Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa
File: 5e30c25e-eec7-380c-bece-65e67fb6afeb.roa (raw, json)
Hash identifier: AsJWLAhcRMqVolPXiRmmsifiWc2KITH+tQaO/pX06vs=
Subject key identifier: 35:5E:20:D9:FC:B5:4B:ED:ED:A3:CC:4A:D5:60:9E:F6:F9:A0:E3:74
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E86672CD4273574F23A2BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.238.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:72:cd:42:73:57:4f:23:a2:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=8bc378a8-0c2d-42f8-8582-7d509d5399d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:fd:44:05:2e:81:24:32:9b:67:14:c9:2c:
a4:0a:17:c4:5c:9e:f5:b0:b5:6e:c1:27:c7:81:f2:
a6:f9:0e:54:10:40:a3:e5:91:c8:7a:3b:9f:7c:9b:
2c:df:89:ca:bd:e9:48:7a:4c:1b:c3:fa:b1:c4:36:
f8:15:42:c6:88:b3:37:5f:c7:71:35:fa:71:a4:44:
8a:4d:4f:06:44:5e:65:56:10:06:6d:02:59:6f:f5:
e7:33:30:41:ad:23:fe:6a:16:1f:74:67:ef:9d:0b:
dc:a4:51:35:c0:76:32:7b:44:eb:fc:cb:a8:4e:28:
0f:48:8b:e6:16:fa:4c:a9:ba:f4:ab:79:58:5a:75:
78:43:37:55:36:84:7a:ae:c1:0c:87:1a:eb:ef:21:
6a:8d:d2:21:82:8a:bc:67:08:9f:a6:e0:cb:89:ab:
62:a5:e8:e4:bd:17:d6:98:53:0b:f9:05:51:a4:a4:
1e:8e:be:da:33:66:6b:33:08:86:75:c2:5a:17:37:
41:d0:5a:b2:56:ed:63:45:6f:62:2c:1c:08:60:75:
e3:53:ce:b4:b9:e5:16:d6:40:75:28:52:77:d9:be:
7b:e9:23:bb:28:b7:f6:52:59:7d:36:28:75:e0:d6:
d2:5f:94:6e:5f:7e:29:ef:dc:f8:83:ba:6f:bf:f5:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:20:D9:FC:B5:4B:ED:ED:A3:CC:4A:D5:60:9E:F6:F9:A0:E3:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.238.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a4:16:59:e6:53:a5:5f:97:79:16:5d:3f:0e:39:63:4c:c3:
82:7c:00:af:24:7b:42:fb:95:d5:40:b4:30:5d:b3:07:c9:5d:
f4:40:ab:0d:52:f8:7e:20:50:32:4c:56:5e:aa:46:bf:ca:e5:
9a:e7:95:11:70:5e:7d:66:6c:ec:4c:4a:91:6a:d9:63:e4:c4:
85:27:0c:bc:95:8b:f3:bf:bf:08:e0:8e:dc:ac:96:45:d4:c6:
d8:39:7a:36:36:d4:e0:61:18:23:ef:98:64:79:5f:37:7d:e4:
89:be:f5:32:a3:04:44:36:57:6a:43:ae:25:69:ba:33:30:6b:
6f:38:81:05:aa:a6:27:eb:58:23:fb:8c:a1:f4:46:f8:05:cc:
58:5b:cc:3a:ea:34:eb:b7:51:22:0c:7d:6c:b6:5d:97:cb:06:
4e:aa:32:87:99:de:c7:e9:5d:ec:ac:3a:4c:df:01:d4:14:16:
20:6d:32:9a:d8:61:44:08:73:43:45:ad:b7:85:8c:cb:44:78:
8a:0a:79:63:3b:fb:a1:a4:a9:c0:50:13:41:83:c3:c2:27:96:
2a:d0:d5:6e:43:5d:98:98:9f:db:32:b8:52:69:93:83:95:94:
db:5a:19:6f:64:28:17:05:36:48:10:cd:48:d4:ec:38:53:e9:
09:8a:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:09 2025 by rpki-client