Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa
File: 11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa (raw, json)
Hash identifier: vfies9VvHdBhvbADWOjMewTcqyIJRiMlnE8+T/d3lho=
Subject key identifier: 83:7F:56:6E:A5:C8:D7:E1:3A:E0:C0:87:2C:FC:37:E5:1E:C8:BB:77
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C63804DA58D73EA51EDDBB20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa
Signing time: Tue 04 Feb 2025 20:09:49 +0000
ROA not before: Tue 04 Feb 2025 20:09:49 +0000
ROA not after: Mon 05 May 2025 19:09:49 +0000
asID: 6167
IP address blocks: 174.220.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:38:04:da:58:d7:3e:a5:1e:dd:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 4 20:09:49 2025 GMT
Not After : May 5 19:09:49 2025 GMT
Subject: CN=3e3735ff-1ebf-4874-affa-8e2b5bdd11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:bd:db:5a:dc:b0:71:c3:c3:ea:cb:bf:ce:
8d:20:20:2d:47:ed:df:c2:f1:97:fb:af:8f:04:b1:
c0:e3:7b:49:03:e4:b1:d7:1f:d9:43:b9:ba:85:64:
41:5b:90:b3:12:dd:e1:28:16:4f:6c:82:2b:9e:72:
79:21:d2:98:8f:69:b0:e1:8d:fa:a8:00:48:fd:65:
8c:8d:7f:8c:93:95:3d:6f:0e:e3:50:24:8b:3f:47:
c1:fc:24:8c:3f:10:53:83:ea:3d:cb:1c:d8:ef:97:
db:10:b5:72:68:36:a7:a5:fb:cb:47:c9:ae:91:a2:
97:bc:dc:b5:88:20:64:f8:90:6f:8b:ab:44:c6:59:
04:d2:32:3e:8e:fe:87:cf:34:ef:d8:3c:d7:c9:23:
c7:c9:c0:21:c2:77:50:ab:37:04:92:23:b9:0b:b6:
71:67:f5:1d:41:19:0e:b1:72:98:5d:78:1c:03:df:
73:ab:34:76:48:59:9d:84:5f:75:7b:b5:c1:00:5b:
af:44:d0:04:5b:84:75:3a:a0:e6:8f:21:12:1b:ef:
ed:cf:5b:0c:fc:49:12:b6:c8:8d:f9:95:87:55:d9:
eb:63:41:6d:46:bc:b5:21:f3:bd:e6:76:40:81:2e:
51:a4:00:fd:33:ea:e2:d4:6c:2f:49:2a:7f:89:25:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:56:6E:A5:C8:D7:E1:3A:E0:C0:87:2C:FC:37:E5:1E:C8:BB:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.220.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:dd:14:fd:35:9b:25:ca:7e:95:dd:f0:e4:df:f1:51:e1:7b:
7c:98:ce:81:83:16:9e:8d:f2:64:ab:73:1f:cc:83:01:9d:3f:
3b:73:f1:1d:93:dc:2e:01:3a:ac:4d:d1:09:52:d5:12:d7:29:
dd:18:cf:d2:ec:35:14:fa:57:ff:56:06:90:bc:f5:3e:84:34:
9a:80:6c:f9:e9:8b:01:fc:fe:dc:3f:6e:16:a7:af:20:2a:77:
f7:a4:c7:17:eb:c8:c9:31:b3:59:7c:1c:18:57:c1:e6:2d:86:
e4:2d:df:00:1d:49:0b:e3:60:d9:d8:24:db:99:d6:6b:ff:23:
98:3f:a8:13:2f:9d:a6:df:98:df:a9:2f:73:84:8a:d8:81:cf:
9a:f2:99:c9:f3:39:7a:41:0b:a0:11:53:58:7c:bf:db:91:be:
92:74:77:63:fc:36:d0:e0:75:d4:83:f7:1b:f9:03:13:d2:fe:
4a:8e:60:c6:3a:c5:d2:91:ed:3d:68:8b:7a:8a:7b:60:40:57:
df:dd:00:f0:ad:bc:94:71:8a:e7:be:f0:a8:c7:a1:5f:fd:c3:
60:1c:b3:d5:98:85:af:03:23:54:ba:74:e2:95:42:9f:0b:4f:
0c:e3:3e:dd:e9:f0:39:47:6b:d9:5c:d0:13:7d:75:ca:eb:7e:
cd:18:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:47 2025 by rpki-client