Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa
File: 98f0c965-ca30-3304-820d-474d9767d316.roa (raw, json)
Hash identifier: 2LFcCVdozQS2cSSNpFX0PxFM9Em/6Ikm4J8BXkBlk9c=
Subject key identifier: 4E:1D:AA:95:07:78:86:18:22:83:87:30:5B:5A:DF:FA:F6:61:58:89
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF616FF3112957984C23C400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22394
IP address blocks: 174.41.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6f:f3:11:29:57:98:4c:23:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=1bb150ba-bc49-4d31-9be6-76710dcaa1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:d8:79:2c:3f:54:d8:f4:36:e8:2f:cd:61:
42:1d:d6:ce:54:f8:84:b2:86:8e:a2:1b:28:76:1a:
20:6f:90:93:79:3a:59:a7:e5:35:e8:db:32:31:8f:
2c:b9:0b:f3:d5:ab:11:a8:0f:56:77:29:07:fc:d6:
10:2a:15:36:40:81:4b:da:e6:0f:82:d7:d7:e2:bf:
a5:7f:a6:83:d8:94:5c:2d:7b:de:d3:fb:cc:b2:1f:
b0:6c:da:78:c0:fc:54:24:3f:ba:60:c7:a0:32:3b:
48:2f:40:02:d2:78:12:33:f2:7b:80:00:b1:62:b9:
29:60:3f:ea:13:fb:c2:7f:39:d9:8a:b3:80:f5:27:
e5:99:2b:10:a0:6f:3c:ec:b5:97:ac:ef:47:30:99:
ac:80:0e:3b:13:a2:ce:8b:84:f4:80:34:0f:3d:75:
cb:8c:47:5e:39:ad:60:9b:ec:9c:93:b3:ca:7a:59:
18:b8:ec:5d:4f:62:75:83:42:3c:cc:38:f1:ea:95:
52:75:c7:ee:6c:a4:9a:45:82:ad:fe:58:9a:ce:11:
5c:bb:ee:91:c5:72:12:d9:88:06:28:4b:e0:0a:e2:
d8:56:30:cf:1d:32:38:84:f1:12:31:ea:2b:93:c6:
4d:ac:80:01:c8:46:28:f2:4b:71:16:41:e8:e9:b1:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:AA:95:07:78:86:18:22:83:87:30:5B:5A:DF:FA:F6:61:58:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:0a:ad:22:89:28:d0:06:bd:58:75:7e:49:ef:19:8c:82:01:
78:06:bd:2c:9e:d3:05:a3:32:93:46:ab:c2:ed:64:d0:6f:b7:
2e:a8:ce:d1:87:ea:46:6c:be:c1:e0:d9:ca:d8:01:2e:ab:6f:
42:59:3c:8a:0d:85:6f:a7:3b:c1:10:da:8e:0e:49:29:14:ba:
30:4a:ca:96:96:df:1e:d1:d8:92:32:95:14:c8:b4:05:a0:38:
4a:76:d1:00:64:86:0d:60:8b:7f:95:87:f3:a7:35:7c:fb:20:
ce:b1:56:6b:8f:25:8d:33:23:e4:bc:cf:2c:c3:1b:d0:d1:01:
d9:40:7e:cc:8e:c0:65:ce:1f:6e:d2:24:c4:4c:3e:af:fd:b3:
36:f6:99:7b:5b:ac:bb:25:d9:50:7f:ef:1e:ed:d6:f4:90:5d:
7d:f1:8b:a6:47:0f:d4:8d:13:71:35:b7:d7:90:c7:1a:62:48:
d6:e0:29:1d:86:10:5b:1f:9b:62:33:2d:47:37:53:56:7e:d1:
7e:2d:e3:92:62:a2:e9:68:08:b5:6c:a3:4f:8d:3d:2c:36:3e:
0b:13:2d:8f:dd:34:c6:34:02:27:27:e2:72:de:0e:34:9b:e6:
5d:9c:0a:ac:d5:3f:3b:93:ec:16:f2:58:e1:6a:16:f4:67:11:
90:75:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:00 2025 by rpki-client