Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/125d7527-c8d3-3731-9606-5a1535039ab3.roa
File: 125d7527-c8d3-3731-9606-5a1535039ab3.roa (raw, json)
Hash identifier: g0TCztevCthIKnaQmOQ//eQHE47jW9u+tFhHJ+LJ9Qc=
Subject key identifier: 4C:17:B1:61:5D:65:C7:04:25:3D:54:0E:E3:BC:29:DB:1A:1C:5A:FE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E25C42E57C1BF98216A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/125d7527-c8d3-3731-9606-5a1535039ab3.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.219.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e2:5c:42:e5:7c:1b:f9:82:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=72a13cd3-9caf-4d00-bee7-1a561feb1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:98:9a:e1:1f:13:f0:75:28:7c:2a:57:7f:
e0:d2:02:5e:f8:52:df:ff:3e:ab:de:31:83:61:78:
b3:20:ec:a5:23:54:e2:7b:0a:2c:64:80:1b:e3:be:
ad:84:f4:b0:8f:6f:61:9f:59:ca:b6:d7:67:39:8d:
3c:ee:15:da:2a:64:00:ee:57:a4:03:30:00:75:0a:
18:f2:77:fa:9a:70:7a:3b:e9:e3:b8:3e:26:e9:87:
01:29:d0:cb:07:ab:43:4e:0e:c6:d4:39:58:ac:3b:
37:7d:dd:e8:b7:60:97:58:d2:85:87:a1:84:56:22:
af:54:f5:51:61:e6:3e:8d:b8:2c:d1:76:9c:79:59:
91:16:ec:42:a3:1c:c9:85:bc:d2:1f:58:9e:d7:39:
ed:95:a9:6b:30:bc:b8:59:b5:5e:e8:20:68:d8:00:
53:3d:8d:8f:4a:53:b2:93:89:82:26:42:23:cf:8e:
ab:f7:a4:82:6f:2b:ce:70:a9:ab:b8:a9:8a:ce:15:
ac:93:8e:b8:04:b3:c2:8e:03:cd:47:ee:8f:5c:1e:
94:da:da:be:8b:95:26:92:79:4f:a0:74:f3:a0:01:
ff:a7:db:65:70:ce:61:32:e9:92:dc:ea:d9:e6:20:
aa:b7:3d:2b:f5:14:78:f2:ad:b4:46:73:43:ee:58:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:B1:61:5D:65:C7:04:25:3D:54:0E:E3:BC:29:DB:1A:1C:5A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/125d7527-c8d3-3731-9606-5a1535039ab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:43:0c:64:d4:70:63:05:ba:17:7b:67:ad:aa:2e:83:6a:07:
9b:f0:fb:4d:19:75:ca:f9:b5:b9:a4:39:5d:af:9a:d5:85:78:
f1:90:b2:e4:50:65:48:71:98:9e:73:b6:98:17:ee:5a:b7:59:
60:81:f4:4d:e7:63:09:15:85:8d:ab:47:78:7b:5b:fb:ca:0d:
35:d9:88:1b:da:f6:87:75:52:8d:39:e9:4e:70:07:7a:cf:7e:
eb:f1:7e:f4:28:14:db:0e:24:06:ee:03:d9:71:9c:cc:d0:cc:
13:99:f1:82:8e:e0:e8:fc:6e:97:8c:70:42:15:27:d5:66:bf:
35:ef:97:9d:53:f3:74:05:28:d5:f8:1f:8c:32:47:87:3e:79:
31:0d:67:43:22:f0:a8:c0:00:3b:f0:fc:ad:eb:0b:26:7a:48:
21:0c:ab:4c:8e:0a:b7:93:c9:af:1d:28:66:e8:06:ec:67:40:
46:04:27:3d:ec:09:66:d2:05:c7:ba:e0:80:ca:f6:c3:e9:09:
cd:a2:15:1f:a5:f4:7e:cc:39:01:bf:8b:28:bf:8c:38:80:2b:
57:79:27:fe:70:66:5d:f6:a4:08:6f:0f:06:dc:bf:9a:14:1a:
54:bd:5c:bc:0f:96:a5:a9:f7:c0:87:e9:e0:aa:be:2e:54:b3:
f1:ee:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:53:37 2025 by rpki-client