Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
File: 37b45a49-9b0c-3a83-b9aa-86c53327f256.roa (raw, json)
Hash identifier: XDhXkpLVyUXrPWBemKqjwplZs0We/QUJIo00zvQ46gk=
Subject key identifier: 9A:04:11:23:82:A9:56:36:C8:59:C8:5B:A1:84:C1:A0:9E:39:31:78
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E4A5BBC4D1EA27629200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.224.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e4:a5:bb:c4:d1:ea:27:62:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=bc5d8e4a-2ac7-4134-a39c-a210630c2d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:fb:af:a3:16:ed:5e:5c:1f:66:12:ee:10:
e6:37:eb:47:68:f7:51:14:59:74:28:cf:3f:ef:3c:
23:47:47:45:65:6a:a8:7a:9d:c6:41:b4:53:fe:32:
fc:8d:96:36:89:dd:6b:db:7f:56:79:9b:1e:b4:f5:
d2:95:ba:35:88:5a:85:9a:ef:40:e3:dd:92:16:2a:
aa:44:be:6b:db:f5:bd:59:1f:7a:8b:a8:7d:49:1a:
6d:09:29:e8:c0:b8:00:e4:37:67:73:ea:22:82:35:
7a:52:6b:59:3c:6d:3f:91:25:75:5c:c3:21:fc:b9:
56:57:90:34:f3:fe:b1:01:54:59:a5:99:74:73:f6:
bd:0a:3f:c7:c0:c6:a7:36:af:6c:69:4a:80:f4:6f:
e2:e6:95:51:b4:43:25:61:05:7a:88:da:af:64:59:
3c:52:c4:46:8c:5a:8c:af:7f:fb:3a:83:60:0f:5b:
7b:3a:e2:22:d2:54:92:76:c1:e8:55:0f:d7:d0:96:
dc:fc:23:df:46:79:45:67:e0:06:04:e2:5b:b4:23:
db:ba:a4:bc:db:77:8b:97:34:c8:f8:09:82:fa:3d:
59:f3:46:0b:06:41:5a:f7:e8:5c:43:ab:4a:23:1d:
85:f9:a0:78:5d:b1:46:b8:ad:bd:82:c8:32:01:a7:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:11:23:82:A9:56:36:C8:59:C8:5B:A1:84:C1:A0:9E:39:31:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.224.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d5:78:bf:11:85:b9:b8:c9:82:f9:e6:a6:ec:43:a6:bc:f7:
fb:5e:06:d3:75:b9:d5:68:69:36:c1:9c:6d:cc:16:96:f9:0f:
38:1c:9b:a2:c4:c6:b2:2e:86:5e:6b:3b:dd:d2:5b:5e:4e:41:
3f:a1:de:18:bf:54:88:90:cc:0c:a0:11:c5:e5:05:12:07:8a:
4b:97:2c:b4:ac:49:ee:31:c9:5f:7b:56:c1:48:7c:14:9e:79:
2c:07:db:c9:c6:27:74:70:bb:8c:a5:cb:d8:52:d1:9b:43:41:
e2:e4:78:c0:86:5a:0b:0f:5b:c1:53:f5:1c:35:5a:52:71:84:
6c:e3:d0:74:87:ad:f2:3e:72:d2:29:6a:13:39:cd:d4:93:10:
a0:b4:c7:8e:43:71:59:59:cb:90:92:d3:33:23:ee:af:57:8c:
67:0f:a5:49:31:02:e7:95:b1:dc:db:9c:0d:23:8b:b9:31:19:
4f:b5:d9:85:9d:18:94:2d:88:1d:1b:18:de:35:4c:3e:d3:dd:
6d:9f:d1:1c:b1:e8:34:76:55:44:e2:30:9c:53:bc:86:1d:3a:
04:2e:0b:42:fb:9e:c6:f3:61:71:6e:61:64:19:5a:ad:bd:54:
85:8f:39:5d:e6:25:3c:af:50:54:44:0b:f2:de:4f:a1:23:20:
b1:83:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:39 2025 by rpki-client