Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json)
Hash identifier: L3t+UQsBb1oLp2fI/W7K1Nwo8Uf5P/GkLqTpTGssAns=
Subject key identifier: E9:3E:27:60:4F:27:20:55:C5:CA:90:BB:6F:38:05:CB:33:68:38:EB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F050D85F48C77A024B7780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 70.21.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:50:d8:5f:48:c7:7a:02:4b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=db54af20-b524-4780-93ca-4e6c628d394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:31:23:96:ec:13:97:f7:20:4c:95:a3:fd:
5e:20:30:8c:11:75:6e:86:6f:00:bd:54:b0:d5:5d:
42:83:1e:02:25:37:59:d1:75:f8:7f:33:c4:05:0c:
f6:f7:b5:da:4d:00:56:d7:69:25:6e:fd:3c:cb:a4:
81:e7:11:5f:a8:20:54:71:9c:ea:8c:48:9a:19:0a:
03:f2:ea:87:41:dc:17:a9:a3:a3:bc:cd:9c:9e:bd:
6b:f3:b0:27:36:a5:eb:f7:c3:1f:5d:e1:8d:88:6c:
cd:71:62:c5:76:84:44:d3:9e:77:9c:fd:75:3c:01:
9a:b1:8d:75:7d:42:89:02:2e:e2:f3:de:71:a5:2c:
df:a5:f3:7c:d4:b4:de:0d:99:94:9b:c4:01:e7:90:
01:99:28:b0:cb:04:8d:5a:29:a5:79:a4:e1:88:d8:
19:f0:14:9a:87:12:13:81:e0:6c:f6:42:ab:0c:94:
5f:ec:31:96:dc:47:a8:f9:85:b3:14:fc:43:9b:fd:
ca:1f:5e:b2:e2:60:b5:f8:41:9b:2b:26:92:c2:1d:
93:a8:77:56:6f:c6:bd:74:89:a2:6e:c7:50:8e:05:
06:c0:58:f1:3c:b6:86:87:33:03:1b:39:72:ea:8c:
83:6e:66:2c:18:98:7a:83:2f:00:bd:17:ea:af:7b:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:27:60:4F:27:20:55:C5:CA:90:BB:6F:38:05:CB:33:68:38:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.21.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:86:4b:b3:27:0c:4b:67:d2:99:8a:44:2a:c2:12:6f:0e:35:
04:ab:b7:1d:f8:11:df:23:00:e2:d3:e0:11:55:ea:49:69:12:
e0:cc:9d:c0:15:6b:90:0f:6a:b1:26:05:63:5f:d3:95:41:2e:
ef:07:04:29:ae:76:89:67:c0:37:d4:76:13:ef:17:73:bb:61:
62:cf:4c:db:72:70:9a:41:87:4f:71:ba:95:eb:15:30:56:55:
07:a8:50:bb:3d:57:87:6a:7c:6f:2a:22:bb:45:80:f1:c1:de:
f4:f5:ae:27:ac:28:ae:91:02:5e:c0:a9:20:84:b0:0b:62:c5:
25:eb:e6:4a:62:15:ce:1f:69:8c:6c:3d:22:1c:a4:2a:13:b2:
60:5d:1b:4a:f2:fc:3c:50:f7:83:f6:de:81:f8:f9:9c:2f:a2:
8e:d9:60:5a:e4:31:76:3e:01:7f:da:9f:e8:c9:5e:96:ec:57:
e7:5c:01:c1:ae:13:25:e2:dd:f1:24:f4:8b:1e:cc:2e:88:5a:
07:c1:b3:b2:50:8a:7f:43:a1:fa:4d:d3:20:19:e2:da:5e:b5:
37:05:b2:55:2e:69:7e:02:5b:93:7a:f5:3e:61:a8:04:53:bf:
a6:c4:88:c6:1b:c0:6b:2f:e3:5d:e7:0e:98:c0:56:b4:37:f1:
3b:f5:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:01 2025 by rpki-client