Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa
File: 29e073aa-41d2-31ef-9ace-816befecc596.roa (raw, json)
Hash identifier: DDUOzd3njMmPlB2b23FjN3edsJHJAGvyoqVk27EbxlQ=
Subject key identifier: 44:91:B9:31:A6:CB:FA:F0:87:02:77:1A:4E:0B:48:8D:6B:82:EC:36
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E86671DAEF558F53ED005580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.236.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:71:da:ef:55:8f:53:ed:00:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=2e5fde75-01a6-4d3b-ad67-7c7b0b2ff514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:3d:91:6f:9d:88:c4:c7:43:bf:84:03:34:
61:13:6a:5b:e7:27:4d:ad:d5:03:c5:a3:43:f8:eb:
14:92:5d:21:a4:c8:92:13:da:ae:92:e5:11:5e:3d:
38:46:f6:ec:0a:97:44:d4:ea:fa:aa:f4:d7:04:21:
08:3c:f3:cc:3a:f7:69:65:e3:b1:b0:eb:a6:e5:ca:
f8:13:76:29:7e:8a:02:fd:4d:cf:ab:23:3c:b3:cb:
da:64:77:f7:4e:61:34:72:01:23:05:37:08:e2:ab:
0b:d1:9b:7b:76:10:40:d6:f7:c1:42:f4:79:37:96:
be:41:e3:c9:3b:8f:1f:4d:7e:33:c1:46:8e:1a:79:
88:18:51:00:96:0e:04:54:2b:05:cf:42:91:64:fa:
63:e7:fa:67:18:39:1f:bc:98:13:29:04:7b:7d:da:
1c:85:b6:29:5d:25:6e:ef:6e:10:7f:da:d4:70:8a:
f5:ad:9e:dd:6e:9c:bd:c5:3d:2a:e9:db:b8:76:03:
66:88:90:88:2d:8b:ee:a0:e7:33:44:ab:01:1d:2a:
67:3c:d9:51:8b:4c:24:eb:bc:83:91:59:76:73:61:
f5:1c:ac:7d:b1:9d:e5:c4:22:4f:26:a0:89:a2:3c:
b8:5d:32:82:a0:98:cd:19:82:53:e3:94:73:2b:e0:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:91:B9:31:A6:CB:FA:F0:87:02:77:1A:4E:0B:48:8D:6B:82:EC:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.236.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:fc:c9:ec:cd:cd:1f:03:61:49:ba:2d:dc:6a:72:e7:f1:8e:
ad:e0:ab:fb:11:6a:79:86:53:24:32:0e:21:30:79:48:36:31:
d8:45:c8:a3:df:13:d1:e5:9b:40:bc:f3:8d:e0:d5:c2:82:02:
bf:ac:10:35:66:ad:45:67:ca:13:86:9c:29:91:da:10:52:65:
c8:71:15:76:12:03:6f:0b:6f:45:32:3f:4f:5e:9b:89:64:0b:
3f:36:fa:31:9d:03:43:da:31:e6:26:6b:6d:a9:82:7b:77:ac:
80:f9:25:2b:b5:3f:e3:1e:12:da:58:f1:bc:fa:76:cf:66:c4:
ab:0c:6b:14:00:6c:5b:94:fc:84:c2:0f:ed:20:ab:e9:c9:d3:
f4:7d:0d:a7:9a:ec:04:0d:5a:0c:52:45:a0:41:01:3a:94:99:
31:d6:f6:64:af:3d:e5:6f:a8:5f:d2:48:de:67:a5:85:6a:7b:
5b:23:61:e0:66:f3:58:d3:19:ee:99:e3:2a:77:78:32:51:83:
de:d7:00:34:fa:da:71:c0:74:2f:e1:1d:e2:f6:43:f9:98:3c:
a8:bc:40:9b:79:59:d1:eb:19:60:8d:7b:4c:5d:ef:c2:8c:cd:
84:28:47:1f:69:78:97:ba:ed:da:dc:5b:de:17:a6:60:37:7e:
6c:66:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:53 2025 by rpki-client