Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
File: e1fcf017-aed8-311f-89d1-f028d335b4c1.roa (raw, json)
Hash identifier: Q4x4kmC8NZLD4d2MGx4zK8cY8jWM+41AvNyieiRjK7A=
Subject key identifier: A4:DE:B3:B1:80:45:0F:69:6D:20:B6:C9:A4:5F:93:1F:B4:11:7B:F2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F045A04AB992F6E5A42E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 71.185.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:45:a0:4a:b9:92:f6:e5:a4:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9e39fa4c-597d-46b5-a90f-7b827c629a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:44:18:e0:8d:f1:ed:ba:d0:4a:3e:d0:49:
02:6c:8a:a9:7e:cb:eb:d1:fe:c1:fa:d2:f4:f9:5f:
b7:0a:bc:63:f1:a2:45:dd:37:82:69:ed:d3:3e:1a:
2a:36:a3:d7:66:6f:62:05:5e:25:1d:d7:c2:ce:4b:
a7:89:c7:07:e7:cf:c5:02:cc:b8:99:9f:d0:e4:7f:
df:5c:2e:c5:ec:d7:33:07:9b:68:02:b7:46:70:65:
de:67:f6:72:84:a0:0d:96:2e:23:7c:e7:eb:fd:2c:
66:d6:af:f8:5e:e1:a1:a7:ad:45:9a:0c:c6:12:da:
ad:2c:4e:25:a2:89:e2:b6:1f:c9:da:14:df:d9:73:
55:dc:43:fd:60:a3:71:b7:3c:70:13:ec:88:36:c3:
b1:e5:4a:d9:9e:db:a7:60:1a:1d:8a:9c:aa:9c:31:
c8:26:31:cd:70:37:27:5b:69:2e:11:ab:83:0a:de:
2e:ea:09:5e:4f:8f:a0:53:b2:b1:8e:85:db:79:3c:
43:21:bb:4e:03:8c:75:e6:66:ef:b1:67:54:12:cb:
64:9b:cf:79:47:f9:64:a9:61:75:a9:2d:5a:e2:1b:
cc:de:c5:24:cb:18:e3:b4:f3:63:7e:cd:f4:2d:8b:
24:5c:53:f0:d2:75:5d:68:66:f2:fb:2a:de:a8:1b:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:B3:B1:80:45:0F:69:6D:20:B6:C9:A4:5F:93:1F:B4:11:7B:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:85:3e:91:ef:53:3a:6a:01:bb:3e:29:55:5c:83:50:5a:87:
d9:d3:0b:69:94:6b:8f:be:67:34:8a:59:1f:23:95:61:fc:bc:
13:ad:ae:e9:5b:f3:90:94:7c:02:b9:37:95:70:1b:a1:0b:68:
66:d9:15:d1:b0:68:cf:3a:47:19:27:ab:99:e1:86:fe:46:3e:
5a:e5:c8:1c:be:ca:11:7a:a0:df:fb:af:4b:c5:32:18:70:a9:
3e:80:64:fa:ed:83:0c:44:33:90:66:f5:7b:d5:f7:b8:37:47:
24:ae:e8:46:1a:67:62:2e:15:b6:4a:28:a3:bd:b1:dd:27:4f:
c7:0e:63:05:4d:8a:7d:84:26:31:7f:a3:1f:46:8a:9f:ff:2d:
b5:58:f8:58:ea:a0:89:d6:bb:84:ea:57:90:e5:bf:15:8a:df:
89:88:3f:3a:47:d4:22:43:e3:b9:ba:b8:91:db:4c:1f:e6:ec:
ca:96:02:70:d3:01:25:a0:52:80:73:d0:f4:11:6d:d0:88:9d:
5a:9b:e5:b2:20:4b:97:ac:e9:5b:a2:d2:58:ee:04:34:6b:bc:
63:5e:32:88:b5:68:25:1f:d1:de:43:4c:02:a5:88:2f:e2:2d:
86:a6:c5:8f:c5:99:47:ef:68:ed:71:96:6c:6b:93:7b:24:50:
9f:a3:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:18 2025 by rpki-client