Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa
File: d9e19df3-2874-3b59-995c-406d3f301d2e.roa (raw, json)
Hash identifier: XIFJXhuCSkS8felyZpKZFbLeXS1Zo2kyz4msJAJXrRA=
Subject key identifier: A1:85:7A:3F:86:EA:73:72:C7:1C:B8:76:94:E0:17:2B:40:8E:2A:9B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56C16FFBF1DCBCA59FA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.97.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6c:16:ff:bf:1d:cb:ca:59:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=d2f74f79-ddce-4a36-96b4-936f27a78abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:c9:c7:d1:3d:74:e5:2b:c2:48:3d:21:32:
4e:f4:3f:d6:9f:f5:4f:a5:4f:2d:b3:9d:10:88:ef:
38:a8:c5:c5:f8:0d:9a:f2:91:e9:84:40:ec:14:47:
67:70:31:49:56:f4:58:4c:ba:e4:3a:92:47:cd:9a:
2f:8a:14:8a:53:ef:4f:22:fb:80:7b:f8:ee:8a:01:
57:20:aa:30:df:59:07:ab:11:b0:21:73:eb:78:95:
56:01:44:60:50:44:05:2d:24:14:e1:bf:23:d9:ba:
64:ec:fb:89:94:33:fe:e0:55:e3:04:a6:57:93:e2:
07:e8:e5:38:7a:49:31:93:ca:4e:51:6f:73:e2:3e:
2f:a7:ff:c9:a3:61:1a:de:1b:1d:48:47:94:0c:46:
90:a3:f7:08:b2:7b:33:69:39:3a:30:2b:c8:e0:48:
ec:10:ca:57:c0:3d:09:c7:ed:1a:c6:40:24:0f:0b:
5f:1c:bc:4e:c3:a3:9d:6a:d3:db:e5:14:84:86:f7:
a5:5e:56:0e:8e:0c:32:c1:ca:89:69:71:62:af:06:
50:1a:1b:48:60:4c:b7:96:08:36:48:e2:06:a4:db:
f2:5d:9b:6f:30:69:f2:8f:d2:31:2d:2e:b3:f8:02:
64:af:1d:b7:26:69:7a:1c:2b:1e:f3:d1:72:8b:70:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:7A:3F:86:EA:73:72:C7:1C:B8:76:94:E0:17:2B:40:8E:2A:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.97.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:8e:ea:4d:25:73:9d:9a:b3:7f:b3:99:e3:43:f0:01:22:46:
ca:ee:60:93:39:d9:db:f0:a2:4f:09:4f:60:53:12:af:29:68:
a9:6a:19:c7:fd:c0:ee:ed:01:d9:3a:45:cc:75:73:95:56:fd:
00:0f:d9:93:77:ab:71:f5:41:1f:27:19:84:6c:6b:f6:64:e2:
78:ad:bd:b2:73:f0:63:ba:b1:cb:df:d9:39:60:d1:42:a1:a0:
16:5b:cc:99:c5:14:f6:23:cb:f4:18:06:b8:83:7f:17:1d:22:
f3:ea:57:ae:4c:83:85:37:cb:1c:3a:90:5c:ca:75:9d:0a:2f:
90:40:36:64:9b:11:4b:16:41:aa:f5:cc:73:25:88:ad:29:97:
65:a6:1c:0f:24:0e:92:17:ee:3c:4c:ed:18:c5:9f:09:bd:31:
f6:cf:8c:14:27:3d:34:0d:30:69:b0:1f:3c:d0:ee:3b:b9:cf:
9c:1d:27:88:e4:3a:9a:2b:64:4c:e5:3f:f2:1c:03:22:f0:5b:
97:88:28:4e:eb:e7:64:eb:ef:49:60:9c:ba:f0:44:b5:81:18:
8f:5f:53:81:ae:5e:fa:d5:7c:3d:e3:81:33:d5:c2:f4:06:45:
13:42:9c:dc:45:fc:96:c3:0f:6f:5b:60:6e:07:47:8c:e6:9d:
b2:df:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:43 2025 by rpki-client