Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5ee92a8-2100-33aa-ac15-f70d067e1fdd.roa
File: a5ee92a8-2100-33aa-ac15-f70d067e1fdd.roa (raw, json)
Hash identifier: eTJAfiNdfgkpA1eCtSFZXB2GrdOsDErSRYh2Tqe6mpA=
Subject key identifier: 68:78:E9:08:C7:42:49:BB:7D:6C:A6:D6:92:B9:8C:E4:BB:46:7A:73
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA742273FFA7F6A9EB9CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5ee92a8-2100-33aa-ac15-f70d067e1fdd.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.231.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:74:22:73:ff:a7:f6:a9:eb:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=f623b1cd-8e04-4de1-819b-8cb40a12028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:56:96:c2:a4:81:67:94:dd:d5:33:e8:36:
84:01:2c:9a:85:9e:11:1b:53:0c:de:cf:dc:3e:3c:
fd:25:dc:57:20:4f:46:98:40:09:84:bf:ba:dd:c9:
b7:dd:61:a1:df:df:4f:06:e0:9a:56:48:c3:92:72:
cb:61:b0:d7:81:7d:4f:21:00:93:d7:15:91:af:3b:
aa:09:4c:e8:0e:ca:1e:5c:74:fb:5d:b1:f2:5c:27:
b8:1d:51:2b:98:f5:ac:75:b2:7e:bd:6b:32:a9:16:
67:df:14:d5:3b:c7:d7:01:ee:cf:b7:92:83:db:66:
1c:e7:da:9e:98:ae:12:73:01:70:0e:bb:c7:99:7f:
c6:27:e8:66:35:e2:e4:e3:0a:44:1d:c8:ff:76:46:
e5:02:f2:43:c0:fe:1e:b1:1e:87:0d:8b:ee:a5:84:
fe:dd:7c:35:89:fd:f8:3e:07:21:ee:25:40:0d:40:
cd:26:d1:82:a8:c8:8b:21:27:fd:30:57:81:7c:bd:
66:86:98:23:d2:91:27:e2:2d:0e:70:3b:62:37:bf:
59:0e:8a:a6:c1:be:47:16:a4:64:48:e8:ce:26:2d:
f6:0e:27:89:51:a2:bc:94:a7:a2:1e:cb:d1:22:ca:
71:4c:f7:da:af:fd:05:62:a6:ed:36:6a:04:ad:6b:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:E9:08:C7:42:49:BB:7D:6C:A6:D6:92:B9:8C:E4:BB:46:7A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5ee92a8-2100-33aa-ac15-f70d067e1fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.231.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:71:39:6c:c4:66:3a:57:6c:14:89:be:00:02:86:20:c5:14:
0b:a4:62:38:e9:a6:9d:fd:cb:7d:29:3e:83:0c:79:94:09:44:
68:40:41:b8:ab:e3:27:f1:10:1e:9e:e9:42:75:d5:53:e4:8f:
ce:da:bf:03:89:7d:d3:04:11:d0:53:eb:ab:59:49:b6:15:a9:
f2:c1:3b:46:89:89:3e:d9:e8:12:1f:1b:10:67:0d:56:32:84:
03:d7:3f:25:29:12:df:0a:46:67:9e:b9:18:42:ba:e8:b6:fb:
9f:2d:2b:6c:ce:e3:74:6f:f7:17:eb:dd:26:7d:2b:fd:ec:78:
24:91:48:7a:f0:c7:72:50:9e:27:9a:72:06:23:80:5d:f4:74:
f5:d2:59:7b:20:e9:95:14:7f:63:b9:96:9a:66:2b:06:15:8c:
bc:16:cc:c4:58:1d:cd:9a:40:8c:53:cd:2b:2c:c9:31:58:b3:
a2:9d:51:fc:14:26:b4:8b:5c:e0:4f:a4:24:ab:46:74:e7:aa:
99:c7:76:be:ec:65:98:1c:ac:89:fb:b3:a9:c7:37:87:92:1d:
58:b8:97:68:dd:24:cf:1c:e1:12:cf:e2:21:53:1e:5e:d5:47:
ca:86:24:d3:29:33:a2:4e:f2:aa:a8:9f:54:36:45:45:b2:4e:
d0:c4:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:48 2025 by rpki-client