Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa
File: 3562be53-e179-3729-a3e8-c7e5ba1401c2.roa (raw, json)
Hash identifier: xuZOITj2DCMkSnFuvQd4lG5nUzt41XfTYlUxhUzkjwo=
Subject key identifier: 1F:85:9F:6E:A0:14:1D:04:87:86:FD:B5:11:3A:BF:82:6C:F8:34:00
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666C3639A5FBD3021A1A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.226.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6c:36:39:a5:fb:d3:02:1a:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=c661c3b2-2905-4db3-9769-23f375660eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:a4:74:7e:51:bf:ad:b1:ff:30:4e:44:83:
ad:64:e1:13:20:4b:63:a7:51:e4:4b:ac:8d:03:0c:
22:3f:e7:d4:55:5a:4a:4f:88:38:e3:f8:fe:86:53:
b2:a6:fb:ba:8a:28:36:16:ca:c3:40:c6:aa:c6:f1:
55:24:da:8f:17:46:31:9b:c5:57:10:63:84:68:47:
b6:9a:80:d2:ee:17:78:2a:7b:25:17:1a:10:94:ae:
10:82:b8:0f:64:67:3b:ac:be:3f:ae:9d:2c:eb:b8:
7a:c9:ac:0a:a1:46:f3:e7:e2:c6:86:fc:49:18:ae:
1a:04:fc:9e:fc:6b:9a:1e:84:41:55:5e:59:6a:e4:
de:d5:34:12:b2:94:77:a4:a9:e0:30:51:e5:f5:d9:
74:87:71:de:0a:d0:c4:f0:37:91:8c:b0:09:bd:a2:
01:99:51:d1:5a:26:c7:fc:ff:f9:13:6c:85:6c:93:
54:ef:12:07:7e:32:12:7c:11:a6:15:2f:01:30:9f:
5a:02:fc:e3:84:7a:6a:7f:d1:04:f4:03:44:10:7b:
70:4e:1a:c7:4c:34:82:3c:28:06:dd:4d:f6:53:42:
ae:b7:95:72:54:c6:c3:0a:92:c7:8f:d2:1e:90:06:
f7:0c:bf:52:a2:93:7b:67:04:0b:b9:75:de:3c:9a:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:9F:6E:A0:14:1D:04:87:86:FD:B5:11:3A:BF:82:6C:F8:34:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.226.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:43:b6:c4:ec:34:9f:bd:2b:98:a1:e6:b1:4f:eb:8e:7b:2c:
d0:21:31:ec:9a:e4:c1:8a:f9:5b:d4:fc:7f:77:75:b0:53:52:
52:e3:10:77:48:ed:46:b0:ab:3c:30:52:7e:77:f6:dc:67:db:
8d:f5:0b:a4:58:bc:29:ab:2f:f3:f3:b3:90:bc:2e:28:b1:7d:
a8:f8:a2:3c:8c:4b:c9:b2:7c:15:bc:54:31:94:f7:4f:41:2b:
6b:dc:e0:d3:d6:a8:0a:27:fc:8b:86:5b:26:79:81:d0:62:ac:
48:0a:3b:8a:9b:c8:f1:2e:98:ea:e9:a2:69:02:ff:53:3a:7e:
12:74:e1:81:21:ad:c6:c2:7c:e1:1b:f4:db:1f:34:99:9f:20:
a6:d6:8e:66:91:ce:65:1c:97:d7:16:67:81:57:39:9a:44:ee:
99:cb:b2:60:5f:01:d8:ef:7c:85:79:bb:0b:3b:cf:1e:b9:28:
8b:1b:dc:57:47:b0:cb:d7:2e:a9:2b:a0:c2:f5:65:4a:97:54:
bf:a7:a5:cf:78:94:f7:62:fc:83:79:b3:da:c6:ea:bd:a8:81:
d0:33:e9:e7:af:47:67:c5:a9:bd:d4:ca:b2:4a:6b:5c:a6:61:
13:a6:ec:05:0b:b3:1a:0f:32:0f:8b:53:c4:79:ac:41:f8:fd:
ed:52:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:05:26 2025 by rpki-client