Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa
File: 217c3780-79fc-3d72-b808-8b5261b4d13a.roa (raw, json)
Hash identifier: wCIpruk8y5jxCtDumSFMnx/VzTrZyRIboJtMcL3SLYM=
Subject key identifier: 57:10:8E:D7:F2:D6:13:E3:F0:A7:D0:0A:B9:8B:68:B2:2C:DA:B0:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150EBF62BAC0C4CD8441000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.213.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:eb:f6:2b:ac:0c:4c:d8:44:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=8a7721c2-9cb6-4a03-b4b3-19a85dba183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:6f:73:3b:54:89:6c:1c:7c:60:8d:2f:f8:
40:e5:6f:b0:91:9c:75:50:fa:c9:5e:f7:97:05:23:
df:99:f2:d5:45:7d:b4:a7:b8:ca:35:17:c8:d2:ac:
44:15:5d:44:41:eb:22:b5:a8:6b:f1:7e:8f:4e:1a:
b5:08:b7:c4:6f:e6:4c:cd:ad:9a:af:db:83:2b:c2:
40:d5:e0:50:bb:61:ae:9b:d9:5c:a9:8b:c0:73:ca:
f6:26:3f:9a:d5:d4:2c:4c:82:91:f0:36:cc:3d:3c:
fd:10:4b:d1:ca:18:c6:64:d1:bf:74:a6:97:82:38:
b1:52:c0:84:60:bc:0f:9c:05:88:91:84:0e:18:e0:
f5:10:0b:1d:ca:79:97:cb:23:1b:95:4b:87:af:8c:
11:5e:3e:07:04:a9:b0:9d:f7:46:fc:d1:c2:7e:35:
92:81:9d:a5:2b:2b:1d:e0:f1:f1:55:55:e2:ed:79:
65:f4:aa:fa:8b:cc:89:9a:56:90:23:22:32:60:f8:
3d:a1:20:79:f7:5f:7c:bd:78:11:ef:7a:80:2d:25:
14:02:95:43:fe:90:8a:12:d0:77:83:06:12:29:4d:
ec:c7:ae:39:1a:28:a0:7e:4a:44:72:4a:8d:25:89:
d0:bf:fb:23:81:f4:49:7d:53:03:b2:9f:02:c5:7f:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:8E:D7:F2:D6:13:E3:F0:A7:D0:0A:B9:8B:68:B2:2C:DA:B0:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.213.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:50:1d:68:9f:a7:14:73:51:85:1d:af:22:c8:91:33:48:f9:
d0:e9:de:3f:48:75:3f:aa:d2:7d:9f:db:1f:d0:72:60:e7:d5:
eb:3a:5f:c0:49:ec:c8:cf:b6:c1:df:a8:d2:9b:d4:e7:7a:0b:
e5:b3:7c:4e:2d:ee:22:b2:31:c9:a0:a1:42:64:99:23:54:52:
81:f4:f2:6d:98:9d:9f:dd:88:23:83:f2:46:7f:51:86:94:88:
db:c1:1c:73:3d:1c:b7:db:78:59:96:05:d4:be:6d:cf:a5:5f:
78:fa:c4:8b:65:17:3e:da:34:a9:8a:fa:95:09:0f:e4:b8:c3:
22:d1:94:16:de:f6:8a:81:b6:21:70:c2:74:85:1b:48:47:37:
3d:75:1e:02:1e:ac:5d:f7:cb:23:50:32:07:0b:94:c8:64:7e:
cc:fe:88:02:24:35:91:72:16:d7:6d:bc:88:05:33:41:a4:a1:
1d:e0:9f:eb:3f:78:50:a8:a7:d0:2b:d7:ee:35:fd:28:65:a5:
7b:aa:fa:de:58:f5:0f:36:20:7e:6c:c7:fa:6a:84:c6:76:ed:
98:f6:e8:3d:69:91:fa:8e:ef:15:91:83:16:0d:ff:b7:8e:8b:
be:1f:86:ef:56:e3:1c:a5:c0:45:a7:59:0a:2a:32:d1:c0:98:
46:95:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:44 2025 by rpki-client