Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa
File: c91234ee-3db4-3f36-b031-44ca94db6a7c.roa (raw, json)
Hash identifier: lhEkZpnVXMyxY6XgQh0iE2Du9mHa5Acbm/EuMA6VwXE=
Subject key identifier: EB:C2:2F:EB:92:DC:16:E7:A3:50:7E:9C:54:11:40:E6:95:29:55:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F0505B244A48550EE1DC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.106.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:50:5b:24:4a:48:55:0e:e1:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=f605ca42-2ec8-4296-bbb2-dac0b8f3c902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:38:ea:89:98:11:69:45:b8:73:2e:69:77:
9b:61:df:4c:bc:e1:11:ac:f1:5f:4e:17:45:a7:80:
74:7d:6b:56:08:b4:e4:e7:2c:a6:6b:8f:53:fa:b0:
41:39:00:73:8c:32:fe:b0:cd:fa:a0:f4:33:94:9f:
81:04:ad:f4:44:56:b5:f4:c3:09:fe:3d:83:29:a1:
1c:ba:76:aa:d3:7b:0d:1a:16:08:da:df:61:8f:9b:
23:ff:29:6e:df:ac:15:be:2c:63:98:33:ea:fe:c4:
0b:4f:05:9d:b4:0d:b5:03:e1:40:8b:4c:61:5a:94:
24:54:fa:7d:05:1d:2c:2d:ab:81:62:c3:f3:92:88:
12:7c:e3:76:25:5e:0d:91:2c:da:43:80:5d:1e:50:
7b:74:2d:49:0b:9c:7e:d3:26:c7:69:64:2d:e9:43:
87:62:70:b3:6e:b8:32:24:33:c2:93:ec:1c:a9:18:
38:2e:99:ec:24:8f:58:1a:76:1e:d8:f4:61:2c:4a:
31:bc:16:61:fa:ec:11:23:0e:0b:17:b2:fb:db:3e:
08:46:3d:33:d1:62:64:e5:2a:77:0f:62:87:17:27:
65:14:f3:b9:88:f6:55:53:63:22:69:33:e8:b5:17:
24:e8:6c:2d:50:7d:33:ed:24:d0:f7:7d:06:a4:09:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C2:2F:EB:92:DC:16:E7:A3:50:7E:9C:54:11:40:E6:95:29:55:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.106.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:49:34:73:3f:c5:e8:0b:c0:3b:27:e7:bd:c6:22:c9:cb:77:
ee:64:27:1c:45:5c:34:9c:94:a9:ee:86:9f:a5:af:73:f3:fd:
26:64:d9:91:70:78:89:52:31:bb:98:0d:a7:7d:80:85:ed:c5:
e5:ae:01:27:ab:ac:bd:d7:32:1e:fa:eb:81:11:0e:c8:9f:88:
0c:b3:05:07:ba:d0:4a:6a:c1:3e:37:18:d7:79:ee:e3:77:f8:
db:5e:d0:c3:cb:6b:05:11:96:ba:b9:ac:4b:2b:68:4f:e9:19:
f9:8a:ed:54:c7:fe:51:a5:9b:40:e6:d1:a4:6c:51:4c:a9:cf:
4a:7a:19:d2:a0:87:5d:01:24:e3:6b:0a:2f:ad:ac:f0:d7:b4:
2b:9d:0b:8c:46:4f:2b:f5:24:1d:db:94:ca:26:d1:1c:db:64:
47:96:c8:bb:12:ba:97:29:77:80:59:d8:6f:03:d7:58:5f:47:
98:9b:31:80:2e:01:af:ee:03:a2:b5:02:2e:67:65:c4:57:85:
f7:3a:fa:0f:0c:3a:1d:01:13:a2:7a:4f:f7:2d:d6:e6:4d:c7:
bb:77:e6:f9:cb:d9:19:ca:db:a2:31:44:85:f8:0b:db:58:de:
17:d1:5b:5b:e3:fe:5b:33:3f:34:55:c4:dc:32:79:f7:20:7a:
64:99:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:02 2025 by rpki-client