Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa
File: aee11c08-7089-348a-b93f-9dfd274ffd68.roa (raw, json)
Hash identifier: VHSoe5otImcI9dxJHj9FsOyEIrXLd6Q3n16zWHmStyg=
Subject key identifier: AA:07:1D:37:F6:3F:BC:83:DA:A1:63:86:2D:11:FB:9F:02:19:A3:D6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100AA2115663A4D2C1C30A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a2:11:56:63:a4:d2:c1:c3:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=a2f843f2-9ee5-4e8d-abdc-cf3823b41e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:21:86:c7:bb:8d:89:fe:c4:55:32:de:b6:
c1:c3:fd:8d:63:86:be:03:60:12:93:6f:c6:e2:d3:
08:47:1b:1a:9c:75:83:ee:54:dc:38:2f:43:fc:20:
5f:da:a0:d0:eb:87:ca:ba:aa:f8:4a:7b:b1:41:f3:
eb:c1:62:2f:0e:34:ff:ee:06:33:6d:ff:6e:dc:19:
a3:8a:24:0e:ae:cc:d3:fb:f3:ef:0f:33:5f:f4:f4:
3e:e2:0d:e9:62:f3:ce:c6:e1:58:ed:a7:0b:dd:49:
e1:1a:bc:37:15:af:50:12:2f:38:99:15:61:3c:0b:
28:bd:5e:02:67:8e:75:17:d8:71:0e:5d:4a:7f:9e:
31:a6:1d:bf:bc:b9:d5:ea:98:97:c9:37:2b:72:5a:
94:33:29:70:63:6f:9c:ea:f9:f5:9c:2d:f7:92:1a:
28:58:d9:2e:35:8d:76:42:df:45:85:7d:03:ed:40:
4f:cb:bf:0c:52:6f:19:b4:9f:69:80:1f:68:7d:1e:
06:56:9b:93:d5:4c:a1:fa:79:72:3a:59:15:e2:47:
e8:56:bd:d1:9f:59:8a:bb:96:bd:d2:33:11:47:d2:
eb:14:76:ed:6e:44:9f:9b:58:b6:bb:ef:2f:f7:26:
6d:0e:3e:7b:c8:ae:13:59:f3:68:c0:37:d5:1e:e9:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:1D:37:F6:3F:BC:83:DA:A1:63:86:2D:11:FB:9F:02:19:A3:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4e:f3:90:75:68:59:7d:f4:e1:06:dd:26:cf:d9:af:a3:6a:
f7:60:4e:1a:80:77:ba:cd:79:8b:34:d9:4e:3c:b1:0b:07:fb:
4e:82:5c:2e:b6:5c:92:5a:bd:ab:dc:99:ed:66:80:37:4a:64:
e5:ea:52:c8:17:7b:db:97:cd:c6:36:92:4d:df:c5:b9:8b:15:
58:fb:8a:18:2b:8a:3c:a4:a1:e2:69:bb:eb:60:09:db:64:d5:
b1:98:bb:17:b7:15:d6:75:e2:91:00:de:b8:57:1b:98:49:16:
44:a0:e1:d1:48:33:85:bc:cc:ea:87:54:f6:df:61:e2:b3:0d:
7b:e5:3f:ed:79:2c:a3:7b:30:58:e2:a1:a6:df:8e:f4:f6:3c:
a9:50:8d:c4:ed:71:9c:d0:f2:16:5a:02:a0:4d:66:9d:98:dc:
7d:e9:0b:aa:72:af:40:ed:c8:5d:79:45:b0:2f:fb:85:86:3c:
aa:73:59:c2:b8:7c:13:bb:09:7e:3f:4f:8b:5f:6f:93:2e:27:
43:c7:f5:ee:9b:9e:98:ab:5c:68:db:05:bb:ce:6c:73:5a:5d:
57:a1:ff:95:fc:af:4d:d3:bb:c6:5a:dc:10:b1:14:6c:79:17:
17:98:21:64:e4:11:04:7e:15:0e:04:04:a4:ec:1b:3a:9b:9d:
9d:30:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:50 2025 by rpki-client