Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa
File: 8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa (raw, json)
Hash identifier: qhZ8+RMmDxUj+i3DHaOifbUmVQP6OzEtG/n3OxNAs4g=
Subject key identifier: 79:B1:70:57:CB:2E:95:1B:5D:D1:C8:FB:2A:89:B9:7D:C4:13:F9:84
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A830A2F91ECE995B70E9E600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.221.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a2:f9:1e:ce:99:5b:70:e9:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=9ede963a-dafc-406f-ba2f-ef652329b564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:52:1f:70:11:2c:d0:e8:03:f4:f2:88:71:
e0:21:22:70:51:b8:db:41:aa:0f:27:a6:bc:5a:57:
db:0b:aa:67:76:f0:69:30:bd:6a:48:f0:5a:f7:32:
8b:60:11:01:db:9a:3f:03:d2:1a:1a:9a:b0:7a:fb:
49:86:66:30:33:2c:84:f5:68:97:3f:32:57:b7:70:
0e:3e:19:dc:9a:e4:91:1b:e0:b3:ae:47:6d:09:13:
91:c2:ef:54:1a:6d:ba:c4:a9:86:f4:8e:ef:a5:1b:
6e:40:57:4a:4d:c0:d6:67:f7:4e:97:da:3c:c6:b4:
e8:cb:76:2e:3b:09:10:4b:74:fd:ae:c9:ee:3a:2c:
62:94:57:0d:cd:8e:dd:91:36:9b:28:f9:a5:95:07:
54:7e:f7:56:6d:79:af:5b:95:68:0d:91:69:72:0c:
bc:b5:0b:f8:4a:97:3b:71:30:b3:c3:22:08:75:56:
d1:97:cd:b8:4d:f1:7c:08:fc:f7:bb:70:44:5c:43:
be:42:0b:56:a5:0f:f4:ae:f3:57:96:af:c9:79:3c:
f5:66:63:77:98:ea:bb:1e:9e:cf:74:98:50:46:fd:
3b:e8:2d:3d:29:3a:e3:51:17:c8:58:73:84:23:c3:
f9:05:59:6e:ee:6e:6c:f3:66:ac:2f:07:14:64:3b:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:70:57:CB:2E:95:1B:5D:D1:C8:FB:2A:89:B9:7D:C4:13:F9:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.221.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:92:a0:ce:e5:c2:68:2a:61:fe:94:8b:33:f4:ab:6e:65:c9:
66:67:e3:2d:1d:5d:78:0f:c2:e5:fb:3e:27:2c:21:16:a9:ba:
9f:3f:f8:7f:a3:b3:e8:2c:1c:18:1a:4c:59:9f:3f:b8:da:b2:
94:0c:59:c2:21:a0:64:ee:b9:3a:1c:2d:c2:47:08:aa:42:bc:
24:46:71:f2:14:31:8c:d3:a4:73:f2:14:32:ea:15:c0:f8:be:
b3:13:74:cc:0e:42:0b:b2:84:69:0f:4e:1a:d9:e6:99:72:72:
bb:42:40:3f:b3:b0:88:f9:f7:20:1d:e7:4f:48:35:d0:63:73:
b0:fc:92:b5:93:21:33:8a:b2:1b:c6:5d:b4:3b:74:d4:9c:b5:
bd:bf:3e:fc:55:c5:ba:1e:cf:b9:ad:1f:c8:ad:7e:7c:3c:00:
a9:6f:a9:7f:5b:3b:f1:9a:15:5f:db:a0:d9:f4:fe:00:47:cf:
98:f9:44:f1:4a:3b:c6:8a:51:1d:0f:86:88:96:75:bd:9a:32:
b0:85:15:ac:52:76:fa:cc:b0:52:2a:72:1e:d1:6a:cc:32:96:
1c:09:a4:0f:8b:18:eb:38:c1:fb:94:b6:a4:dc:8c:95:f6:07:
aa:ab:cb:37:1b:5f:54:57:0c:04:53:7c:13:d5:15:96:5d:9e:
96:22:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:17 2025 by rpki-client