Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0a032c-47ca-3c01-80e2-3924ee2f3e43.roa
File: 1c0a032c-47ca-3c01-80e2-3924ee2f3e43.roa (raw, json)
Hash identifier: ihOpiIt85AtcShItJa2cOq1iFtLT4+cck4CXyjZnC90=
Subject key identifier: 56:FD:C8:58:BA:80:A1:BE:1C:EA:F7:19:58:96:98:5E:D3:BF:EE:07
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E22DA128D987CF2A09F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0a032c-47ca-3c01-80e2-3924ee2f3e43.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.219.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e2:2d:a1:28:d9:87:cf:2a:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=f0668bdb-28f8-4822-b0ce-7f2e0fb1dbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:ec:9e:f1:11:71:b9:c7:cd:b4:f3:2e:53:
8e:11:7d:ec:2e:f7:b0:44:be:47:29:2d:b4:8e:73:
ca:58:e6:df:a7:39:88:2e:db:11:bf:18:fd:51:72:
95:7a:42:b7:3b:21:1a:ce:48:c7:2d:db:7c:a6:f6:
42:fe:39:d8:a4:ce:4f:4e:9b:a2:2a:c8:68:1c:7c:
8e:22:75:dc:3b:d6:73:11:7a:c9:3a:d9:86:21:ab:
8b:36:5d:3a:eb:5d:81:be:c1:e6:ba:01:9e:43:97:
14:b7:46:f3:05:19:00:cc:2a:2c:99:b2:d8:4a:f2:
09:04:ae:bf:34:1b:7d:34:34:62:83:3b:91:10:28:
d3:67:f0:0f:44:d8:ae:df:ae:b9:60:96:12:16:e3:
e7:a7:5a:f5:bd:3e:38:c1:55:b7:4e:0a:ff:54:09:
78:00:c5:31:80:bf:ca:cd:dc:c3:40:93:60:21:39:
ec:84:b6:ab:c3:5d:10:85:47:20:af:45:41:16:a8:
66:89:ef:00:0e:d2:3d:a8:78:ca:8e:55:f4:76:fa:
43:63:d6:12:d7:f1:42:7f:44:e9:74:04:89:37:e0:
9e:41:de:6c:6a:84:b9:ed:1e:b9:7c:3e:77:ec:e7:
87:e1:78:0b:f7:a1:4d:b2:fa:ee:7a:66:e8:0c:31:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:C8:58:BA:80:A1:BE:1C:EA:F7:19:58:96:98:5E:D3:BF:EE:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0a032c-47ca-3c01-80e2-3924ee2f3e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:06:b2:92:c4:4f:c1:01:84:26:46:73:da:79:cf:3a:2b:18:
4b:ed:ae:2e:2c:b6:14:c9:9d:6a:93:8c:7e:77:5c:82:db:a7:
c4:d7:2f:ea:08:c7:41:7a:d6:f4:1c:70:f9:5b:5f:2a:37:a1:
b7:74:21:cf:14:9d:56:34:a0:d0:7f:51:50:4b:6d:60:57:87:
83:75:42:24:2e:f3:d7:1c:8c:56:cc:d4:c2:8f:03:4b:3e:0f:
7f:56:97:76:71:11:42:39:51:08:03:d6:36:a4:f3:bd:98:de:
24:a4:59:a3:30:50:e6:d5:4a:21:79:71:8c:08:71:4c:47:62:
0a:fa:76:ab:25:ba:06:3b:1d:ce:30:97:3e:dd:32:b7:78:fd:
d1:98:70:24:e2:fa:78:1b:b0:f0:b2:3b:e5:fc:bd:f7:04:2e:
e9:ff:d2:f0:31:9a:02:0d:bd:be:9c:62:45:bc:af:dd:51:00:
22:4b:36:80:3b:06:8f:94:34:73:d4:7e:81:cf:31:d3:d9:bc:
79:14:81:a4:09:69:01:2a:be:aa:83:e8:d3:b9:05:89:5a:9f:
61:09:9e:bb:19:19:34:34:93:4d:fe:b3:ca:6b:b2:de:22:16:
9f:66:f4:5b:9e:36:55:fa:e6:00:45:de:c7:57:c2:e0:2c:34:
e2:dd:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:04 2025 by rpki-client