Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d8a001a-2fdd-3f0a-8d4f-12094a23edf1.roa
File: 1d8a001a-2fdd-3f0a-8d4f-12094a23edf1.roa (raw, json)
Hash identifier: RIwI7X9+Pg52HtrBhic6Qn0FPtnD1TPFy1H+lOvxZfM=
Subject key identifier: B4:9E:DE:F7:8D:32:3C:03:49:C6:68:4A:C5:FF:DA:90:80:7B:BD:7F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA79B5431FE0FC228FF1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d8a001a-2fdd-3f0a-8d4f-12094a23edf1.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.226.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:79:b5:43:1f:e0:fc:22:8f:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=e1203c18-f254-45f6-843d-e944c3ef5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:fa:9d:e2:bd:6e:2d:f7:9b:30:5e:6a:3a:
97:7e:11:80:0e:73:79:af:cc:ee:7f:30:ae:c5:c5:
3a:58:c3:93:3a:69:21:8e:c2:2b:87:a5:82:f7:08:
f3:c8:11:cc:05:f9:04:a8:0b:59:f4:06:f1:ef:40:
17:9e:f3:a6:0f:d1:2e:c3:60:71:0b:ba:27:ed:79:
1d:b4:e1:8d:7e:89:d0:2f:f5:cc:5e:a6:e5:5c:bc:
80:47:ed:50:3d:2a:21:b7:72:30:49:54:09:01:62:
ac:6c:19:d1:48:10:55:9d:6b:a9:00:16:57:b1:2e:
e6:11:ac:c3:36:6d:81:48:51:ca:e4:db:9b:23:4d:
f3:28:92:52:f2:c0:10:b1:f9:8e:e7:c4:2d:f7:38:
a7:26:3b:83:dc:7a:14:5e:03:12:12:e4:e3:c6:78:
ec:3b:ec:0c:3a:ab:7a:b9:9e:b0:0a:71:c0:24:bb:
a4:9c:00:1a:a6:36:df:11:26:e1:fe:1a:c3:43:ff:
77:9a:b5:31:5c:b5:74:c8:0f:d2:1b:cd:8c:bf:08:
28:13:b1:81:81:5b:14:8a:9c:4e:26:87:67:bd:a8:
a7:b3:74:51:09:d6:f5:31:04:3e:91:b0:b6:2c:40:
b8:b0:96:08:6a:ea:f3:a4:4a:ec:00:17:ee:73:f0:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:DE:F7:8D:32:3C:03:49:C6:68:4A:C5:FF:DA:90:80:7B:BD:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d8a001a-2fdd-3f0a-8d4f-12094a23edf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.226.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:34:b7:29:10:68:cb:14:a7:09:a9:4f:63:9e:a0:55:0d:ff:
dd:d8:37:97:d9:fa:ee:30:c6:c5:b6:ea:d9:df:cf:db:f5:98:
36:25:c1:13:b4:37:2f:2f:56:40:04:f6:58:77:92:f0:e2:a4:
35:f7:d2:9d:ab:ac:28:8a:f2:ea:8b:05:9d:b6:a0:71:d8:ff:
18:f6:e1:92:f7:a0:75:df:df:3e:b3:e3:c3:95:6a:6f:0e:a0:
f2:3d:45:57:31:c8:05:0b:6d:78:9c:30:eb:28:d3:e2:f8:96:
dd:50:21:55:fc:b6:95:43:69:91:36:08:d3:7c:13:4a:c7:60:
9f:e9:aa:d3:8c:48:70:74:ff:3b:c2:a3:65:cb:a2:c2:f9:f7:
24:bc:1e:48:5b:a2:5d:e5:22:a0:ce:87:b8:4d:a7:c7:63:64:
67:dd:2f:c5:83:8e:f0:2a:f6:18:3d:0d:b2:1d:dc:7f:eb:6a:
4e:11:7b:f7:7f:91:30:58:f4:c3:a4:e3:39:e4:56:85:b4:f5:
5e:4e:38:c4:c6:e1:b2:e4:85:9d:5c:d5:ab:ce:e9:02:af:50:
e3:7d:7b:b7:9e:98:47:4d:e6:4b:c2:2e:72:e0:bb:50:10:98:
29:62:2b:d4:80:41:35:e5:25:9c:5a:99:b5:3d:32:d8:7f:40:
87:86:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:05:35 2025 by rpki-client