Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
File: 35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa (raw, json)
Hash identifier: HvaxWGXKemnHMBY1BgH+/pHjPFwMOdrBnZh4sG6awm0=
Subject key identifier: 07:23:7F:A2:9D:3F:9C:89:AD:74:23:37:31:AD:BE:55:5E:D8:88:EB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A98C4F84095307061E980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 22394
IP address blocks: 174.41.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:98:c4:f8:40:95:30:70:61:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=368207f0-0656-4870-b99a-02c973d16644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:88:19:11:da:54:03:83:d6:cc:b0:e6:4e:
fb:c4:36:99:61:f2:e3:5d:ea:e9:08:fd:9f:1a:63:
cd:95:bb:b9:0c:a0:41:f1:af:46:28:8e:56:71:e9:
68:bf:11:5c:cd:ea:58:7d:1a:65:19:0b:f5:67:d9:
4b:c5:95:49:65:a0:d6:8c:46:24:5e:47:6e:6c:11:
44:19:b1:1f:7a:8e:72:3d:a3:37:37:1a:be:7a:a5:
45:7f:15:77:f5:85:dd:be:1c:eb:09:db:45:50:b4:
14:fd:f4:da:0d:6a:1a:11:0a:ab:b7:82:61:31:e6:
8a:50:39:0c:59:5b:bc:b0:89:22:58:cc:aa:91:b2:
33:24:22:3b:02:0f:b8:92:fb:1b:1a:b0:98:6e:58:
9d:5c:05:c3:f1:f4:d3:a0:9d:b0:ed:48:0c:29:ed:
af:50:b2:0e:94:ac:40:d2:b5:f5:5f:4b:77:c8:6a:
71:7c:2b:9c:e2:7e:0a:aa:f4:3e:be:b1:36:ee:19:
d8:f0:5b:32:a5:f9:fe:4b:31:d2:79:da:cf:b8:a7:
d2:4a:58:4a:63:be:ce:d2:5b:45:a6:57:fd:c7:b4:
dd:4c:f7:23:27:d6:bf:80:e9:07:ab:0e:24:a5:83:
70:0f:77:42:fe:71:af:ed:0e:4a:98:88:7f:70:33:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:7F:A2:9D:3F:9C:89:AD:74:23:37:31:AD:BE:55:5E:D8:88:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ff11e1-7841-385b-9a1d-a6b4ca25098a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:08:e0:7e:1a:9a:5e:92:7e:d2:eb:12:22:d8:17:f7:83:ac:
44:c5:bc:43:d1:66:85:ba:b9:9b:fc:58:7e:58:02:5d:e1:a3:
86:16:c3:79:da:20:c3:da:57:a9:dc:12:fc:08:9c:76:d7:da:
0f:9f:50:2a:f1:84:71:4a:5c:e5:e7:85:ec:a1:87:aa:d3:cc:
f8:68:61:02:a3:2f:29:79:60:a4:8e:11:61:6e:a3:f5:77:cf:
44:0d:94:f0:1d:c9:a8:b9:b0:dc:7b:50:f4:14:3a:d6:11:68:
c2:6c:0f:03:f5:4e:9d:f2:1e:ef:4f:b4:5b:96:7a:d2:32:6e:
bf:08:49:6a:51:05:90:c5:16:f5:1c:d2:38:c9:0b:40:d9:9b:
f7:14:95:df:20:97:c5:9d:85:af:38:9f:fa:9b:8d:51:e7:f3:
a2:30:23:6c:4e:6f:01:63:70:6e:c5:23:b0:52:10:f4:62:73:
6a:a2:a4:79:d6:8a:4c:09:ec:6d:27:2a:39:c4:e9:4c:a9:16:
f7:67:a2:20:6e:fe:a6:5e:3f:39:6b:84:e9:64:2f:7a:e0:fe:
aa:c0:12:13:b4:e6:71:cd:0c:e8:3b:1f:c0:a6:88:e7:25:a6:
09:73:5b:84:6d:ec:18:7f:dc:a2:eb:88:da:c9:74:0f:68:7c:
11:c4:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:41 2025 by rpki-client