Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa
File: 41e32bfa-cccf-33dd-abd7-2257367f0130.roa (raw, json)
Hash identifier: JIyX5yMsadwo5191gzcXhH8qg1POK8+DPKlSrtm/Xws=
Subject key identifier: 61:1D:F7:C5:5C:38:CB:F6:A9:99:A3:8E:62:72:A8:9A:93:95:25:AC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8667795DAB1ECAAB93F8B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.245.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:77:95:da:b1:ec:aa:b9:3f:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=95b63bd1-3f58-4afd-b785-70123baceed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:fa:7d:b0:8a:90:09:fe:a9:b4:6a:25:52:
73:01:98:4d:89:a0:5c:f0:9e:35:25:9a:d9:e6:32:
6e:ea:b3:40:9b:6d:81:fc:ed:f9:1e:71:b8:5b:1b:
5e:24:5f:21:85:c2:d6:75:ed:e2:a2:ab:8e:38:30:
60:7e:d4:49:f3:2d:04:15:7c:fa:c9:26:c2:c7:67:
0d:5a:5d:29:49:2f:ad:84:67:ef:bc:a6:c2:6f:f7:
cd:2a:06:10:91:e9:c8:ec:c3:2a:02:5a:dd:49:fe:
d4:1d:9c:a7:2e:95:c1:af:3a:30:f7:a0:1a:8e:d9:
57:44:94:37:86:13:f8:96:b4:f4:d7:a5:e2:f4:3c:
43:c7:18:b7:49:ef:94:6f:29:80:ce:6d:6b:00:c4:
7c:d8:cc:e2:c3:4b:35:86:b4:6a:0f:4c:95:d7:cc:
cc:55:06:27:ce:8e:bc:40:9d:fc:03:a9:20:38:1c:
67:2c:79:59:5c:68:da:c0:d3:40:2b:2d:90:50:8f:
72:95:fc:83:c7:08:31:03:86:21:e6:49:d0:19:93:
de:bf:e3:b9:de:e0:78:09:9c:4f:90:a0:0d:f5:cc:
7b:dc:b3:e3:5e:95:87:26:e4:fc:fe:88:f1:82:ca:
19:90:0c:e5:1b:50:dc:27:3c:c1:05:2d:be:3c:0f:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:F7:C5:5C:38:CB:F6:A9:99:A3:8E:62:72:A8:9A:93:95:25:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.245.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:20:40:6e:69:31:11:b3:91:29:f6:82:01:43:12:13:c6:1b:
84:6a:8c:b6:78:46:4e:16:23:40:60:b7:d8:b3:2a:2c:85:e5:
5c:ce:23:ae:35:e0:fb:4b:9f:65:6d:2e:e8:f9:75:ee:e1:49:
56:93:76:c1:7a:e8:ec:6c:88:b3:e4:78:48:fc:22:65:ef:15:
51:bf:6a:73:42:73:bb:21:0c:8c:a3:9f:b4:6e:75:76:cc:4b:
c8:ed:5b:c1:7b:28:c7:e3:1d:bc:1c:b1:fc:05:48:7c:1d:ca:
2c:03:ca:74:f7:f1:14:79:ff:63:81:f7:d3:9a:4f:b3:06:84:
b1:33:0c:af:61:da:26:5e:99:5f:9f:74:56:85:77:bb:2b:e4:
92:f7:cf:62:e4:5c:2d:88:39:c6:04:7a:7b:28:e2:95:2b:a2:
28:24:17:1f:5f:a7:47:cc:bc:5a:94:42:8b:43:d6:85:77:50:
86:ee:80:3e:4a:e0:5f:50:ac:1f:df:2b:ce:8d:56:79:fe:8d:
47:a1:27:f7:e2:e1:94:78:99:96:b9:0f:88:94:97:bd:95:7e:
d8:2d:98:51:35:ec:7b:75:95:73:85:19:a1:89:cb:d8:5b:ac:
be:2c:1f:34:b6:9a:cc:fb:3c:f5:41:1d:bf:e3:e6:36:b3:94:
49:90:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:52 2025 by rpki-client