Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa
File: 9ab8d270-0c72-3198-8425-52e59a633f3c.roa (raw, json)
Hash identifier: JMFHNKwJh/SRg1Q0X/pY2G2QdMI2SZhJeQG5tFGK/ho=
Subject key identifier: 20:AD:7E:B0:CB:29:CE:02:84:91:AF:CD:8D:D6:22:65:08:6A:F3:4E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E3551E02E991D4A66600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.219.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e3:55:1e:02:e9:91:d4:a6:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=96206c4c-f65b-4a18-b12f-6223be55a917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:c4:59:4e:e0:7f:65:8f:7a:76:d5:6b:39:
be:ce:67:a8:db:fb:d7:87:b6:1c:3d:4b:a8:f0:3d:
24:c2:7a:8b:f9:bc:ff:6f:0a:5b:e3:12:6b:d9:80:
94:3b:59:1d:58:09:ee:39:ce:3d:ed:03:27:ac:5b:
73:ea:b6:f0:f2:97:d0:c2:b5:96:9e:50:de:94:24:
5d:2b:32:d5:bb:1b:bd:71:c9:da:f7:1c:37:8c:6c:
1f:94:d1:25:42:83:96:d7:a1:4f:f2:64:ba:de:de:
72:e7:6f:e6:e4:32:b4:aa:26:19:63:3b:27:57:85:
cb:88:6d:63:b0:71:78:3c:97:6b:76:48:1b:5e:0a:
0a:c7:2b:f0:25:45:73:bc:81:f8:a0:b3:d4:aa:d5:
9a:10:68:52:bc:72:c1:6b:c6:fc:44:f4:aa:4e:04:
9d:91:9f:50:86:a3:20:e7:ea:15:bc:79:12:b8:9b:
4a:b9:6d:f4:11:49:2e:a2:e0:13:c1:75:26:ad:d8:
22:44:3a:48:24:d4:cd:4b:4a:9f:f0:47:fe:19:ef:
d9:7a:8b:d6:a7:ab:cc:ea:a8:1a:22:56:67:70:95:
9c:06:18:d1:fe:51:13:44:db:30:6d:eb:0a:4d:24:
b9:98:d7:6e:23:9e:a7:bd:bf:13:25:f8:9b:95:96:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:7E:B0:CB:29:CE:02:84:91:AF:CD:8D:D6:22:65:08:6A:F3:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d3:bb:f2:9a:b5:0d:80:7f:48:bb:2d:77:9c:a2:47:32:59:
7d:dd:2d:3d:e0:5c:e8:bd:7c:47:bb:02:a7:1f:df:2a:33:6a:
12:e7:40:9c:fa:65:92:3e:64:2a:ab:52:88:97:73:66:1a:e3:
a5:eb:a9:32:0a:95:bf:6b:5f:e3:97:c1:40:1c:f1:d5:c6:b2:
2b:5e:25:fe:c4:4e:b3:3b:78:9e:e5:f6:cd:ce:30:37:fd:02:
4d:6c:cb:b7:8a:bd:73:cf:81:11:0c:5d:e9:52:66:a9:4d:3e:
f5:41:c8:06:7c:3e:59:bb:5b:c7:c1:da:92:92:bc:2e:d5:6e:
94:2f:86:06:4f:e8:ff:b7:41:70:31:62:0d:1b:b3:88:80:2f:
b1:2e:5b:f0:9c:31:8d:ee:4a:10:4e:17:e8:83:15:f7:26:50:
a2:f6:26:f8:de:9a:e4:83:2c:16:8c:3c:06:9f:ee:f7:99:d8:
5a:c4:ee:11:aa:16:4c:e0:e3:77:23:6d:78:cd:79:c8:8f:ff:
1c:34:7a:eb:41:3d:51:3a:3b:18:ca:0b:dd:65:a3:8e:84:fb:
24:73:bc:f5:aa:ee:81:d5:9b:07:e7:92:d9:2a:9f:ee:13:c3:
3a:0a:62:f5:83:14:4b:58:62:51:ef:f6:56:a1:92:fc:99:90:
30:f8:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:40:02 2025 by rpki-client