Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d3b740-aba4-3e1e-b4bd-ac852a92e3aa.roa
File: 21d3b740-aba4-3e1e-b4bd-ac852a92e3aa.roa (raw, json)
Hash identifier: wRQzo0rtuHE1BMVu8grwIiCPCaLfei/oTSbZDit0Vuw=
Subject key identifier: 4B:60:B9:88:DA:03:5B:92:F8:CB:A4:AA:4D:57:C9:55:21:0B:4A:3E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666C5BA7790EC589B3EB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d3b740-aba4-3e1e-b4bd-ac852a92e3aa.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.227.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6c:5b:a7:79:0e:c5:89:b3:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=63bb6ae8-d1ea-4ee3-bc5a-6f782d6d671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:19:b7:fd:f2:d1:fd:ec:d9:cb:cd:8a:f2:
d7:66:a3:71:a7:63:0f:7c:85:63:8b:e8:fd:a2:88:
a0:7d:b9:3b:16:ec:fe:14:c8:1d:c1:f6:ba:43:ac:
d0:8d:08:f1:2e:b3:da:6a:e1:63:c4:3d:2f:8f:6f:
f0:15:7d:68:84:84:fd:91:37:f0:91:43:bb:83:30:
f2:36:90:3f:bf:c1:e3:97:02:1e:36:5c:20:05:4f:
6c:15:ae:6f:39:97:ae:33:0d:d2:16:90:09:e0:87:
2c:1e:69:cd:b2:23:14:5b:26:e7:49:14:34:43:0c:
1f:e4:0e:e6:7a:25:60:ee:54:e3:2e:e8:7b:9d:1b:
f5:c1:75:18:ea:e9:85:d5:c6:e3:11:e5:a8:a5:48:
ba:a6:fb:72:2b:76:aa:25:d4:a1:74:f5:07:0b:74:
9a:1d:b4:c1:8d:19:9d:24:e7:32:b4:fc:c5:7d:6d:
6b:4b:00:85:b8:98:8b:3d:8d:d9:09:0a:88:23:2f:
b1:03:47:96:91:81:d0:08:53:81:08:27:51:81:72:
73:f5:2c:01:2b:a2:de:e7:76:24:b8:b9:10:53:62:
a7:ac:3c:45:cc:d6:db:6f:5f:63:e0:30:40:c3:0b:
5d:98:bb:e2:37:49:74:5a:65:d2:66:09:dc:23:f7:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:B9:88:DA:03:5B:92:F8:CB:A4:AA:4D:57:C9:55:21:0B:4A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d3b740-aba4-3e1e-b4bd-ac852a92e3aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.227.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:52:cd:f9:44:e1:c0:6e:71:9c:07:2c:0b:fe:17:65:59:5b:
f9:07:ec:d0:01:38:ab:bd:8b:d7:e1:75:df:b7:cc:5c:bb:5e:
2c:09:e6:af:a5:d4:02:08:5f:b7:11:ae:2c:00:fb:33:f9:50:
0b:fe:8c:01:f4:0f:5c:2b:3e:29:b6:5d:6b:a5:c0:9d:d1:32:
4e:2c:52:8d:e5:a3:b5:ae:03:ca:21:68:24:fb:fc:27:3b:f5:
36:b0:80:4f:21:b4:66:b8:2d:be:53:cc:16:f2:e4:f4:b4:12:
ee:3a:53:f9:3b:06:5f:63:b9:d6:6f:d9:14:fc:0b:14:82:61:
25:e5:f6:7e:23:5c:60:c1:38:2f:b2:e7:0e:4c:f3:5d:33:aa:
dd:f3:70:38:6a:47:4a:88:95:d1:10:94:9d:5c:6b:40:02:f8:
7e:e0:fb:fe:07:1b:9c:92:cb:e0:75:3d:c3:37:1d:f1:2b:9b:
94:1c:b4:72:39:40:96:78:0a:99:d2:64:3b:8d:b0:28:a3:da:
d7:8d:35:b3:b2:28:23:0d:dc:7d:a9:65:77:17:c4:c7:7f:7b:
e0:a2:2a:f1:ba:30:f2:c6:ee:4f:0c:bd:14:91:6b:f7:4e:71:
99:44:0e:4a:90:75:80:d8:b5:9a:36:8a:43:6e:83:9b:77:d0:
8d:4a:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:25 2025 by rpki-client