Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa
File: 083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa (raw, json)
Hash identifier: SWCQzFkM3DGfmtKddGw6Xord8kIK1VUGfJw57wySQ5s=
Subject key identifier: 92:23:09:01:0E:4D:37:68:D5:9F:8B:C7:B7:9A:5B:5E:B2:3E:62:B5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8667164BF9E93628D9680C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.235.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:71:64:bf:9e:93:62:8d:96:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=1e8a84a0-71d0-4666-926f-bdb684e4c1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:41:7a:13:c0:c8:10:fe:d7:31:a5:67:aa:
30:6e:b6:5d:d3:7c:e3:28:82:71:f1:35:4d:12:87:
aa:0a:9b:5a:16:20:f0:0b:9a:34:ba:7c:98:90:ae:
da:c2:29:71:5a:93:76:c9:9e:b2:84:de:53:10:f3:
f3:af:81:99:6e:57:69:6b:39:66:d4:64:67:26:56:
95:ba:4b:d3:b9:a1:f9:f3:d7:35:9e:23:44:e9:dd:
1f:61:cf:ef:43:93:0b:88:68:44:63:68:9d:b7:f2:
27:d3:f0:af:98:0f:dd:94:de:c3:e7:03:09:53:90:
ed:0f:aa:13:7b:50:67:0b:03:db:91:1b:3a:9c:a0:
cc:8e:c6:79:a0:d5:ee:79:f4:3e:66:3e:09:df:56:
c7:67:70:db:2d:5b:8b:b2:2a:88:0d:6d:54:b9:fd:
fb:1e:58:49:67:05:1e:ee:5a:27:d5:f7:cb:bb:a1:
d6:0c:08:2a:ac:00:97:9d:06:ff:a8:9b:64:ca:3f:
ff:c7:a0:b8:37:ce:fc:df:79:12:b9:73:77:98:d0:
1c:26:f1:6b:d2:46:b1:8e:6a:27:60:52:47:6d:a1:
01:52:25:ac:13:ad:c5:9e:87:64:d2:22:7d:80:cc:
b4:8a:06:62:43:f3:90:60:43:ca:aa:86:f9:68:c3:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:09:01:0E:4D:37:68:D5:9F:8B:C7:B7:9A:5B:5E:B2:3E:62:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.235.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:aa:29:26:b9:7c:15:87:d6:7b:f1:4e:15:f9:ec:76:54:44:
77:9b:e9:80:48:f9:0f:1b:3e:36:ed:6f:d9:d7:04:ef:a5:3f:
4f:80:6a:9c:05:bf:94:11:fb:4d:23:c6:59:95:bc:7e:a9:ea:
2b:c2:0e:8b:a7:f4:c3:9f:22:b3:03:17:04:eb:76:16:89:d1:
73:7e:97:82:9b:01:9b:02:e0:a7:0d:db:71:fe:d8:94:2b:6f:
ae:2a:08:10:30:65:49:e6:d9:90:02:7d:1f:63:29:0c:44:3c:
5a:35:40:65:4b:f1:73:f4:c3:bb:4e:0c:4e:19:5c:b8:23:71:
05:6e:c7:62:7d:87:59:4c:af:7e:a6:6f:95:d2:7e:12:27:25:
14:b1:a6:b9:2a:61:4c:dc:1e:a1:32:78:e1:95:2d:d9:63:78:
1b:44:05:9d:e8:ef:bd:ff:95:10:a9:0c:8f:8d:a4:63:f3:ab:
1e:13:18:44:5e:df:fb:7e:47:06:0d:a6:25:11:4d:20:bb:20:
91:e2:0e:ec:2c:13:36:79:e0:33:4d:ac:8b:e9:97:02:87:8d:
ad:a7:14:95:66:d7:a6:e7:c6:77:ae:00:10:c1:5b:49:b4:e0:
a7:cb:08:bf:5a:84:96:60:6b:3a:a5:3d:0f:74:96:57:13:9c:
b2:32:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:05 2025 by rpki-client