Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efc512a-780b-3b70-a54c-5a250dc20133.roa
File: 2efc512a-780b-3b70-a54c-5a250dc20133.roa (raw, json)
Hash identifier: MtV+wLpJQYS6LInDbFvg6F5rXFwFE21GWCDjjKSLZ+w=
Subject key identifier: 04:25:67:00:AF:21:9B:C0:1D:A0:4C:0E:78:9A:5C:11:CB:10:55:9E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666E6CB7C06D57EE17FC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efc512a-780b-3b70-a54c-5a250dc20133.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.232.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6e:6c:b7:c0:6d:57:ee:17:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=c72eabbf-13ba-423d-85c1-8cad8b6f7fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:28:5a:46:44:3e:58:1f:85:d3:d6:d5:20:
5e:b2:43:c3:2b:d9:5f:9a:d8:ff:de:6d:26:99:cf:
70:fa:e7:2f:67:41:c6:a0:51:1b:0d:31:00:88:c5:
21:1d:89:0c:03:17:78:b8:d9:d6:fb:d4:6c:b9:35:
cf:03:05:83:56:c5:3f:41:7f:13:ac:51:10:99:3a:
c4:0b:d9:22:7c:a5:c2:7e:2c:bf:6b:21:0a:ae:7d:
8f:14:2f:cb:b9:29:66:14:56:df:bd:21:d6:48:94:
41:97:c3:74:04:dd:71:9f:b8:a4:2c:de:26:c8:86:
53:09:cf:92:6f:84:3e:db:e1:a5:b3:cf:8d:b0:5e:
8e:69:56:3b:49:d9:03:dd:0f:e0:d0:69:f9:1a:d9:
bf:3a:2f:96:6d:34:9e:74:63:99:de:34:01:2c:72:
e0:93:5d:a8:9a:7c:12:a2:30:60:a2:0a:f8:62:f1:
d9:75:60:cc:2c:97:97:3b:4c:aa:31:16:7f:c7:4f:
46:76:97:20:10:c8:fd:5c:42:e0:03:05:10:6e:70:
d7:96:c8:d3:6c:be:74:d5:2c:f0:bd:4b:8a:00:4d:
53:1d:d0:49:7b:ee:59:de:84:24:9d:da:e3:65:47:
0c:07:9d:d9:d1:73:94:77:7d:c2:77:4e:69:63:ac:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:67:00:AF:21:9B:C0:1D:A0:4C:0E:78:9A:5C:11:CB:10:55:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2efc512a-780b-3b70-a54c-5a250dc20133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:33:eb:f2:bb:5a:a2:a4:14:77:fb:10:4e:f9:7f:e6:b9:05:
04:52:fc:87:d1:1a:2c:2d:dd:a3:ca:78:7c:f0:6c:c6:a0:06:
d4:8f:db:41:7e:a4:fd:28:0d:fa:b9:f4:fc:6e:25:06:6e:be:
08:76:d9:24:52:d1:49:a7:d5:4d:e4:c3:42:39:5b:4a:dd:3f:
a3:fa:e3:5f:ec:e7:db:b2:8a:2b:76:ad:d8:2f:e9:11:67:d1:
ce:13:c2:a6:97:87:c1:c8:6b:76:0e:f4:d1:25:c3:4f:5f:09:
1b:88:a5:2f:07:d4:34:85:38:26:62:18:50:2e:f3:0e:a7:a9:
50:33:7d:7b:b4:04:57:ac:23:c0:b2:98:fa:44:4a:8c:94:33:
d1:35:39:de:7a:12:c6:93:2b:3b:ef:71:48:60:ee:ad:94:76:
1b:30:60:db:c7:e9:c1:55:82:e5:13:b9:57:83:83:6d:ab:ce:
7e:48:dd:b4:8a:f7:40:ea:bf:fc:03:ac:e0:09:75:7b:a4:4a:
81:76:85:a4:b9:ed:14:03:32:3f:e6:e0:8c:85:92:c9:70:11:
25:64:bb:dd:f5:85:45:5f:58:09:90:21:2c:2a:03:62:e1:a2:
a1:7a:c7:58:8d:22:fe:60:30:8e:a6:c8:76:cd:0a:7c:1b:82:
b8:f0:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:52 2025 by rpki-client