Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa
File: 3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa (raw, json)
Hash identifier: b+wZK0Glgw8XVSo/qGLlzsBBGM8ic/IIW0NNnXJPSmI=
Subject key identifier: B0:56:5A:E4:FA:EA:CC:DD:C5:0E:5C:F0:3A:F6:E3:E0:A9:F9:CF:24
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100AA13BB74C4AC86B1E19C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 22394
IP address blocks: 174.41.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a1:3b:b7:4c:4a:c8:6b:1e:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=961d8048-f2d0-4e08-9c73-60d5808a6f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:19:80:0b:ef:a2:f6:16:8a:b0:06:53:94:
b8:ff:03:bf:6f:04:03:e0:e8:3f:32:27:99:0c:d7:
76:ed:a6:45:6d:54:99:a9:d1:5c:1a:32:12:e2:2d:
d6:ea:11:7b:9b:11:02:58:27:10:7e:c4:1f:3b:e8:
ee:3d:d6:38:64:ed:25:90:3b:48:5c:ae:2f:74:24:
e4:f7:45:37:17:da:77:0b:4f:eb:1f:54:74:1b:c4:
04:30:d4:9e:f8:d6:c8:35:27:23:85:85:6d:c6:95:
03:e3:56:bd:90:b5:77:09:f4:4b:a8:e3:4c:61:93:
b0:62:73:16:d6:5e:b6:0a:f0:e9:6c:33:7d:de:61:
8d:ad:da:cf:41:7f:ee:2a:ee:b5:de:ea:9a:8c:c9:
b3:a6:38:d4:ed:17:b4:7c:f7:23:77:4f:63:e9:0b:
32:08:ec:cd:5f:dd:d8:92:9d:e4:39:1f:57:19:4f:
5a:a0:71:88:78:96:27:23:5e:4b:59:31:75:cd:d3:
e0:e5:24:cb:a5:fc:9d:0e:26:10:ec:82:79:6d:b8:
89:a7:f3:18:82:c5:41:24:c3:1b:a2:90:f3:4b:54:
3e:1b:e6:51:a8:04:f5:d8:2e:a7:a0:02:8f:d7:b1:
6f:8b:cc:09:b5:b5:43:0c:7d:78:5a:24:77:57:0a:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:5A:E4:FA:EA:CC:DD:C5:0E:5C:F0:3A:F6:E3:E0:A9:F9:CF:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:bc:13:94:9a:32:f9:7d:82:cf:4d:8e:fb:2d:93:05:2f:d6:
a5:2b:c0:39:26:44:52:8f:02:ae:81:db:90:ab:ca:d7:89:b3:
b6:e0:79:d5:f9:57:29:5e:3e:49:f5:78:71:77:e9:f5:05:7b:
6d:f4:c7:63:40:5e:35:ee:4a:02:21:f3:e9:d0:eb:af:0c:37:
ca:e7:c0:ba:db:84:5c:5c:fb:cb:9b:be:4f:a9:f3:5f:e6:5a:
00:dd:04:57:d7:14:45:46:76:38:8b:a0:97:8d:88:e5:24:17:
6d:51:dd:b6:3c:27:d9:b0:32:96:48:0b:3d:c2:9f:76:e6:d4:
7c:41:63:28:28:99:a5:21:3c:a5:a2:1e:27:5e:71:5a:78:e6:
5d:8c:43:39:14:f1:fd:ab:35:cc:9d:ec:f5:4d:38:31:db:63:
89:b2:42:3f:61:35:c9:cf:d9:73:ab:78:61:19:fa:98:64:08:
9c:29:73:ce:fe:53:2f:ef:df:16:ae:32:e6:22:00:d7:58:bd:
fe:b7:dc:02:4a:1f:bc:8e:aa:ff:f2:c5:98:2a:d5:87:39:3a:
07:7f:14:f6:a0:e5:0d:e4:30:dd:92:e3:20:98:e5:6c:9b:96:
98:f4:1b:9c:71:ec:3d:d5:90:be:70:79:92:5b:fc:80:4e:bc:
11:92:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:19 2025 by rpki-client