Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af5d73d-4a02-35d3-9933-63296354f353.roa
File: 4af5d73d-4a02-35d3-9933-63296354f353.roa (raw, json)
Hash identifier: qdqgLTqC2EkwBylf3s99g43C+Cgf1sSlkyZCH4q4ktY=
Subject key identifier: 6E:ED:F2:A6:EB:D7:EB:C9:83:4C:93:F9:29:B3:32:E2:30:14:D7:BA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150D6BCB51409CBECE74200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af5d73d-4a02-35d3-9933-63296354f353.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.200.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d6:bc:b5:14:09:cb:ec:e7:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=4b921989-934e-4815-b4f3-336350e6dae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:85:c6:59:0c:14:e5:59:6c:08:71:c6:36:
ac:ef:b3:d1:34:11:54:9b:9e:ec:ba:16:95:26:f9:
36:75:1a:ac:e8:bd:5c:81:fe:ca:8d:da:7e:16:4d:
f8:a7:18:60:fe:3d:6b:91:dd:31:66:87:b2:c5:84:
ff:bf:a7:ea:ce:4c:49:fb:71:5c:50:a2:a5:7a:e4:
9c:d9:cb:03:a1:cd:98:33:e4:42:2c:8b:14:e5:40:
47:a7:fc:53:6a:e5:dd:60:cc:9a:ae:5d:25:c9:53:
d8:05:0c:73:d7:7c:7e:6f:9d:9e:b4:a6:a6:40:3b:
1e:a9:9e:3e:b0:43:af:64:1f:cc:07:b2:55:fa:00:
44:6f:6a:c2:25:bb:5b:ba:48:86:e1:10:8c:48:cd:
24:fc:89:06:67:07:7b:a6:b2:4f:37:45:d1:c6:de:
8b:9a:68:5d:6f:b8:1a:a5:7f:81:2a:c0:a2:4a:7e:
58:67:c0:5a:ba:ba:4a:1f:f1:16:1a:64:1f:86:f6:
ca:6e:13:50:24:04:c1:59:08:a3:0c:7f:e6:c8:ee:
13:14:73:38:07:75:83:bc:a2:55:04:3c:93:21:db:
18:91:3b:e9:04:66:92:92:c0:2c:83:75:58:33:1c:
06:d8:06:50:db:05:ca:d7:2f:d8:1c:64:c6:56:ed:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:F2:A6:EB:D7:EB:C9:83:4C:93:F9:29:B3:32:E2:30:14:D7:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af5d73d-4a02-35d3-9933-63296354f353.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.200.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:06:68:0c:1e:1a:34:f1:67:a0:a8:f3:67:c9:a4:60:c8:c4:
58:16:25:75:06:29:e5:db:71:03:06:2e:5d:b0:45:82:a7:3b:
64:bd:11:04:27:92:70:11:40:e3:c1:b9:6b:b7:9c:10:f1:8b:
46:19:b1:ce:fd:71:b7:b8:64:39:bd:96:8c:11:0f:38:b1:47:
18:1e:63:0d:66:ba:88:9e:6b:9b:0e:9c:c7:9b:90:c6:59:5a:
50:4b:5b:4a:27:82:13:86:47:3a:e1:73:79:54:a4:8a:83:75:
9f:b7:0e:90:8c:7f:1a:ac:14:d6:63:d8:13:38:8a:3e:e4:d5:
13:e0:46:0e:39:67:ef:ab:d8:bb:a4:a3:6e:2e:e3:da:7e:5a:
c4:10:c7:b8:72:d4:19:71:22:00:87:35:22:0e:e6:10:0d:42:
ec:db:d6:aa:6e:20:b3:cb:1f:d1:37:ce:ba:d7:04:7c:22:a1:
e4:5c:03:cd:68:a9:93:fb:a5:5b:a7:f3:a6:c6:3c:2a:5b:10:
3b:6d:5e:69:3e:2e:90:63:fa:af:9b:20:aa:2b:f3:65:2b:46:
b0:fa:ae:75:8b:d4:71:eb:7f:7a:c0:f8:81:eb:3a:7e:8f:4a:
af:d7:1c:b6:68:9a:49:26:ba:9d:48:5c:b8:39:4f:fe:8d:eb:
b9:c9:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:30 2025 by rpki-client