Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa
File: a720f3f7-daa9-3495-8ee1-cbf733dab870.roa (raw, json)
Hash identifier: LyFQtDy7gW8Q/VyHlFXDe5Go51a0pkMg6sDsgJmpewk=
Subject key identifier: 8F:E7:22:45:0B:93:A0:88:54:AE:97:55:33:D9:D4:2B:C7:C2:13:E7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696070EC88F9B7F648900280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 174.200.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:70:ec:88:f9:b7:f6:48:90:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8c55bd68-9bd3-43d1-beff-b9dfacea2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:c6:e1:dd:c8:6f:28:e0:7c:35:33:5a:20:
f5:8d:f1:e4:5d:fe:ea:63:14:20:32:a6:ac:0f:24:
ef:58:18:27:16:de:04:91:c5:aa:f0:53:6b:4d:bc:
d8:34:3d:4e:d3:78:ce:03:f9:d7:88:18:19:58:3f:
b8:ed:d1:68:7e:cc:a3:cf:11:da:dc:b9:51:90:04:
f6:8e:0b:43:75:f4:3c:be:ef:03:5f:9d:cb:64:ab:
12:bb:87:09:e1:0b:14:66:a1:70:6a:66:dd:fc:a7:
b0:5d:a7:0c:c3:4a:cc:0f:25:2a:2e:2d:e3:68:0f:
54:62:0a:30:4f:ca:05:76:48:cf:58:3b:9b:17:f9:
43:e0:e4:35:c8:ce:5e:67:90:de:36:4e:2f:38:5d:
41:17:c8:72:2a:62:48:d6:27:62:56:d1:65:13:ef:
19:e1:3f:d6:20:d5:05:cd:35:cf:96:00:c9:2e:7f:
5d:ef:21:75:af:92:ea:5b:fc:df:ee:c9:3e:77:fb:
b8:e1:58:52:98:35:42:56:21:bf:32:c7:d3:aa:a6:
28:90:17:83:aa:25:a1:9b:04:1a:70:14:a5:ab:02:
ab:2f:c0:3c:43:f3:de:ca:c9:ab:a5:07:06:e1:e1:
ad:07:f5:e3:94:a1:41:f0:3e:82:89:bf:0b:16:3b:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:22:45:0B:93:A0:88:54:AE:97:55:33:D9:D4:2B:C7:C2:13:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.200.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:50:3e:09:91:9f:31:bb:1f:f0:7f:df:80:63:3a:dc:c4:ac:
e0:a8:b6:06:8e:2c:14:82:24:f9:0e:7c:9a:79:52:2f:6d:9d:
13:a7:23:14:2d:25:11:32:c8:8b:e7:df:e4:99:3b:5f:9d:5f:
98:af:e4:34:fd:5c:f5:56:80:d4:e2:a9:1d:a2:11:18:48:4c:
c6:6d:4c:4a:1e:a3:b8:84:8d:2c:3d:16:59:42:27:27:db:dc:
6f:99:5c:a1:f0:36:a4:3a:ca:61:6b:fc:93:9c:80:ae:05:83:
9f:98:97:11:5a:a3:21:66:dd:58:a4:56:8d:af:cc:f0:b4:90:
01:08:a6:d4:c9:3c:3b:b5:54:cd:71:16:c3:07:99:c6:8f:fb:
8f:3d:62:b4:49:d6:f5:42:bd:72:e6:3b:e1:10:0d:f3:05:8a:
b8:ea:67:32:c4:d9:9b:a2:e6:56:4c:f3:58:d4:5b:21:13:ca:
ac:55:7e:70:98:77:8a:8c:d0:cb:dc:63:06:86:7e:a2:a6:75:
7f:64:dc:46:b9:7e:f5:1f:f1:57:fe:36:32:89:f7:e0:ce:5d:
8d:7c:cf:40:cf:f3:fd:40:b5:20:65:d1:30:61:0c:4c:d0:28:
2d:a2:bd:c9:16:78:e1:82:43:ec:8c:f9:95:ab:54:ab:55:b6:
26:b6:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:35:22 2025 by rpki-client