Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
File: 3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa (raw, json)
Hash identifier: V04QoDcjeRTR8nzkuYmbFVbKz/gJ68EATj7cVHC+oGI=
Subject key identifier: B9:34:B9:31:36:90:D5:E7:99:DD:45:B0:20:0C:21:F5:1F:A1:C7:1D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150DE01B23197E108076880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.214.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:de:01:b2:31:97:e1:08:07:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=b4fdc32c-e540-4cc5-a9f3-15bd317aafdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:6b:f7:28:65:c0:39:8f:04:7c:47:40:f2:
fc:36:a1:3b:67:ef:a3:92:59:dc:a0:29:e5:f9:ff:
09:ea:19:18:2a:1b:af:93:d2:6e:46:98:5e:e6:3d:
22:96:62:b4:24:1b:da:fa:96:25:bd:cb:6c:21:62:
c9:35:b3:a5:b8:3c:8a:d1:db:e7:17:2a:40:ec:18:
d3:ce:75:78:9d:02:2f:a7:93:79:86:95:84:47:ed:
3c:26:bb:32:be:fc:bc:eb:82:13:6c:fd:26:cd:a6:
aa:85:33:fe:33:6b:2f:21:75:ab:b4:42:6b:02:97:
4d:e8:25:56:b2:33:49:0a:c7:c2:9f:72:da:fd:be:
dd:5d:55:74:7f:39:4c:d2:f5:ed:19:58:b5:47:df:
e7:ba:a6:a5:e4:84:e7:59:a9:5b:6a:db:48:cb:82:
fa:80:3f:4d:33:9b:73:76:08:b7:eb:3d:f7:0e:d8:
46:8d:8e:a3:c0:6e:b3:ad:61:6d:34:47:d0:c0:37:
fe:1f:46:95:6d:f5:38:9c:27:0f:4a:2a:90:65:64:
cc:f0:87:30:90:86:7c:77:54:79:ca:d2:13:61:aa:
61:2e:6f:68:03:87:b1:6a:cc:59:ab:2b:20:e7:13:
16:99:f0:1a:07:fb:bc:99:6b:bc:80:47:82:9b:74:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:B9:31:36:90:D5:E7:99:DD:45:B0:20:0C:21:F5:1F:A1:C7:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.214.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:6c:32:fc:5d:43:04:c7:33:17:a8:f0:df:ad:ec:93:a5:09:
ff:5c:43:ee:aa:2c:dc:7c:a3:ae:79:1d:0c:b2:48:f1:3a:d9:
3c:26:a6:da:07:06:21:6c:76:54:98:65:02:17:21:9b:4a:23:
16:fe:b7:76:d9:29:71:b9:b1:bd:3f:5a:a7:a4:67:cc:f6:3f:
7a:63:70:4a:86:22:75:c7:82:2d:f0:55:9d:77:1f:a2:21:1b:
49:df:98:55:a4:2e:a1:6c:b3:05:f1:f8:33:e0:75:98:af:5c:
54:46:02:72:44:ad:09:d8:27:0d:3b:76:7c:ad:f5:b8:e1:02:
ac:f1:b0:f2:c2:15:3a:ea:a0:e2:c5:97:5e:ee:9e:55:93:f6:
d2:d7:6f:1b:b7:69:d3:71:41:49:76:40:97:82:7d:88:35:18:
94:49:1d:d0:5b:dc:b4:b4:7a:25:f4:9d:1b:27:b8:44:94:2e:
fb:a9:62:66:ee:0e:14:b3:ad:cf:d0:9c:84:31:61:1b:b6:5b:
17:92:f7:d0:19:6b:be:31:8e:37:96:39:fc:cb:41:6d:68:8d:
b2:48:7b:19:af:8e:a6:82:9e:7b:b0:e7:93:e5:f2:22:d0:81:
79:53:15:f6:7f:39:01:d4:e2:d2:fb:c2:a7:83:74:94:14:c1:
c2:4d:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:22 2025 by rpki-client