Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503e14b2-6c51-3f0a-a301-92e81ac35cfe.roa
File: 503e14b2-6c51-3f0a-a301-92e81ac35cfe.roa (raw, json)
Hash identifier: Kt9H4eVTcspneqWNAhF5P/MLGBeQuAWPbaOUQ+3YG1k=
Subject key identifier: F3:57:98:72:31:20:A2:C4:22:78:7A:2E:D7:29:C8:71:28:48:77:46
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666F61C53A4AF265A18F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503e14b2-6c51-3f0a-a301-92e81ac35cfe.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.232.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6f:61:c5:3a:4a:f2:65:a1:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=fb77f55e-1b6e-4ae5-b9a5-e54678c58964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:36:b9:78:97:8d:29:91:98:16:02:a2:a5:
d6:6e:ea:f1:eb:e7:c5:6e:60:a1:59:af:23:55:d7:
cc:57:bf:99:8d:b8:a3:c5:f3:87:42:78:8d:08:db:
7f:a2:a1:44:13:1f:8e:10:9e:8a:fc:68:15:54:ac:
b0:30:5e:17:66:2f:36:e7:f7:27:18:71:4c:50:2b:
c6:cf:48:b0:9f:6c:6a:a7:e9:d3:f1:16:7c:95:e6:
63:79:90:b1:10:c3:a4:9c:04:87:f1:08:3f:b3:da:
22:f0:0c:b4:a7:41:27:0b:a9:75:92:6c:15:04:af:
5b:5a:6b:72:04:33:69:fc:6d:24:ae:90:41:24:80:
b0:63:b0:ce:4e:9c:f9:70:a4:ac:44:0c:84:3b:7c:
a8:58:69:a1:68:35:17:49:41:ea:8c:c3:c6:14:e9:
3e:2c:54:63:58:15:4e:cd:14:0e:13:93:08:84:43:
ab:cd:ca:03:ad:b9:53:4e:0f:93:75:c9:63:01:8b:
8c:d2:e2:a2:95:cf:df:85:61:e7:4d:ce:0f:16:e9:
44:8b:89:5b:4e:0f:2a:df:1c:3d:f2:81:c0:4c:94:
02:ad:33:39:44:a6:84:1c:ba:fa:b6:63:57:53:bb:
b5:8b:56:80:2a:ee:04:bc:fd:91:b1:63:84:40:54:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:98:72:31:20:A2:C4:22:78:7A:2E:D7:29:C8:71:28:48:77:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503e14b2-6c51-3f0a-a301-92e81ac35cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:22:2c:69:13:c0:9d:98:d3:e9:79:3f:05:49:9c:d8:52:95:
04:ce:bd:08:e4:c1:73:7a:44:35:d7:1d:78:d1:e7:53:af:f2:
5d:d5:15:ba:44:ac:e6:1a:61:d0:5f:53:0c:fa:94:0b:51:7c:
af:74:29:78:45:6a:c6:e9:6c:85:6f:e2:c2:04:af:a9:b3:56:
db:da:c7:96:fa:26:20:94:1e:05:52:30:5c:e2:e8:df:68:8f:
46:1f:9c:25:b9:16:45:08:89:e9:41:4e:a9:60:2f:78:c2:35:
8f:66:8b:e7:47:c5:7a:db:24:87:41:e3:7b:d8:ca:2b:02:01:
89:47:06:b5:bc:d9:80:34:af:c3:52:ca:36:cb:cf:13:91:e8:
ba:c8:30:42:2c:87:b2:3d:30:13:bf:8c:b3:91:f9:a0:3b:d1:
8e:9c:db:dc:cd:9d:bb:51:bf:65:07:97:b1:fe:c0:6c:05:34:
44:ac:9a:df:61:4b:08:6f:7c:17:11:cb:03:d2:bd:b0:f6:42:
e8:99:74:ed:60:7a:52:3b:f4:f5:de:e4:a3:87:97:e4:92:bb:
37:75:71:1f:7f:b2:2a:d3:8b:93:99:6f:99:32:17:45:76:91:
b4:20:78:f9:47:24:ef:45:b2:9a:87:62:43:8f:33:26:d8:97:
27:83:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:35 2025 by rpki-client