Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
File: da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa (raw, json)
Hash identifier: WaEZI1eXgGYPLY3VqC2WX5Ue8JmvPFkk4y2mFGZv2F0=
Subject key identifier: EA:67:2B:4A:41:92:EE:9C:5A:5E:90:BE:BE:4B:E7:DE:59:CA:F7:A0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56A9DB8E53EA07A53A700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.255.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6a:9d:b8:e5:3e:a0:7a:53:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=27fac42b-14d4-4cda-b178-978223e0adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:64:45:c0:1c:31:5f:24:5f:b6:07:25:07:
45:7f:ca:30:13:61:b2:04:f7:4a:f5:92:36:ba:a2:
32:ec:04:e4:16:4b:8f:56:99:0b:42:92:62:0a:74:
e0:b7:18:18:4c:8a:bf:a4:98:df:db:62:ee:f1:05:
b8:62:6d:81:5a:59:06:bd:86:c6:40:ba:da:e3:fb:
12:fb:6f:55:52:e5:c1:de:51:81:a5:88:9c:c6:ea:
f7:15:3e:6b:40:ee:07:12:7e:c3:9f:1f:1e:6a:b1:
7e:a8:0e:68:61:76:4c:0b:73:74:c3:c7:41:51:ab:
ed:10:dc:e0:f1:0a:19:7f:7b:0d:d7:0c:54:89:c7:
bf:f9:c1:58:dc:0e:1a:4a:d6:29:fb:cc:de:5b:b6:
e0:e9:6b:98:1e:4e:dd:c8:52:20:96:d3:06:8b:e9:
c8:f2:52:3a:c0:4e:fd:07:e4:da:2c:a0:6c:e7:e7:
7c:25:f6:5c:f0:18:aa:d9:36:bf:eb:c4:b4:fb:7a:
98:25:05:4e:88:04:a8:db:a7:cd:7c:b7:66:32:ec:
3d:1c:30:da:2f:4c:99:01:e5:9f:83:1a:6f:af:e5:
d4:d9:db:86:35:59:68:43:4f:7f:b9:30:62:27:5b:
d4:68:fb:98:d6:42:95:d9:d5:2e:1c:ec:80:0e:82:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:2B:4A:41:92:EE:9C:5A:5E:90:BE:BE:4B:E7:DE:59:CA:F7:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.255.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ec:38:00:c2:e2:c6:52:3c:6e:ce:af:84:2f:1b:d3:d9:52:
be:1a:54:1d:b5:f7:4c:9f:78:26:65:d1:d5:79:44:24:0a:f1:
7a:db:7a:43:b3:0e:05:b8:67:e9:ad:48:06:dd:1d:55:5b:76:
66:48:cb:9b:c7:9c:5c:21:83:00:d1:9f:0a:22:f9:91:41:f0:
1c:cf:60:13:d0:e6:cd:17:07:49:3b:a8:bb:8f:61:c3:ec:92:
0b:59:0b:74:0e:92:ad:49:05:08:61:60:b8:92:f2:07:79:9b:
85:b4:9c:2e:e9:4d:23:09:49:ef:16:4e:16:54:0e:1e:98:d7:
b3:c2:3a:13:aa:77:76:70:5d:91:a7:b4:6c:3b:18:8d:97:fa:
f2:6d:e4:8e:d9:63:ac:d9:91:ac:4a:19:d0:cf:8f:72:00:9a:
14:62:8e:f3:05:dc:1a:f1:79:5e:cb:bb:6a:26:14:b0:2a:c4:
e5:e6:7b:2e:7d:9d:aa:4e:c7:29:97:60:59:97:05:b2:6e:82:
fa:d6:ee:32:87:27:b6:9c:00:6f:67:90:2a:86:35:42:20:3c:
03:c9:05:f4:5d:7b:3b:d3:93:14:da:79:98:c4:12:99:7d:b7:
bb:c6:c3:db:3a:79:5b:57:b2:54:aa:fd:ab:d1:56:56:ca:c1:
d2:ce:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:31 2025 by rpki-client