Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
File: fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa (raw, json)
Hash identifier: kuGRuT5pLNsKAyU2opcx4q9UFrlbrWj9fPh306O4IlY=
Subject key identifier: F9:6F:9C:A6:22:B6:5A:95:07:A2:50:B0:C1:A4:AC:B7:5F:6C:85:1E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7A4D2F7270EA65238E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 198.133.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:4d:2f:72:70:ea:65:23:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=30c059cb-5714-4fc8-b6b1-f829faf398b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:dc:0c:66:93:4d:20:92:04:64:b1:59:e7:
03:c3:31:42:33:99:27:6f:8a:3f:43:07:43:43:cc:
16:bb:d0:e4:99:28:6c:7d:5e:12:bb:24:f5:b4:33:
2c:0b:7f:e0:35:80:e1:c8:08:2e:c7:0e:57:c6:6b:
04:79:76:bb:15:b9:c6:e1:ef:db:19:8f:30:91:e2:
b1:ac:3e:6c:a1:b6:47:21:1a:bd:97:6c:f3:73:eb:
96:73:3d:8f:6b:46:e3:d2:14:46:57:3c:ab:36:b3:
ae:3d:ae:f0:69:52:83:82:67:bb:83:24:cf:89:33:
02:df:90:83:17:80:c4:f7:14:5e:37:ac:35:45:17:
cc:57:98:1b:3b:e7:9d:b5:71:68:8d:62:b5:11:9e:
63:ea:fe:c9:07:9a:8d:49:7c:c9:94:62:6d:17:6f:
23:09:c2:8f:06:bf:01:b9:1c:d6:5f:8c:af:18:af:
ee:33:f0:c2:c7:3c:30:09:ad:13:d1:ee:f1:5c:00:
21:16:71:64:8f:3c:cf:40:03:88:64:45:d2:c2:0f:
9f:05:c0:33:fd:23:7a:d6:ee:db:4a:75:6a:04:8d:
c3:37:b3:f4:5c:11:eb:72:08:14:7a:a5:37:bd:20:
56:0a:af:c5:2f:20:86:32:83:fe:a9:03:44:6a:f1:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:9C:A6:22:B6:5A:95:07:A2:50:B0:C1:A4:AC:B7:5F:6C:85:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:0f:db:38:23:7d:86:ab:c8:ca:ac:4d:dc:b3:c0:44:62:8d:
dc:bf:0f:fb:28:31:a2:a5:1f:9f:b5:66:4e:78:2a:85:a4:56:
2d:41:2f:62:f0:fd:b9:6f:9a:89:ee:61:00:4e:82:5e:44:1e:
85:67:05:f1:e4:d4:43:f9:76:74:7f:44:5d:78:e8:01:23:28:
92:ad:3f:12:b0:66:eb:5a:f8:1a:cb:59:af:b2:af:96:46:fc:
51:a9:e0:b6:e0:90:96:ef:d9:4d:8e:87:c3:6d:e3:3f:27:c8:
b7:d2:e6:36:cd:d3:08:97:af:4a:7b:e8:35:4f:2a:5b:f4:54:
5a:39:6a:4d:af:af:9f:18:4f:6e:24:94:fa:c5:54:f4:2b:86:
88:04:e8:45:40:54:c8:df:27:47:d7:cb:dc:42:18:dd:d6:0c:
82:b5:21:04:72:6d:00:be:89:24:91:80:8e:e9:ea:e7:3d:07:
c0:bc:b4:c7:00:08:13:8a:ea:2e:0a:b9:6d:b6:d7:aa:04:74:
27:a6:fd:7c:cf:8f:85:cf:0e:2c:c1:fb:97:7f:75:69:b9:42:
5a:45:3f:f2:06:63:61:ff:81:60:b0:d3:27:8c:79:89:8c:a7:
eb:0f:89:e1:85:05:aa:14:22:ca:97:c3:2c:ee:92:29:3e:1e:
53:ee:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:58 2025 by rpki-client