Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa
File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json)
Hash identifier: 8TEjmV7x4zEmNBpyHdusYTlqaeCOCPssQWQYhDGMXUk=
Subject key identifier: 98:3B:60:B4:89:D8:DA:C7:87:D6:50:65:DC:91:BF:63:FB:F0:60:9A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C32F0FA64EDA72E263C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.255.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:32:f0:fa:64:ed:a7:2e:26:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=c0209867-3c49-4d97-bc05-1cd0165a54e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:6c:e4:29:41:85:b7:8c:51:89:c4:c2:fa:
3d:e6:74:54:75:d6:c2:58:65:6a:eb:80:10:4d:f1:
35:f4:06:6d:23:5f:fa:c5:62:25:cf:d1:52:08:9a:
bf:5e:7e:89:85:c9:63:cb:6d:76:22:3b:22:49:59:
d3:81:fd:b6:72:60:0c:4b:74:56:8e:51:f8:7d:75:
0b:4b:ed:0c:15:6a:a8:05:88:5b:9a:51:93:e9:3d:
95:03:60:92:95:73:2f:14:e6:57:06:63:06:3a:7e:
ac:4c:87:99:e4:7c:67:98:5a:c4:cb:da:0e:03:92:
31:11:b2:09:42:02:dc:dc:de:98:ea:69:5d:cc:34:
10:a2:1c:9a:7f:43:20:dc:54:ef:0f:c8:bb:52:fa:
cb:e9:86:c0:4b:67:c4:dc:dd:d6:02:79:02:8b:e8:
19:18:d9:fc:1e:fa:ea:fe:c6:42:a5:55:ad:e7:cc:
07:e3:f6:cb:c0:1e:df:2d:0f:c5:34:bd:e2:b1:c6:
a9:95:b2:69:30:c2:93:23:5d:33:59:55:31:b0:b9:
72:83:61:d5:9f:0c:8f:62:ac:95:b4:8e:77:5e:fd:
6c:a8:a0:de:05:b3:50:d9:0a:dc:98:0b:15:e8:48:
77:87:c1:7e:db:0f:6c:7a:32:fd:2e:2c:92:c0:37:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:60:B4:89:D8:DA:C7:87:D6:50:65:DC:91:BF:63:FB:F0:60:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.255.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1f:a7:03:67:ea:38:68:17:35:c9:37:23:32:7f:8f:8e:27:
b6:5f:18:c4:26:de:a2:7c:84:fe:1e:23:bf:74:76:72:6f:ab:
dc:5f:aa:29:11:eb:77:34:95:16:73:66:72:ea:5a:a7:ac:81:
72:b4:2a:18:c0:c5:2c:1e:56:88:bc:99:a0:09:06:0e:21:16:
f5:fb:59:44:78:68:a1:87:5c:42:a4:82:98:4b:ea:53:67:f3:
b9:fa:0d:7f:7a:55:61:77:99:3e:ee:2f:86:f0:a3:c5:e6:09:
fc:6e:f5:b7:93:67:12:57:16:70:2e:25:16:62:ab:78:4b:ca:
89:16:8e:8f:81:66:55:8f:77:09:ce:94:3f:09:11:cb:7b:25:
bf:3e:87:9f:30:89:5f:05:31:03:ff:c4:31:c9:f5:14:54:17:
5c:15:be:11:1b:fb:8e:8f:ce:40:2a:89:b7:c9:d7:fb:ff:85:
14:49:b4:06:a6:18:5e:83:a6:e2:05:a8:19:ad:4f:e4:0e:80:
d3:4c:34:1f:d9:a9:6f:0e:57:80:aa:35:8c:d9:63:97:af:5f:
89:17:b3:d9:a9:f9:54:0c:71:e1:ae:63:f9:c7:74:49:59:9a:
ef:04:d7:96:09:41:05:1a:f9:1c:79:7f:02:5e:b2:20:97:e5:
43:db:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:58 2025 by rpki-client on console.sobornost.net