Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57c42f19-b63c-3061-8c9f-068b335b3bbc.roa
File: 57c42f19-b63c-3061-8c9f-068b335b3bbc.roa (raw, json)
Hash identifier: lPT+p8ZqcPvoC6k9JfzZrsNBQUUYGrfqqoHnmokKJjw=
Subject key identifier: 8C:B4:7B:79:FB:9F:CC:95:89:C3:AC:0D:2E:49:F9:B2:DE:63:23:E8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E2BA9A9A6F9CDD993640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57c42f19-b63c-3061-8c9f-068b335b3bbc.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.219.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e2:ba:9a:9a:6f:9c:dd:99:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=d075e2c1-2c28-4a60-bcd6-32fc20468af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:d0:56:7e:43:09:06:2f:6d:79:9d:fa:66:
03:23:22:a8:bf:3e:1d:28:02:53:b2:47:b8:0f:61:
7e:41:2b:f7:84:3d:a2:28:f8:34:a0:f9:3a:fa:8c:
b6:bd:c4:7a:40:00:7b:ee:b9:e0:87:51:6f:b3:aa:
dc:e1:aa:d0:79:c6:6e:b3:34:ad:ac:cb:0e:7a:6a:
56:47:a9:55:0e:e6:bd:bb:45:f4:40:e5:f3:6d:f3:
86:2f:40:61:2d:b3:04:61:16:33:7f:63:6a:d9:6f:
2b:cf:c0:da:9f:be:f1:bb:3a:f4:c7:23:93:87:cf:
06:3b:f0:25:8c:ee:e6:8b:cd:46:93:05:15:a8:a9:
15:af:49:d5:3f:2a:a6:0e:0e:c9:c2:f8:91:11:d8:
d1:c5:a3:4d:71:74:3b:8d:65:66:33:ac:b5:43:83:
fc:6c:ac:3a:7c:50:9d:52:60:8a:e3:ca:ac:47:33:
f9:de:43:8d:3b:eb:77:7c:e6:29:29:15:2f:ee:74:
a7:6f:b4:9b:f8:10:d6:cc:37:c3:e9:c2:57:ac:97:
1b:4b:0d:74:8d:a5:e4:f3:f1:71:bf:a0:63:25:5f:
8f:57:25:b4:6e:75:f7:06:c7:77:a5:6a:89:e2:cc:
b7:93:93:5c:20:ee:e9:78:24:f0:f1:2c:d0:a1:e8:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:7B:79:FB:9F:CC:95:89:C3:AC:0D:2E:49:F9:B2:DE:63:23:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57c42f19-b63c-3061-8c9f-068b335b3bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e2:da:fc:98:8d:f5:7d:0b:75:e3:99:d4:80:8d:a5:ae:e3:
3b:2e:5b:37:d8:83:0e:cb:44:ea:bd:49:b4:b6:fe:19:5a:82:
d9:36:6b:e1:f1:d1:de:dc:51:8b:a9:24:87:40:78:a2:96:2d:
7a:1f:2b:e0:4d:c2:3a:a6:89:0c:ed:3c:a7:01:78:b2:cd:58:
bd:17:e1:d8:75:e9:09:30:72:99:77:ae:c5:cd:09:3f:da:79:
69:87:db:5d:77:6b:30:0c:54:42:7d:80:27:8c:43:fd:ce:c8:
b1:11:bb:d1:d7:11:c0:39:72:96:36:22:81:d2:e1:6f:4b:9c:
03:c3:73:65:ed:29:77:23:03:52:9a:c2:5e:a5:5d:cd:94:30:
f0:0f:6c:97:08:33:79:0b:e1:b8:17:2c:5d:7a:d5:80:41:79:
21:14:31:12:59:b5:3f:d0:9a:2b:fb:c7:40:41:5f:8d:be:d7:
26:ba:1d:ae:84:52:b1:16:20:f1:7a:c2:cc:53:42:88:55:61:
92:8c:52:eb:f9:71:ee:40:28:b9:41:b5:09:5b:01:2a:db:bf:
8f:c3:dc:85:ed:67:46:2a:97:2b:43:cb:34:be:94:fb:49:88:
d5:04:af:d1:98:23:ac:48:54:c1:d4:31:2b:74:f5:e4:9e:d4:
96:71:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:06 2025 by rpki-client