:3f:20:53:50:01:60:66:7d:50:bf:98:
c9:22:d3:3c:32:7a:e3:65:10:58:6e:ec:6c:c4:61:
58:f2:15:63:b1:78:20:56:8c:e6:32:cf:66:1c:33:
d4:74:45:85:db:90:cf:7d:85:bb:7a:f8:ff:e9:2d:
9c:89:97:6d:79:f7:0c:4b:74:8c:c8:8b:ff:9b:23:
de:19:c8:da:1f:5e:cf:24:d2:7f:30:ed:ab:47:28:
5d:24:0b:ea:9f:10:50:1f:5e:81:82:d2:c6:cd:57:
cc:24:63:92:d6:41:6e:39:39:26:e7:24:12:9a:4f:
17:9f:fb:fc:26:93:8d:d9:8b:fb:69:0a:35:7c:4a:
03:13:53:8d:e7:9d:28:42:b9:26:31:2f:55:b2:a7:
09:c1:b7:e2:66:9c:b6:9e:89:49:3d:98:0e:c0:59:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:7E:91:16:6F:D3:A8:C2:B2:0C:3A:0B:1C:71:85:DD:46:14:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.253.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:61:44:8a:f4:47:be:d9:47:e0:4c:39:08:b9:b5:02:6c:2f:
cb:56:eb:f9:7e:0e:69:49:28:21:60:cc:f8:ea:af:9a:e2:72:
a9:53:c0:d0:87:19:17:9f:83:d4:21:86:a6:e9:cc:41:97:86:
69:a8:b8:87:35:2d:e3:d3:32:a2:b5:89:23:a8:f9:83:16:8a:
6e:ee:e8:84:b3:f5:04:a2:36:1b:cd:17:0e:00:8d:55:c0:10:
10:0e:c3:4d:0b:56:f3:b9:1f:61:04:79:4e:24:ff:ca:b8:f9:
07:a5:78:ca:8c:14:a7:b5:86:7d:65:c2:f6:cb:3c:26:a2:36:
9e:3f:0f:24:a7:56:7f:d1:2c:3c:28:1b:3d:14:7d:6b:20:c4:
1b:98:f5:3a:3a:0b:3a:91:5c:10:ba:9d:13:30:2a:92:e1:57:
4d:23:e4:2d:94:6d:3f:35:e7:38:76:c0:9a:79:8c:66:cf:c7:
be:1b:f9:06:7a:b9:a5:cb:1e:98:96:37:d3:c8:49:68:65:8a:
c7:38:8a:97:5d:f2:8f:5f:ad:8d:bb:fe:9b:58:ac:71:90:63:
46:02:ca:63:02:5b:0c:97:aa:7c:ba:66:fe:db:11:9f:d5:ec:
81:e7:ec:66:cf:a4:96:5d:2e:44:45:a9:9a:75:16:d5:c6:00:
91:e0:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:34:42 2025 by rpki-client