Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa
File: ef95021e-4f48-3ae6-bf9d-d582e4100536.roa (raw, json)
Hash identifier: nXa+BdAEE/EmZvlXIA3RsYgnE3jjcD71BKf91JOFXO8=
Subject key identifier: 28:CC:26:C8:45:27:36:B0:6F:23:3B:BA:C8:BE:80:A4:68:AE:67:21
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA781EABEE1BCD4C4D4460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.252.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:78:1e:ab:ee:1b:cd:4c:4d:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=8e066640-eff3-46de-abee-2beac46ff2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:dd:4d:4c:3b:37:14:f5:38:7a:43:26:86:
38:eb:40:41:01:9f:4d:0f:c5:33:6e:2e:f7:7b:67:
d4:72:21:23:ae:bd:e1:90:95:98:94:8a:3a:f9:b5:
cd:81:f8:5e:5c:5e:5a:fc:08:19:98:a5:0d:8c:80:
a3:15:39:6a:34:26:67:b9:21:bd:0d:5c:f6:58:5f:
d3:4b:e7:24:c3:e3:61:8a:dd:2e:de:f0:98:98:87:
86:39:f1:42:73:f4:7e:4a:eb:52:a4:05:57:a5:8f:
77:55:86:91:ed:d6:d6:bb:25:b0:39:01:6c:44:1f:
c8:66:37:50:d9:7b:e9:ec:a1:77:3a:5e:53:cc:23:
4f:2c:98:21:d8:50:3d:7f:08:ff:97:6b:4a:a6:c2:
f3:87:a0:0a:53:d5:52:03:dd:62:aa:19:08:8d:da:
50:0e:30:76:41:ea:5b:41:3d:ac:2f:48:14:46:83:
16:d1:02:4e:fd:f1:f4:5b:30:a4:b1:07:ea:66:0c:
9d:9a:cc:d1:02:0c:34:78:93:92:36:22:f8:8c:d2:
69:22:b1:44:cb:a8:79:ea:bd:6b:62:ec:bc:75:be:
a0:d9:09:e5:0f:76:8c:21:ea:cb:fe:e9:00:c2:1d:
d4:f7:df:df:7b:e5:2d:9e:26:35:e9:41:6c:c1:ea:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CC:26:C8:45:27:36:B0:6F:23:3B:BA:C8:BE:80:A4:68:AE:67:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.252.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:77:1b:b7:b9:61:e0:0e:5f:86:b4:40:3b:a9:1e:29:02:af:
c5:69:42:d1:32:ef:a4:7b:08:dd:1a:dd:fb:f1:86:38:f8:6a:
6f:21:8b:7a:80:1f:93:16:45:b1:9e:c5:9d:49:75:37:f7:75:
55:e0:fe:8f:8c:86:b6:14:7d:00:ed:8a:d3:57:45:67:c9:86:
f0:8c:e8:05:b3:cc:87:25:91:6e:2c:a9:b1:69:32:f0:17:56:
e8:e9:d8:5c:f4:81:f2:23:bc:f2:09:78:de:a0:15:2f:d1:49:
7b:11:ef:fe:6f:07:4f:1c:32:cd:ef:49:7b:62:54:55:71:f0:
75:d8:e1:9b:32:09:aa:d1:25:17:63:3a:38:e4:68:ae:5a:6e:
84:46:d2:c5:60:94:cb:69:3f:59:02:3f:1d:6a:e4:50:3e:73:
5b:07:75:67:54:17:ff:b4:e6:b5:65:4f:44:e1:df:df:e6:5d:
7c:3d:64:5c:54:a4:a2:f0:75:af:35:aa:ae:69:1d:3c:a5:63:
9d:7e:ae:48:dc:00:99:35:e7:d0:76:6e:f2:86:18:58:9f:a8:
97:bc:c6:36:37:d8:f4:34:f4:9e:bd:61:06:8e:65:46:9d:88:
76:72:fb:f5:c6:25:ec:9d:af:85:0b:c2:07:65:c9:4b:ef:b2:
f8:1b:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:18 2025 by rpki-client