Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa
File: 4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa (raw, json)
Hash identifier: Jts0Sz3H2HrKeUJY3vGDnhIllz9fu6GR/zKhbYl/lFQ=
Subject key identifier: 77:E3:9F:69:54:13:C3:E2:05:B2:28:EA:B6:CA:8C:47:B0:44:59:00
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150EB057A8ACA6901406200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.213.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:eb:05:7a:8a:ca:69:01:40:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=60aa9773-ab12-4809-aac8-c5400f98d5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:f4:c2:24:e2:50:a3:d1:37:2b:02:8b:61:
51:93:02:08:4a:c6:56:5a:93:d3:ec:14:18:cb:39:
4c:e2:55:2c:e0:99:55:1e:ad:43:e3:53:84:fe:c2:
e6:20:e7:8d:73:78:c1:18:a8:18:58:7c:d1:28:e0:
bc:2a:02:6a:1b:be:35:48:e5:e9:8e:63:57:e5:32:
0c:dd:2f:64:16:40:b2:b2:e4:d0:39:71:37:8b:35:
dd:df:52:33:da:77:f9:2c:c5:d8:88:9e:a1:bb:eb:
68:9c:f4:e6:c8:20:75:97:64:d2:fa:c0:69:8f:45:
b1:af:60:a0:77:98:6e:1d:ad:1a:af:19:f2:8d:07:
4a:d0:63:0d:2c:6c:8d:33:01:73:e4:31:5c:a0:2a:
fb:67:7f:1c:9c:af:9e:c4:c4:1f:d8:cc:da:5e:79:
fd:b0:f3:b3:3a:cc:6a:58:da:83:73:9d:74:d1:d4:
57:86:2b:88:56:8c:8c:4c:99:14:ea:a6:ab:07:7a:
4a:74:68:42:31:c9:2d:99:b5:24:ae:0b:f0:9e:4b:
30:77:41:16:4c:62:87:e2:da:16:17:4a:1d:d3:04:
93:16:5b:0f:ed:5e:19:e5:40:32:b4:a3:c6:d5:34:
7a:94:ce:05:22:61:0b:81:8b:03:11:b3:05:10:6e:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:9F:69:54:13:C3:E2:05:B2:28:EA:B6:CA:8C:47:B0:44:59:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.213.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:86:31:0e:78:59:2d:7d:ff:26:04:6d:f5:5f:8a:47:8b:fd:
5c:ef:39:29:73:94:10:90:a3:42:ab:62:4d:52:1f:9b:ea:a4:
b9:99:0f:82:21:36:51:ca:e8:f2:92:e4:69:b7:f4:46:d9:cd:
e1:d3:7c:12:c4:74:75:2a:70:23:e4:76:97:b3:c6:91:49:57:
5c:f8:40:fb:56:8a:b8:0c:de:39:6c:9f:b6:09:37:b3:09:6b:
14:ef:93:83:48:cf:1b:9b:8f:73:52:5d:ed:6e:fe:98:40:57:
0c:7b:75:7e:95:bb:83:c9:4f:31:81:cb:c6:22:41:11:3b:10:
14:10:6e:7d:4e:8b:a1:2a:fc:35:c9:54:09:1b:30:a5:b0:c4:
8e:14:97:f9:7b:ad:3a:85:c4:5b:ef:6d:55:79:cf:8d:5a:4d:
94:01:67:6c:7e:c5:0f:a9:07:36:3d:59:58:3a:7e:2c:c4:24:
86:3d:bb:20:41:5e:80:c8:82:dd:74:4d:89:5c:06:ca:bf:83:
e6:db:76:8a:9b:67:71:4b:9d:fe:f5:fa:0c:cb:7c:08:b2:29:
86:86:52:b5:ae:b0:d9:dc:dc:9a:e8:0d:0f:b4:43:fa:9b:45:
9e:11:3b:b1:f1:1d:55:b8:af:8f:1d:12:83:1b:31:98:30:ab:
11:3f:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:49 2025 by rpki-client