Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
File: 06678aea-69e2-33a7-a0d2-04432ccce437.roa (raw, json)
Hash identifier: AK0my129CPSn9TBVJFHh+IL011p2iS2jdR7Rc0pBinM=
Subject key identifier: CA:A2:23:1E:9E:28:09:9D:4A:20:04:E8:65:DD:A6:F4:E7:74:4E:5A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF61772261CAB4B73A45AF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22394
IP address blocks: 174.41.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:77:22:61:ca:b4:b7:3a:45:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=41ceb398-8f78-485d-9736-debc16b0fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:9d:72:f5:40:4a:bb:de:4e:b8:04:c0:23:
4f:03:a6:2c:eb:94:55:a0:2a:81:1e:0f:a6:01:35:
ed:bc:67:63:ad:8a:d5:3a:b1:3e:a1:bb:f1:38:ed:
99:f6:2c:e5:07:84:f1:3a:24:09:64:0a:55:29:11:
e2:7c:23:45:b4:77:d1:66:04:b4:da:ce:ed:22:95:
7d:63:1f:44:e7:f2:8d:98:de:5a:19:36:c1:ad:ac:
c7:be:0f:98:27:53:f5:93:b8:62:ec:d1:53:ec:56:
1c:6d:7b:17:a7:ba:30:42:e9:a0:5b:77:b6:7c:e0:
94:05:ed:36:f9:f9:d6:b4:ec:32:a9:ed:d5:6c:f6:
71:5d:69:c6:55:72:f3:fd:8c:0c:69:39:52:f8:5a:
b3:1e:fb:df:33:05:62:b3:9f:7b:91:8e:b0:0c:1b:
f0:c6:ff:3c:87:7f:df:83:97:49:d7:d1:c6:f8:db:
7f:b3:01:37:88:28:26:5a:6d:14:f5:62:df:46:7d:
6c:49:6d:72:03:80:a6:4d:11:09:37:57:57:1d:40:
87:a3:31:4e:28:dc:92:86:a2:1e:30:e9:8d:64:79:
59:ec:75:6d:1b:78:ac:a4:59:e8:38:0a:9b:46:77:
1f:61:3f:10:0e:2d:62:56:d9:1c:a3:4f:60:a2:da:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:23:1E:9E:28:09:9D:4A:20:04:E8:65:DD:A6:F4:E7:74:4E:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:84:30:c8:2d:3a:fa:f4:a4:33:30:b6:f8:a7:6b:76:3d:87:
73:63:1f:fe:35:94:72:39:08:5d:fe:ca:3b:17:0d:b4:cd:61:
d4:09:35:20:02:77:e0:50:28:38:33:f9:d6:06:09:4a:30:b3:
49:0a:40:6c:50:9e:6d:a5:8b:79:22:67:a0:a1:ad:03:ae:ae:
d6:87:44:44:5a:4f:fd:da:ee:08:6a:76:96:9a:29:54:0e:52:
ec:b1:ee:3e:d4:ab:38:fd:9c:9a:c2:64:cb:ef:2b:5e:13:6c:
56:87:fa:e3:36:22:2c:c5:06:3f:9f:37:3a:8d:ac:fe:c4:8f:
24:51:35:5a:27:ac:e8:2a:3e:35:38:03:45:24:98:63:d6:ea:
0f:62:6d:7c:6b:86:32:e8:f5:ee:f9:67:a9:ec:1c:a8:7e:eb:
28:4e:45:01:f0:70:f9:65:1d:ac:5c:30:85:00:48:ec:ab:79:
76:dc:b4:21:05:96:2f:8a:05:89:51:3e:25:98:af:37:7f:e2:
28:fe:d6:19:d0:51:ba:b5:3b:8a:51:8f:64:ec:1c:2c:d9:5a:
87:01:2f:8a:f8:fb:e3:b0:fd:51:8e:85:6c:0b:d7:b7:12:3b:
ae:3b:ed:f8:8f:28:2e:f5:3f:c0:40:43:ea:c8:91:64:5d:6a:
fb:d7:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:29 2025 by rpki-client