Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
File: 24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa (raw, json)
Hash identifier: 0MpkK2+9Jj1Oe2WJnwn/AI7GANFSRh+4jL4+6I6Iasc=
Subject key identifier: 23:25:D9:80:0B:7D:25:C0:17:CE:BE:AE:CB:92:08:24:EB:89:38:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E866785F89449CAD86A4A800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.246.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:78:5f:89:44:9c:ad:86:a4:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=803c01bf-d011-4f0d-baf5-8ad481159d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:7e:6e:54:20:c5:2a:77:6c:77:36:3f:53:
2f:d6:f1:46:0f:c0:bd:bd:97:c3:8b:5b:5b:2e:f6:
f1:54:86:49:05:c3:56:60:89:9a:6a:9a:ca:52:ed:
2b:04:75:a8:d1:0b:ed:d8:22:84:dd:f7:53:da:0a:
d7:7e:f6:f7:c9:b1:c7:cb:9c:42:36:97:ee:ec:63:
84:70:59:8f:36:08:7a:3c:5f:e3:f0:63:44:e2:a1:
6a:c4:8a:94:c3:5d:66:a0:c2:0a:77:32:fd:43:a6:
85:8a:fe:58:10:11:92:fb:b1:0d:92:48:50:02:2b:
f1:2a:90:3c:67:86:d6:bb:d0:1c:93:06:a0:b9:f5:
10:47:27:b2:c0:30:11:9d:b7:7f:89:3e:3c:da:0c:
61:5f:c7:95:d6:5f:2e:13:29:f0:9c:44:17:81:0e:
eb:0c:92:d3:ac:62:e7:6d:25:c8:89:b8:99:e2:d1:
ec:4e:2d:e7:f4:2d:ca:47:63:85:25:49:00:1d:31:
29:f5:d6:b3:19:e7:fc:62:2f:96:09:2e:11:3e:3c:
d9:dd:b5:d1:25:4b:99:05:fc:1b:c1:3d:dd:e5:1d:
53:08:28:a9:45:4c:9c:89:34:bb:83:18:7b:81:e2:
2a:9e:04:ea:2f:50:05:b3:a5:d7:28:6e:2e:05:56:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:D9:80:0B:7D:25:C0:17:CE:BE:AE:CB:92:08:24:EB:89:38:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.246.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e4:99:f3:50:d4:25:8b:fe:e8:8d:43:e5:cc:6a:44:45:cf:
e6:19:1d:a8:52:de:bb:90:e9:de:79:8c:22:42:26:2b:71:6c:
cf:61:b7:40:1e:e5:60:ec:16:ba:0c:ce:f4:b7:60:0e:21:d1:
b9:26:e5:9f:cc:64:40:b8:ff:00:26:84:02:1f:40:63:98:5b:
c2:fe:db:41:99:68:fc:38:56:83:15:31:09:ea:de:6b:67:31:
ec:74:5a:21:e6:46:c2:c2:50:bf:bb:92:ce:56:9c:70:75:d9:
47:b9:15:5d:f9:b4:b9:d8:96:3f:09:21:ad:ca:71:1e:31:c5:
ae:96:42:54:67:6a:61:24:1a:af:00:4f:38:8d:18:0f:86:6a:
78:64:1e:47:38:4e:eb:dd:c6:74:23:e7:0e:1c:a6:46:c0:75:
c9:4a:65:39:99:96:1d:af:81:f4:5e:81:4f:62:2f:22:10:99:
81:33:4a:30:7c:25:0a:3d:06:e4:6e:cd:a7:ff:49:fe:d3:97:
42:99:bb:d7:7c:60:4b:2e:6f:80:a1:17:82:3a:c4:d3:5f:8c:
26:61:26:7e:79:76:66:96:4e:49:0f:54:04:b9:73:17:92:c8:
48:9d:75:e6:80:a5:c0:bb:02:c6:49:8a:32:f8:bf:28:76:52:
9d:fa:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:00 2025 by rpki-client