Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa
File: ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa (raw, json)
Hash identifier: PHM6WnZP1yI9J0xKRwiVEvwYUgvq9mQF/7gGapU51RM=
Subject key identifier: 9F:DA:35:17:28:51:41:EC:0F:C1:FB:90:FF:58:E3:6F:3F:C0:76:FC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA787A5096BEC1286F2080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.254.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:78:7a:50:96:be:c1:28:6f:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=589469f7-51b9-49e2-b2a5-a3fb982a8165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:c3:76:cf:0f:68:c2:a4:4b:eb:84:55:5d:
3e:1f:7e:9a:6d:a0:77:95:00:ec:f9:e2:18:5d:53:
9d:94:70:17:4a:50:f4:e9:d0:27:62:eb:29:d6:69:
18:7e:56:e1:cf:fe:23:46:bd:f9:70:df:67:73:18:
d0:0c:2b:07:ca:18:86:6d:0c:9f:4b:b0:f8:cf:3a:
0a:fe:70:ef:55:33:54:29:3f:cf:42:4d:10:51:36:
2b:09:67:76:5c:0f:9d:80:c4:15:1c:1f:14:85:59:
49:da:e3:63:10:12:e5:73:35:f0:05:47:ab:29:e4:
10:b2:d9:ea:29:a2:11:01:89:4a:2c:c8:8a:0d:27:
f0:8d:fb:60:c8:02:65:60:a6:48:1e:06:2f:13:f6:
33:67:37:b1:a2:c9:33:41:69:08:24:e6:f4:4e:60:
3e:c2:02:cc:eb:5b:2b:b6:2f:57:98:48:0e:74:14:
40:97:ff:42:44:d7:16:e2:bd:58:9c:3e:71:22:51:
8c:6b:9c:db:18:0e:07:2e:11:fd:bf:58:b4:f4:c4:
0d:7f:74:c8:8a:b8:09:6e:52:b7:ab:ee:4f:33:4a:
d7:2b:ca:1d:96:57:18:d5:55:49:6e:d9:17:8b:f8:
fa:8c:a6:71:fc:bf:a2:97:f5:17:0c:2a:02:11:e4:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:35:17:28:51:41:EC:0F:C1:FB:90:FF:58:E3:6F:3F:C0:76:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.254.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c7:bf:c1:61:63:f5:d5:99:d2:38:88:7b:8e:38:8c:91:4b:
d3:9a:f7:58:95:c6:80:5c:70:b9:ac:1a:d0:36:7d:53:05:8e:
cc:bc:c9:11:51:41:97:62:5b:60:2f:2f:16:59:1e:b4:d0:01:
56:b1:4f:3c:54:3e:a7:90:7f:a1:32:44:a8:e2:0f:8e:a6:04:
27:5b:93:44:2d:15:be:40:08:9a:4b:d5:85:d9:c0:52:09:cd:
da:54:a1:15:e2:91:b0:7a:1c:fc:53:c4:75:c2:c2:ff:73:12:
8b:99:1c:fa:26:ef:43:8b:8b:30:23:88:42:62:90:06:81:8e:
bc:88:82:02:5b:ee:4f:86:b6:71:d7:84:93:51:7c:3c:16:40:
33:ce:84:bb:7f:76:40:8e:a4:f7:11:ef:2b:c1:e2:b3:7e:4f:
74:a8:61:4f:2b:b7:39:0f:79:f2:b8:39:15:6a:07:e6:53:8e:
99:63:c3:b2:bd:92:e6:00:cf:ae:38:b0:09:47:53:a3:03:2f:
31:83:37:6b:9a:48:fa:22:b3:e9:1f:26:d9:6f:a8:35:cf:38:
2f:14:d8:66:3e:43:25:0f:ff:d4:88:34:7a:28:b7:6e:09:51:
b0:a8:d9:04:25:b4:b9:a7:1d:06:5a:19:2d:a9:d0:6f:fd:ce:
e2:af:7f:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqnh6UJa+wShvIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk
NTg5NDY5ZjctNTFiOS00OWUyLWIyYTUtYTNmYjk4MmE4MTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZXDds8PaMKkS+uEVV0+H36abaB3lQDs+eIY
XVOdlHAXSlD06dAnYusp1mkYflbhz/4jRr35cN9ncxjQDCsHyhiGbQyfS7D4zzoK
/nDvVTNUKT/PQk0QUTYrCWd2XA+dgMQVHB8UhVlJ2uNjEBLlczXwBUerKeQQstnq
KaIRAYlKLMiKDSfwjftgyAJlYKZIHgYvE/YzZzexoskzQWkIJOb0TmA+wgLM61sr
ti9XmEgOdBRAl/9CRNcW4r1YnD5xIlGMa5zbGA4HLhH9v1i09MQNf3TIirgJblK3
q+5PM0rXK8odllcY1VVJbtkXi/j6jKZx/L+il/UXDCoCEeQJiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/aNRcoUUHsD8H7kP9Y428/wHb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmYwYTI5ZmEtYjZkMC0z
NzAyLWFlZDctNGRmYjY3ZjcxNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrv4UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDHv8FhY/XVmdI4iHuOOIyRS9Oa91iVxoBccLmsGtA2fVMFjsy8yRFR
QZdiW2AvLxZZHrTQAVaxTzxUPqeQf6EyRKjiD46mBCdbk0QtFb5ACJpL1YXZwFIJ
zdpUoRXikbB6HPxTxHXCwv9zEouZHPom70OLizAjiEJikAaBjryIggJb7k+GtnHX
hJNRfDwWQDPOhLt/dkCOpPcR7yvB4rN+T3SoYU8rtzkPefK4ORVqB+ZTjpljw7K9
kuYAz644sAlHU6MDLzGDN2uaSPois+kfJtlvqDXPOC8U2GY+QyUP/9SINHoot24J
UbCo2QQltLmnHQZaGS2p0G/9zuKvfzQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:11 2025 by rpki-client