Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
File: 8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa (raw, json)
Hash identifier: lm3oIs24LpXO3DMkwFyuXQG2ZaNERc7ocJbZzLJg/NI=
Subject key identifier: 2D:5F:0D:7E:79:46:16:9D:FC:7C:B4:E6:F4:53:09:D3:01:33:B3:9E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100AA20111F95FC735248480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a2:01:11:f9:5f:c7:35:24:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=8fd2547f-7020-4784-9832-02735196792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:f1:d9:1c:d0:bc:00:94:a6:0c:16:a3:9d:
f2:25:a8:0f:3a:8b:40:9a:2f:b1:fa:7a:aa:b8:c0:
87:af:0e:0f:fa:45:09:cc:8b:f3:ad:36:b1:d5:9f:
be:31:cc:d3:60:9e:dc:6e:e7:9b:1d:50:c3:8e:85:
76:0d:79:99:ff:e5:b1:a5:c3:c4:fe:7f:03:04:14:
e3:bf:02:dd:47:2e:70:f4:84:54:b5:12:ac:5a:96:
95:2b:26:73:81:58:56:3c:c1:12:9b:bb:88:fd:f1:
60:d7:c2:80:a2:fa:38:6a:af:1b:91:76:78:2a:0c:
f9:d8:f8:08:36:27:36:d1:c1:f9:76:02:3b:52:fa:
b8:a1:50:27:90:7a:f3:6f:54:12:13:53:79:c4:16:
e2:df:9c:e7:7a:5e:f8:29:95:44:4c:65:14:6e:5c:
24:28:5c:b3:71:f5:23:cd:18:d3:14:3c:d0:b7:75:
0d:08:d9:4a:f9:32:e6:c7:fa:1e:22:af:b8:04:27:
2c:b2:35:07:ce:8b:8e:02:c0:88:f9:75:ca:eb:26:
b3:58:52:a5:a2:38:f5:e3:6f:1b:10:40:a7:1c:85:
40:36:5c:1c:91:84:7c:cc:a3:25:b8:17:e3:6e:1b:
23:a3:53:74:9f:68:c1:2c:d4:3c:b3:00:17:02:5e:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:0D:7E:79:46:16:9D:FC:7C:B4:E6:F4:53:09:D3:01:33:B3:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c2:84:38:39:40:85:48:14:2f:2a:cd:e6:94:e3:51:07:e7:
0c:d3:76:8a:20:cf:7f:dd:fd:72:49:a2:c7:b2:00:26:75:f0:
b3:28:b5:76:7f:99:a6:cf:16:71:50:62:cf:9d:a1:29:12:03:
b5:4b:b5:c9:5b:f7:5a:56:84:6e:ba:f0:32:5c:34:26:98:88:
52:17:56:93:91:e3:10:14:09:77:e6:b0:1d:4d:53:6d:98:6a:
68:71:00:d6:41:29:82:df:01:c9:88:bc:10:6d:6d:ba:99:fe:
24:3a:3c:98:a5:ab:26:ed:e7:13:38:7e:66:d2:4f:30:2e:ed:
b8:ee:e3:47:f6:48:1a:4a:11:43:be:87:6b:de:f6:68:b7:08:
a4:36:e2:26:44:4f:7e:0d:2c:54:66:90:79:be:e1:95:ee:2b:
c1:f0:76:2c:69:01:d5:2b:0d:10:de:3c:58:1d:e5:0f:4b:81:
ef:69:60:c6:98:1a:da:45:da:aa:17:10:86:5a:92:59:9a:7d:
07:fe:f8:13:69:93:76:04:88:f9:c8:e9:d6:45:fd:d4:b4:99:
e0:d1:ee:5a:25:25:d4:18:5e:4f:cf:02:f7:48:34:ee:a2:8f:
04:a3:39:34:28:e5:01:13:95:e6:b8:dc:b9:dd:8b:e4:5f:ef:
45:c8:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:23:58 2025 by rpki-client