Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
File: eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa (raw, json)
Hash identifier: Hl7ugvoyHcR/yLrWu4fcB1DCudyvzVv5mL2a0o6OM/Q=
Subject key identifier: 9A:94:7C:98:6E:7C:59:38:0F:75:BB:9D:40:AD:79:2A:16:11:31:C0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F044A2084ABF55E127E9B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 96.249.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:44:a2:08:4a:bf:55:e1:27:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=86f6ec4f-d681-4e6e-83d2-620688f6297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:3f:ef:68:d6:c1:36:02:ae:f5:27:f3:ce:
ec:2c:63:f9:f2:b0:60:a2:05:6d:d5:07:34:4c:c5:
60:b4:bc:dd:58:ec:82:c2:fc:92:42:8b:a3:59:cd:
8a:a4:04:18:35:32:92:33:f2:c8:62:20:db:c5:bc:
f2:41:b1:54:d5:3d:50:12:50:72:79:7c:cd:94:90:
66:44:ff:03:3c:49:50:56:00:62:7f:f1:97:c5:53:
a6:52:9f:91:41:9e:f7:de:b0:20:3e:cc:67:71:14:
43:55:c2:0d:2f:88:0b:31:ad:35:95:49:3e:e3:ce:
b3:67:0b:60:76:60:46:c8:c3:36:a8:da:1f:18:9c:
26:5d:cc:78:69:f6:5d:d5:b2:3b:bc:46:41:b4:37:
42:d0:0a:a1:b1:2f:c7:11:d0:f3:e0:68:f2:3b:53:
ee:d5:12:ba:d4:60:45:65:d7:18:2a:c5:aa:fc:d5:
97:4b:6c:9f:40:7a:3f:5f:35:5f:94:c4:be:9d:80:
ec:50:a8:ea:4a:27:04:02:d6:0e:c1:8b:2b:e5:fa:
fe:94:9d:9d:2e:d3:a0:9f:7c:f2:de:57:31:10:21:
56:95:ff:41:15:da:e3:4d:d6:9f:b6:7b:10:06:88:
40:49:25:bd:8b:81:8b:cf:54:a7:c9:38:5c:03:ff:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:7C:98:6E:7C:59:38:0F:75:BB:9D:40:AD:79:2A:16:11:31:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.249.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b8:d3:4f:d5:bb:a0:38:bc:fc:b6:fd:87:68:98:02:7a:f3:
d2:d8:a5:db:e7:e9:70:0a:2c:77:c1:44:38:36:54:dc:60:3e:
52:06:55:93:1f:04:7a:e4:8b:38:0e:d1:71:8c:a7:21:ff:2d:
85:50:e9:ce:22:f9:91:64:55:0c:ed:58:19:ad:50:76:56:7d:
4c:b3:f5:e7:33:9d:1a:9a:f2:6b:8b:f6:ac:1d:96:69:0b:d1:
5c:f1:5c:36:ed:25:cd:a2:d5:48:c4:39:e6:04:60:fb:a0:f7:
fe:66:34:3b:11:0a:ac:de:89:02:18:23:64:05:1c:0a:15:94:
aa:ff:e3:7e:5d:8d:26:c9:9d:e8:c0:fe:ff:79:7c:95:c7:5b:
d3:6f:d5:42:6f:56:88:2b:c6:fb:b3:93:d2:8f:5a:bb:11:70:
ae:49:38:47:a7:dd:09:4d:ec:40:ca:7b:7a:41:34:19:b9:f0:
ff:61:c4:72:a1:ab:00:2c:0c:09:1c:68:8e:42:82:9c:ca:af:
61:6c:64:68:53:12:a2:ea:35:4a:eb:e1:48:a2:7c:34:28:99:
d9:6b:6f:ec:d7:1f:01:e4:45:42:77:c2:b0:c9:d4:30:4e:63:
a4:71:47:e5:93:48:81:f4:47:34:d4:5c:19:97:ca:c1:78:13:
a4:5e:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:03 2025 by rpki-client