Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cdee8e5-e81b-3784-a941-cf352ba893b2.roa
File: 7cdee8e5-e81b-3784-a941-cf352ba893b2.roa (raw, json)
Hash identifier: Um3eaSjmKzjHFIsjcq2T6LB9BRhHI84IOw2WK/oyBqI=
Subject key identifier: 8D:C1:B7:4D:2B:82:1F:4D:34:0D:92:32:8A:42:C1:B9:7C:35:D2:8A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150EC1FE5C9A903733D3EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cdee8e5-e81b-3784-a941-cf352ba893b2.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.213.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ec:1f:e5:c9:a9:03:73:3d:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=ca27a8be-852a-48d2-9975-94e83247106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:a0:24:58:ab:0b:f2:f0:29:57:0d:da:b7:
de:3d:43:49:81:5a:6d:49:aa:8b:24:fc:24:37:84:
22:18:67:9f:83:1c:81:85:d3:bc:62:86:ce:01:dc:
4f:fe:17:ac:61:f5:72:10:b5:94:8f:a1:41:3d:5d:
ce:3e:fb:7b:65:0f:9c:c7:b4:b0:11:4a:1e:09:9c:
9c:bd:66:b0:fc:04:0c:71:70:be:03:6a:f0:52:e5:
a7:81:d1:e9:f1:2a:17:0e:60:c3:2e:cc:0c:86:da:
3a:4b:cb:8c:92:34:c7:cf:9c:93:d7:1e:8a:e6:c0:
0d:6e:99:e6:10:d6:bd:25:97:8d:69:c7:d5:5e:74:
71:bb:90:28:06:5d:4d:dd:4c:35:bf:69:07:c7:71:
b4:bf:a1:d3:91:89:86:1c:5a:25:cc:b5:de:ca:f2:
9b:d1:c9:88:99:37:3a:b4:37:60:a6:cf:19:c1:8f:
c6:20:6d:52:f9:b1:1f:60:e8:5e:50:0f:bc:7a:af:
a8:81:1e:a2:f7:31:d5:46:7f:68:72:9c:18:a5:43:
42:9b:be:8a:15:2d:70:63:de:58:f5:43:43:8c:6e:
3b:aa:81:a3:3a:db:7b:b5:a0:f0:9e:8d:cc:ff:0c:
2d:4e:72:fe:88:75:90:0e:ca:f9:53:e1:73:a1:69:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:B7:4D:2B:82:1F:4D:34:0D:92:32:8A:42:C1:B9:7C:35:D2:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cdee8e5-e81b-3784-a941-cf352ba893b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.213.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:93:0b:e3:8b:44:01:a0:da:6b:2b:57:ec:39:47:e5:3f:3c:
5a:69:fc:57:58:3d:9d:55:58:92:9f:9d:53:fc:ad:67:a6:ad:
cc:24:7d:c5:f2:6f:78:d7:f3:0a:ba:af:46:56:4d:da:f6:ab:
53:06:99:09:31:3d:9e:e7:55:1b:8d:64:b8:93:79:1c:60:47:
3b:ef:54:c8:00:6a:4c:90:dd:2e:b1:30:b6:b2:35:38:98:dc:
ad:ed:2c:ce:ea:fc:0f:94:96:d6:fc:94:a4:af:01:f6:d0:66:
85:86:95:f6:1d:7f:cd:bd:ee:a7:41:80:c9:f8:01:e7:43:10:
32:d2:27:bf:69:e8:cf:ab:ec:11:dd:9b:6a:49:34:77:c2:ac:
71:2c:57:1e:5c:ec:24:90:0f:f9:03:0f:ee:9f:8d:21:ed:d7:
b7:4b:61:23:fb:02:69:89:aa:8e:06:84:d5:23:5d:07:f0:dc:
d6:7e:19:54:b4:bb:5a:c3:8f:80:88:06:26:db:23:50:64:33:
81:98:31:17:b7:f7:c2:16:a5:c4:4b:a8:67:b7:a1:36:4c:cf:
db:48:32:39:65:48:6c:47:d8:3c:e0:6c:c7:1c:90:4f:85:4f:
46:36:72:7b:11:2e:8e:28:c5:21:2c:d8:c8:30:88:8a:b9:23:
9c:22:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:32 2025 by rpki-client