Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa
File: 98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa (raw, json)
Hash identifier: 0FvyM0sgtzJWlXxhDD9/xNeVZC3K7wtyfPIX4hBwvN8=
Subject key identifier: 11:A0:85:33:52:62:11:1B:8D:9B:06:5E:AA:15:8C:4F:E4:3F:F3:B4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8667853054FA5C027C4F830
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.246.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:78:53:05:4f:a5:c0:27:c4:f8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=c4117e80-9460-41cc-b284-dc71d3ecc57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:a3:7e:a3:3e:eb:96:e9:81:c9:0c:f5:91:
0f:92:2d:a6:a3:ff:0e:99:66:6f:5b:8d:2d:08:39:
9d:96:60:0f:4d:f5:6b:29:7b:d3:67:c1:4c:96:0a:
1d:dc:24:fc:74:fb:7d:d3:a6:a0:0f:31:05:f5:ec:
e6:3b:c5:66:76:53:86:5e:19:18:85:f5:9f:d1:92:
f0:0e:72:fe:6d:a6:77:56:76:84:d5:b1:02:3a:48:
90:2b:6a:7d:78:0d:eb:0b:d4:35:5f:f1:2a:e0:2b:
51:24:85:a6:9d:e3:4c:c4:48:c8:91:7a:ac:4e:2d:
23:e8:3a:45:35:42:97:ac:1e:b4:66:60:05:7c:d9:
64:9b:26:d5:42:b1:81:b5:14:a2:8e:76:a2:df:38:
66:f1:9d:01:03:71:9f:a0:24:6c:c8:3d:dc:8e:2c:
be:1e:e7:12:7a:04:f5:b9:bc:df:1a:aa:2a:2c:28:
e6:c3:a9:67:da:9e:79:70:7e:5a:f2:ae:70:86:11:
26:b0:c1:92:40:01:2a:c9:96:45:8e:7e:6f:d9:21:
cf:d9:10:70:3f:61:25:d6:98:49:da:25:5a:57:e3:
d9:47:21:a6:3e:50:3c:70:ba:71:ff:c1:91:b8:9f:
62:b7:c6:ef:52:a1:0c:6b:99:b1:7d:b7:5d:95:52:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:85:33:52:62:11:1B:8D:9B:06:5E:AA:15:8C:4F:E4:3F:F3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.246.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e3:8b:42:71:c9:50:2a:c6:1b:12:db:8d:69:86:4a:e2:1d:
c6:19:b1:93:e8:2b:92:75:90:c6:b1:af:05:26:b8:c1:db:ae:
f9:61:4e:f6:fa:6c:ac:03:70:0b:ba:e1:95:43:4f:01:de:ab:
95:83:67:d4:23:d0:77:8e:b1:d4:63:98:46:3b:06:e0:61:43:
2e:49:cb:e2:5b:97:1d:39:e8:1e:3c:4b:80:c2:cc:8a:07:1e:
46:0b:d7:bc:b1:4a:75:c7:26:91:96:85:78:1b:f5:cb:8d:6e:
e5:ab:61:a5:29:42:df:ed:86:a2:e8:71:46:6d:ab:f4:a2:37:
6d:d7:cf:cb:33:76:91:d3:d6:bd:63:cb:94:9d:d5:38:5f:55:
de:5a:d7:26:e5:e4:25:f5:f3:fd:a8:ec:7f:62:9a:0d:b1:5a:
60:2d:ef:00:e0:14:6e:c7:12:20:a6:1e:c6:1b:19:c7:14:35:
c5:da:7c:55:3b:71:81:65:5a:b1:26:9f:c5:6e:c4:5b:86:de:
94:a8:48:3b:12:fd:e0:c9:2f:ac:39:82:c9:31:49:d1:d6:89:
c2:06:49:13:b0:e1:01:94:7d:0f:44:ab:d9:3e:e7:90:1e:4f:
c2:24:79:e0:b3:52:3b:72:a7:a0:8c:6f:0f:e6:ae:ab:51:34:
55:d9:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:07 2025 by rpki-client