Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5301f0f5-e269-3af2-8880-3b6bb546df7b.roa
File: 5301f0f5-e269-3af2-8880-3b6bb546df7b.roa (raw, json)
Hash identifier: kXE30XLhBICkWjZLwkdz2FD+I4gVIUpdKXQ7udxnYkc=
Subject key identifier: 57:E8:EC:08:E3:E7:81:6B:FF:18:E3:DE:E2:C0:E0:25:6C:8F:F8:12
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100AA1E3C4494E7A64D09240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5301f0f5-e269-3af2-8880-3b6bb546df7b.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a1:e3:c4:49:4e:7a:64:d0:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f83370eb-073f-43ae-a149-4854e4c366c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:9a:ef:21:fa:2d:ad:b4:8d:a1:bf:28:54:
92:5c:5c:ef:83:9b:99:e7:ee:60:68:a8:84:2b:01:
8c:25:88:9e:c1:cd:6f:cb:fa:2d:65:48:5a:32:59:
1d:ff:d2:6e:d2:6a:96:f8:0c:af:b3:9e:7f:c3:13:
43:fc:c3:b3:c8:4a:78:01:38:32:70:50:af:a5:ec:
f1:cd:6a:7d:88:d6:61:a5:2f:5e:43:c1:9d:57:a0:
a4:53:2d:13:e4:25:80:04:0f:48:95:61:b3:6a:f2:
53:f6:a0:5c:a0:7b:fe:a2:c4:7a:f2:0b:d2:66:85:
3f:5b:30:74:bb:d8:b7:1a:eb:d1:dd:a2:8b:52:60:
30:3a:9f:fb:b2:0c:5c:4a:6d:f2:29:6e:99:70:91:
cb:c0:ee:ec:47:fa:72:85:3f:5e:dd:97:9b:80:74:
bd:60:fa:62:61:59:c4:5d:77:e4:57:3f:08:13:ab:
9a:59:78:6f:a3:48:f3:e7:c9:2d:c6:66:df:6d:73:
ff:03:45:fe:5b:0f:86:7d:f2:df:84:b8:9e:ec:0c:
92:04:17:fd:57:6a:90:33:f0:74:db:25:3d:9b:19:
ed:36:6b:be:0b:bc:2a:5c:cb:48:7c:96:08:3e:41:
0e:d9:8a:e1:22:22:c4:1a:35:47:5e:99:ea:0d:1d:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:EC:08:E3:E7:81:6B:FF:18:E3:DE:E2:C0:E0:25:6C:8F:F8:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5301f0f5-e269-3af2-8880-3b6bb546df7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:a9:f7:a7:20:b3:f2:4b:f2:73:e5:5d:fd:cf:56:e0:22:22:
0e:55:53:69:ca:e8:43:7d:f9:b0:5b:5b:d6:ef:59:96:bc:27:
76:1f:c0:06:84:91:ec:7f:2c:11:c6:79:6d:80:69:55:1d:65:
e9:52:87:ff:36:7c:ca:4c:d7:95:83:a1:fc:23:ba:81:9b:8e:
e0:93:3a:9d:d4:8f:80:ab:d2:20:f6:0c:ff:ee:e4:2d:5b:cb:
40:6b:75:70:e9:8a:7c:f8:26:df:9c:5e:3b:60:5f:66:29:df:
42:a1:32:ee:ae:db:5c:38:0a:ed:78:83:9f:6d:3c:76:56:a0:
02:8e:a8:74:3b:28:9d:22:9a:c4:0c:79:94:1e:f8:5f:9e:d9:
1d:9f:a8:4b:a7:10:01:a1:60:1a:c1:b2:6a:91:3d:0e:da:ac:
fe:5c:ff:70:61:39:50:cb:03:44:fa:f9:2b:61:12:55:c6:15:
e2:88:37:0c:96:5b:b1:35:09:34:39:20:bc:74:27:b5:3c:2d:
a2:aa:1a:96:00:8f:a6:3a:be:41:11:bd:44:4d:0f:c8:e2:eb:
b5:50:b2:96:7f:f9:3a:80:dd:38:4f:9c:22:2b:db:40:dd:7c:
55:6e:bd:75:e6:39:07:fb:7e:2d:b2:bc:28:be:5c:cf:4e:42:
e6:3c:aa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:17:53 2025 by rpki-client