Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da9da248-8db9-3a19-a376-331abedf0c6d.roa
File: da9da248-8db9-3a19-a376-331abedf0c6d.roa (raw, json)
Hash identifier: Y6pUZ0n2aQmLfCvUYwAcUF4B0FyglJDd8lStp4Iy/Vc=
Subject key identifier: BE:8A:B3:24:CF:CE:C3:D6:D8:05:86:3D:B1:41:82:A4:BA:80:E6:1C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9A1CA951F09E9FF58B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da9da248-8db9-3a19-a376-331abedf0c6d.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9a:1c:a9:51:f0:9e:9f:f5:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=8a2bca17-632e-4b9c-b4da-93becba4343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:7a:28:9a:49:33:23:42:6d:76:25:f2:36:
ea:67:5b:0d:a8:5f:a7:37:13:32:2f:66:90:a2:18:
8f:ce:c4:c4:38:d2:48:75:c6:95:54:e9:76:2e:cf:
64:99:8e:2e:59:fe:6a:a7:bd:df:6a:ff:e7:c2:5a:
98:69:c4:14:00:81:a5:6c:35:24:79:18:d4:3a:85:
16:64:89:4a:a4:02:8b:de:44:9a:22:09:ba:09:f2:
3b:85:78:3f:93:f4:ac:a6:9f:a3:1b:2f:85:9b:09:
bf:5d:21:45:d5:7c:5a:c0:0f:3c:4d:14:57:91:0f:
44:b7:be:80:7d:33:23:05:72:a4:ff:cd:bc:2f:8e:
f8:70:14:d3:3a:ff:ed:77:65:a1:8c:44:c1:6c:95:
3a:b3:b4:28:b2:14:49:90:b0:0a:8e:07:62:72:e5:
95:22:93:8f:db:ba:7a:2f:c6:65:96:99:c8:ee:fa:
f1:20:15:b7:c8:06:b5:67:52:41:14:ec:0d:9c:a7:
d6:b9:0e:1a:80:f7:1e:98:96:98:f7:63:7e:a0:c4:
48:fd:ad:74:c2:49:46:d3:30:ea:74:a1:de:e8:f8:
87:03:fe:57:fe:a0:f4:e4:0e:6f:76:79:c3:d9:09:
99:50:53:09:d0:59:30:f1:dc:56:8b:cf:df:85:fa:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:B3:24:CF:CE:C3:D6:D8:05:86:3D:B1:41:82:A4:BA:80:E6:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da9da248-8db9-3a19-a376-331abedf0c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c9:6a:3f:39:7c:22:68:08:03:6f:17:d5:28:8a:e3:24:8d:
4e:81:04:11:ae:79:21:fd:dd:e8:49:4f:a1:d8:11:26:a3:70:
3e:76:d8:59:39:55:d2:3d:f0:31:f0:cf:93:45:0e:20:21:25:
aa:86:f1:46:24:df:d3:76:b4:61:b5:df:9c:e3:e2:76:a0:83:
45:9e:c8:c8:42:65:a9:06:a3:3d:27:49:d8:64:4a:df:71:d8:
7a:d1:1e:1e:55:27:36:7b:52:f1:c6:bb:e7:bb:1b:05:6f:eb:
d0:3a:ad:5c:a9:07:b1:8d:30:7b:34:46:d9:94:41:3c:da:e0:
aa:f3:d5:2c:4a:12:b5:ae:67:57:60:fd:28:bf:20:5a:cf:da:
1f:65:f5:fc:6f:38:4e:38:c8:2d:30:54:48:48:ec:c0:70:fd:
62:cb:27:1a:dc:01:0c:60:6a:3c:54:5a:de:f4:cf:c8:75:de:
6e:5a:e8:c7:b1:a7:c5:25:0a:f0:a6:09:c9:7c:95:42:9e:0b:
c1:32:34:05:b8:8f:13:3c:b6:23:bf:d1:43:86:c7:d6:0d:6b:
8e:52:99:a2:e6:57:8f:7d:2a:e5:31:3f:ee:38:10:63:33:b1:
de:99:9a:6f:59:5e:c9:05:2c:25:1e:f8:df:96:6d:93:38:33:
42:06:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:59 2025 by rpki-client