Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa
File: e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa (raw, json)
Hash identifier: ahakk9GcVFK6Oy6lkwEg8iJrqloo5SsQEhzY4SurGq4=
Subject key identifier: A7:21:D4:4F:B7:8E:C2:DD:4C:1A:45:2A:CA:0D:78:00:86:9F:91:4C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F046E506E3C4DE01D94C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 173.50.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:46:e5:06:e3:c4:de:01:d9:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2cb3fe01-1c44-4010-9719-51f49e83639d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:fb:ac:14:4a:30:ed:50:e3:95:55:f0:8c:
46:2b:f5:53:a2:2c:42:ef:d7:48:aa:fb:75:2b:9f:
e7:58:fd:59:5e:21:c3:3e:03:46:6e:17:b6:4c:20:
5d:d3:92:43:07:e5:af:f9:c4:8d:a6:ab:b4:ff:25:
1d:a1:8e:db:27:f9:38:a7:b4:b8:a0:d7:b0:c3:70:
72:38:16:f4:9c:05:b2:f5:f6:21:82:b4:7d:25:21:
ed:4b:82:0f:96:a5:ad:40:74:6a:57:f8:dc:bb:4c:
bc:4d:4a:82:69:8a:68:d8:8a:09:1c:e2:35:1b:cf:
cc:4f:4a:03:17:fa:1e:44:05:66:86:83:bc:4f:fb:
31:40:bb:f9:05:34:b5:3b:ba:15:99:5a:e7:57:f1:
e8:15:65:5a:66:ff:95:97:0c:1a:85:33:a4:0e:88:
86:08:d0:19:9d:bb:4a:2b:30:64:bc:ce:08:3d:28:
ac:38:3a:fa:0e:c7:01:02:07:87:b7:28:23:26:2d:
c4:aa:bd:84:be:7e:e8:08:56:6e:40:7c:60:30:74:
d1:10:56:77:b9:b9:09:68:5a:da:69:28:09:42:f0:
65:33:ec:38:ed:c0:13:9c:09:ff:6f:d4:d0:fc:61:
4c:5f:3f:bb:64:ce:7b:96:b5:c5:7f:2a:81:81:7f:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:D4:4F:B7:8E:C2:DD:4C:1A:45:2A:CA:0D:78:00:86:9F:91:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.50.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:39:a8:fb:d8:cb:d8:88:a2:a0:c2:c3:51:d1:4f:2a:01:34:
48:d1:c8:f6:34:71:f3:1b:ca:26:c7:00:84:cb:91:fd:0a:f5:
f8:06:3a:08:e6:7e:7b:d0:c6:2a:cb:61:c8:be:57:a1:d7:2b:
c9:69:c5:e6:c9:fa:b4:8a:a3:5b:f9:4b:3b:fd:77:fd:ed:82:
b5:f9:6d:69:4c:31:65:92:f1:3f:94:91:d5:c2:44:7d:79:d4:
50:7a:74:c1:5f:2f:fc:fe:d4:9c:2f:14:02:52:94:24:82:18:
0b:a8:3e:91:35:93:f0:d0:10:89:97:14:79:11:82:4c:b8:99:
9d:c4:cc:3c:ca:4a:1b:c5:f9:45:8d:57:af:e1:ca:d8:05:1c:
28:fd:82:19:8e:50:a6:96:c1:45:16:06:e4:8b:4f:74:3e:5c:
19:c2:3b:8c:2b:68:b4:d1:09:43:79:bc:dd:c1:3c:72:c0:9c:
32:6c:ad:ba:67:38:74:b2:06:2d:df:6a:69:59:fb:3a:9a:6d:
f6:b4:ae:1d:8e:5a:ea:d1:28:55:d4:02:ca:3d:73:a9:0c:33:
2c:bf:07:90:1a:16:f4:9a:fa:ed:e8:89:5e:d8:c3:df:45:37:
b9:cc:59:c6:a0:36:7d:82:06:e9:97:7f:f0:67:2e:a8:54:c7:
0c:6e:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:25 2025 by rpki-client