Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd091bf4-3608-3b98-ad8b-fe45e8823dcc.roa
File: dd091bf4-3608-3b98-ad8b-fe45e8823dcc.roa (raw, json)
Hash identifier: rP6K122FmbQkFVLpnmMo3T/oJY/h06YeeLhncAK6MkU=
Subject key identifier: F1:00:D5:EF:E3:A8:BE:AF:EE:EE:1F:80:04:9F:36:25:4C:1B:FF:03
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9AAC504D4A6502431A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd091bf4-3608-3b98-ad8b-fe45e8823dcc.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9a:ac:50:4d:4a:65:02:43:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=9aad8cf2-1860-462e-a816-c94d86ad2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:56:81:5c:30:14:36:77:98:b6:f1:08:34:
e7:25:82:8b:25:49:9a:2a:d0:36:98:2d:c7:58:07:
30:4c:f2:cd:74:ee:b3:77:d1:a9:3e:da:9a:eb:b6:
f5:49:94:49:f6:b9:71:55:5c:3c:05:7f:bd:0f:24:
78:7f:80:14:92:9c:6f:9d:a7:00:46:78:1b:f2:38:
ba:de:b0:76:06:f6:e7:c0:82:f5:45:f4:43:d3:9e:
89:d3:16:2e:b6:dd:aa:f9:f4:ce:cd:fa:53:6d:cd:
58:94:4a:2e:4e:14:e7:ab:75:95:e7:18:36:59:d5:
91:28:9a:8f:25:c8:98:18:cf:85:43:de:d0:01:be:
44:c5:e7:2d:89:a5:16:17:2f:a2:73:a7:35:f7:45:
33:e5:f4:da:f3:f0:66:5e:d0:25:0c:50:af:3d:1c:
51:d3:7d:bc:73:ba:69:8d:6e:ca:6a:5c:60:01:1e:
51:dd:aa:00:2a:39:ff:55:a4:a8:bd:9b:e8:86:16:
9e:e8:c3:c0:1b:e0:56:56:69:ab:64:6f:f1:66:60:
ce:8b:46:6c:62:c2:7c:c5:3f:80:4b:6c:13:25:4c:
f7:ad:d8:63:c0:de:bf:e9:bc:58:bf:c7:57:a5:f3:
79:de:07:58:9f:fc:d1:28:2a:52:35:af:df:65:81:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:D5:EF:E3:A8:BE:AF:EE:EE:1F:80:04:9F:36:25:4C:1B:FF:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd091bf4-3608-3b98-ad8b-fe45e8823dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:44:d0:1f:c8:a5:2d:45:1a:f4:4a:57:d6:00:cd:23:2b:4d:
e0:c7:64:8f:f2:1b:4a:30:3c:49:d4:37:24:27:d7:54:3d:8b:
9a:b2:c7:e2:47:7a:03:9d:d6:48:78:37:e0:58:55:d7:3c:af:
10:11:61:13:ad:a0:8c:e9:3d:e4:c9:f0:8b:c1:da:23:ce:16:
d2:aa:fd:7c:92:4e:5e:43:78:cc:c1:35:42:a0:f3:9a:95:87:
82:dc:f4:56:8d:ab:96:4e:ac:74:09:80:5d:2d:db:77:61:ea:
f9:f9:a6:96:74:78:c2:ca:f2:bf:aa:0a:87:95:33:1d:cf:a5:
56:20:06:8e:38:ad:b1:c3:de:12:99:a8:dc:e6:45:ed:30:cb:
91:d7:eb:f2:58:d4:ac:92:be:78:ed:cc:ad:1e:77:26:eb:41:
c9:20:cc:82:be:d3:6e:5a:4c:aa:45:9a:83:1f:22:9c:c0:ef:
72:e4:a9:43:02:aa:99:38:65:07:c1:da:da:0a:47:c9:45:71:
1d:91:c4:e7:2b:9a:22:21:57:7c:80:15:ea:06:c0:c9:05:90:
a4:17:bc:6f:07:bf:1a:fa:e3:eb:8e:77:04:4a:d6:97:e0:db:
cb:eb:80:bf:6a:79:7c:7d:b9:7e:7f:52:e4:5a:91:d1:88:ef:
f4:11:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:35 2025 by rpki-client