Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
File: d8fb982a-1c07-32dc-bc30-bf26804ba396.roa (raw, json)
Hash identifier: Ig/qwUu0QnYMu76Pjk6y/om8JF35e6/Ks+ZvVspsJwY=
Subject key identifier: 91:CE:2F:48:7A:E0:5D:61:A7:9D:8E:B5:CF:B4:E8:07:C7:64:37:CA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848239553EC60217386B2E08B30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 204.51.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:53:ec:60:21:73:86:b2:e0:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=0dee1305-5e46-442c-8212-9d64c9ec1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:3d:9f:a1:e8:02:77:a3:3b:ac:a7:66:0e:
14:86:ad:85:28:77:72:b0:44:c8:87:8f:11:88:31:
13:e6:79:f5:8b:5c:bc:70:cf:fa:e5:41:67:d3:ec:
01:e6:38:48:b0:c3:e4:65:41:62:79:24:3d:65:67:
3e:8f:e7:08:45:ed:ed:d5:ed:2d:4c:0f:52:f0:a9:
4f:a6:c4:8b:7d:20:b7:45:a1:ad:0d:c9:d5:1b:4a:
55:f1:86:a4:bf:17:0a:46:1d:d6:74:ca:b2:79:35:
06:5d:21:53:96:d3:cf:13:aa:d8:d6:7c:00:01:1f:
66:8d:42:92:53:a1:9a:74:dd:3c:0e:f2:57:a1:90:
41:07:15:67:c3:c4:33:11:81:0a:24:79:64:ab:3c:
79:bb:9c:db:34:2a:86:9b:cb:55:be:44:35:d9:9d:
3e:5a:76:c7:e9:97:98:21:d1:1c:2a:1d:8c:39:74:
b2:06:19:02:b1:a0:92:33:74:fc:7a:d2:d0:f1:d2:
18:77:df:b9:6e:de:7c:a9:18:d4:20:7f:54:93:4f:
d6:0a:6f:04:22:65:c9:6c:af:3e:27:4e:a9:4d:50:
a5:e7:6e:7c:00:7d:ac:05:ba:26:79:1b:59:48:3c:
e5:fc:a1:a5:89:18:4e:8a:c3:7a:7d:6f:51:ac:8f:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:2F:48:7A:E0:5D:61:A7:9D:8E:B5:CF:B4:E8:07:C7:64:37:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8fb982a-1c07-32dc-bc30-bf26804ba396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
204.51.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:84:8a:c5:08:58:f9:57:74:4f:9a:86:96:10:79:ce:9a:98:
95:45:fb:72:a0:9a:39:2c:54:a8:a0:b8:82:03:e0:36:c5:3b:
cb:02:96:34:a9:f0:7a:23:59:f5:ef:2e:2c:46:96:76:bf:5a:
9e:c8:e5:d1:b1:e0:93:85:74:11:b8:17:0c:c6:ff:e2:8a:76:
da:43:f8:c9:e3:78:7f:1e:5a:b1:b2:83:cb:60:da:79:52:f5:
15:3c:74:72:7b:34:2e:7a:85:4d:8d:30:22:69:d7:2e:33:59:
f0:c7:51:7a:73:01:fe:51:00:41:44:e5:ac:e9:ae:8a:07:64:
98:c7:26:24:2e:a8:43:48:1d:14:2f:66:d2:cc:b7:77:37:b7:
28:5e:18:be:52:46:13:8f:6e:a9:4a:38:06:49:9d:c8:b9:ee:
28:16:f5:68:79:58:28:20:62:04:e1:f6:9e:8e:2f:22:6b:a5:
58:63:5e:a4:31:85:29:7c:a3:f3:5f:9f:51:67:a8:5a:5b:3b:
8b:7c:8e:31:27:b4:35:0a:6d:6d:f7:25:22:04:63:af:2e:54:
27:ca:8f:29:6d:56:e0:d7:0b:dd:13:0b:6f:d5:64:6f:9f:2e:
2a:43:09:60:6e:6f:c4:45:08:1a:6e:42:09:00:53:0e:7d:0a:
c6:dd:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:35 2025 by rpki-client