Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa
File: 8a68452c-9164-34f9-851d-74b68c2c3f99.roa (raw, json)
Hash identifier: U460f8/QZ0XqD3SNewkdIiNwQmpF3R9BUfPoX3sd+ok=
Subject key identifier: BE:86:EE:0A:9A:5D:9A:3D:59:63:F3:C6:86:72:AD:25:64:C1:8D:9B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100AA1BDD4D0BDDF80D6AD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a1:bd:d4:d0:bd:df:80:d6:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=2e3cf553-205a-400b-9347-5541f49e65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:cd:08:d0:b9:8d:ba:9d:fb:60:62:31:3e:
99:00:fa:65:d6:3b:dc:d5:0a:79:0f:74:7c:ac:b5:
ef:c0:25:ee:9a:6d:2c:63:70:35:71:11:d7:1b:f0:
33:62:19:06:68:86:11:20:16:ee:f9:66:7e:1f:cb:
95:19:68:08:c6:ea:cb:e0:82:75:50:a5:08:49:0d:
53:01:5d:5e:20:30:46:a3:de:1c:51:c7:76:da:64:
7e:03:5e:54:37:4e:8d:e5:35:70:4c:3d:f4:15:8b:
12:5b:6a:10:1b:d4:57:f0:5d:d9:fd:ea:ed:9f:0e:
9a:2b:3e:2b:54:b4:d4:53:3a:51:78:09:35:07:80:
d2:a5:41:4d:06:47:31:73:7d:e5:cd:d8:dd:17:5f:
1f:52:77:38:2e:69:dd:36:3a:6d:67:00:06:cd:48:
72:40:ef:c7:2c:a8:82:03:97:a9:10:f4:fe:47:98:
cd:93:1c:c5:93:ab:a8:05:c1:11:2d:f9:aa:ba:00:
0c:db:f5:61:1c:e0:40:32:bd:88:62:aa:77:32:f5:
01:be:11:e4:83:92:65:e1:44:6d:02:78:ac:23:97:
80:e4:2e:56:27:38:96:a7:23:58:9b:fa:1d:6b:79:
83:c2:4e:c2:fc:e2:93:8e:79:fb:9f:6a:9b:c6:64:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:EE:0A:9A:5D:9A:3D:59:63:F3:C6:86:72:AD:25:64:C1:8D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:13:10:fb:0a:a4:0c:3c:cb:d3:af:96:de:24:73:f0:a2:3b:
40:91:2c:d5:2b:77:28:79:a5:fb:53:cf:5f:77:81:95:33:9a:
23:85:c5:66:8b:b9:dc:f8:5e:d3:82:5d:74:71:60:1d:68:a2:
48:5b:03:c2:5a:11:29:63:2c:59:5d:fc:b4:1d:c6:e5:9e:40:
97:05:c0:27:f7:d6:71:c3:e2:6f:f2:75:c3:29:53:72:a3:84:
90:65:f1:bf:00:c5:e9:6f:33:8c:71:e7:12:ad:e0:7a:73:77:
9c:8e:34:72:4e:d6:1a:28:3e:d2:1b:0f:77:4c:4d:d9:f1:df:
4d:64:aa:03:2a:21:8b:9b:78:94:b0:d1:3f:53:e1:aa:9f:28:
2b:9e:a0:fa:47:97:65:df:cd:19:45:35:63:a3:9c:1a:f1:ea:
1f:5e:10:28:09:5f:02:9e:d5:56:02:32:c4:d4:f7:f3:47:7b:
89:63:dc:85:ce:a4:e4:47:67:9d:6a:de:63:4c:1e:68:1f:ee:
e8:a5:4c:45:84:1a:7d:e6:d3:af:1d:e1:45:a6:a9:a7:4d:aa:
70:ed:73:fb:8a:51:1c:3d:46:d6:6e:7f:33:6b:41:f4:3f:2e:
fb:d8:ed:97:67:da:b5:a2:58:bb:0a:17:56:15:6c:56:b3:39:
25:78:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:32 2025 by rpki-client