Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa
File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json)
Hash identifier: 52JhLveTZCmSaS/gjkr+DK3dMyvXdwA7F/DrJR/2yrk=
Subject key identifier: D5:23:EB:B6:E1:AC:10:D4:9E:44:6C:88:3D:B3:B7:DD:2A:9B:53:E1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9A8D6646AD8B2B5FACC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9a:8d:66:46:ad:8b:2b:5f:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=6139a71f-c69c-492b-a7bc-a08e5baaa95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:36:61:76:61:b2:05:b6:37:93:09:52:00:
4a:02:ef:1d:88:57:cf:e9:57:27:cd:2a:0b:13:57:
52:f7:0f:0e:9e:1b:cc:f1:de:40:be:2b:30:de:0b:
b4:96:73:f8:59:8c:85:6c:e0:80:37:99:46:c9:28:
db:d3:d3:60:75:1f:24:4c:7d:25:22:36:c4:83:c6:
e2:2c:58:57:5b:88:75:60:8f:b9:55:aa:cb:3d:12:
12:b6:3f:27:db:3e:0a:1c:7d:10:c9:73:98:a1:d4:
fd:37:62:54:74:98:01:68:14:46:96:b0:63:4b:d8:
5b:6a:ad:1a:f2:5c:cc:3b:50:b5:a3:e1:7c:d1:44:
d8:22:72:ea:a4:f9:3d:c3:e5:93:9d:51:1e:d9:22:
e0:18:f7:20:92:b8:fa:40:67:11:d8:38:2f:33:a2:
6d:d5:4b:c3:9f:49:61:da:2d:ba:35:71:46:e4:1e:
81:a8:23:e2:3b:72:ad:db:f4:0c:7a:31:8f:36:3c:
e9:21:b0:4a:cb:b2:0c:16:9d:29:39:47:91:64:c5:
ac:eb:3e:9b:49:24:cc:3b:46:6e:4a:32:45:cb:9b:
b1:d2:af:0e:71:5a:0c:7a:40:9c:58:33:7d:45:af:
6e:7b:66:f2:8b:8f:a3:d8:c8:f3:e8:84:f9:79:f9:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:EB:B6:E1:AC:10:D4:9E:44:6C:88:3D:B3:B7:DD:2A:9B:53:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:cf:00:c2:6b:e7:74:6c:52:f4:93:f6:de:c1:e6:3c:cb:96:
5d:fd:c7:3c:e5:41:34:84:b4:bb:ed:2b:12:7d:13:4c:53:4b:
b5:46:de:02:90:e3:ee:45:49:28:fa:f9:66:46:ef:67:90:6b:
87:79:27:a4:71:e7:67:fd:92:b1:6e:49:8c:fc:d0:fd:59:8e:
bb:30:b7:44:23:cf:b3:86:80:a7:82:f5:cd:a3:49:3e:13:f1:
61:ed:b5:83:bb:d4:92:2e:64:3f:80:76:36:4d:a3:35:a2:39:
1d:90:26:9e:e2:ab:a7:e1:25:48:f3:2f:40:98:30:df:97:d3:
8f:c5:f4:6c:1d:36:b3:af:ce:be:58:95:46:4c:2a:71:ef:48:
2f:71:9e:ac:05:a6:f3:88:01:03:2d:3d:61:be:10:64:2e:42:
9b:1e:94:82:d8:c0:e6:83:8e:5e:9c:6d:2a:80:43:b9:11:2e:
33:48:f0:35:5c:3f:d3:2d:d7:75:da:df:a0:01:e1:98:de:f2:
49:24:ce:3d:fa:c6:a4:24:ef:fe:55:18:56:43:38:5a:ed:9a:
79:86:5d:fb:50:08:0a:37:3b:2d:e3:61:0a:42:85:07:96:8f:
1a:88:da:5d:4b:6f:b2:7a:0d:d8:5b:9b:a9:c9:b0:dc:1c:67:
59:33:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:40:00 2025 by rpki-client