Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa
File: a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa (raw, json)
Hash identifier: yI+2YNnlJyFcYauXtPEpScLy5arjbHaxZ7mmWRkNnpU=
Subject key identifier: 5A:82:39:8D:DC:16:15:1F:49:5C:96:06:24:81:82:96:D0:B6:59:E6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848E8666FC7A69FBFD777A034C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 174.233.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:6f:c7:a6:9f:bf:d7:77:a0:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=78f570fa-40a1-43ac-ade1-26d6f2c55f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:6b:af:bb:37:81:f3:4a:1b:1b:58:eb:44:
0e:6a:04:52:e2:b2:97:c8:e1:1c:7c:57:c8:36:ba:
a9:1b:09:82:10:5f:e3:20:37:8d:50:12:a6:de:b4:
54:08:de:90:68:f2:bf:1b:cc:b2:92:6f:be:dc:de:
f6:4a:c8:04:b5:da:85:57:60:44:85:9a:44:d2:51:
d6:04:2b:ca:00:94:84:56:1f:3a:0e:9d:74:c2:01:
fc:55:82:bc:a1:c5:84:1d:bd:59:6a:8a:3b:94:5d:
6b:03:39:78:cd:9e:e7:34:c8:92:63:d7:30:ec:94:
c7:30:4a:27:94:70:3f:c6:a0:2a:b2:bf:1b:ec:08:
39:96:4c:7d:47:03:93:4a:1e:57:fb:dd:0c:44:89:
a3:01:70:d3:a6:23:15:fc:da:92:b2:a0:47:44:8d:
c3:00:20:c3:27:a2:1b:10:2b:69:bf:11:e4:dd:f8:
be:16:42:f7:f5:6d:82:8b:ab:68:5b:80:2c:5d:9b:
10:7d:ec:68:ef:f6:d9:07:ef:2c:d6:38:7e:79:ea:
fe:9f:5d:90:a8:07:90:a9:38:c0:29:27:7c:65:41:
57:fc:db:c7:99:4c:50:56:5d:16:a5:dc:7b:41:3a:
75:03:53:72:0b:58:48:ef:10:55:d1:d6:76:7b:f9:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:39:8D:DC:16:15:1F:49:5C:96:06:24:81:82:96:D0:B6:59:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.233.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d0:e7:58:f5:69:fa:82:83:4f:45:29:40:62:4e:66:d6:4f:
9d:dd:66:f2:92:04:e3:59:fd:5e:fd:b1:0b:5c:52:9f:3c:02:
f2:cf:bd:9c:9f:d8:98:49:60:3e:cb:0f:b5:d8:48:26:d3:10:
b2:a3:0d:5a:51:cf:6a:1b:6d:ba:29:e7:4e:1a:6c:a0:9e:5f:
e8:57:ed:82:2a:f8:98:18:98:f9:46:0b:92:fb:22:db:43:30:
cb:2b:fe:8b:3d:99:89:90:47:20:75:35:ab:81:08:63:9c:6f:
63:be:93:87:08:3a:6d:4b:c6:a6:dd:31:11:dc:04:8b:ac:d9:
ac:8c:01:d0:e7:c7:74:10:04:84:b8:25:a2:c2:c6:44:9b:a0:
94:89:1e:a6:b7:72:f0:74:89:eb:63:83:cb:3a:97:0f:b4:ea:
3b:13:1a:27:83:5d:d8:44:6e:8b:86:a1:e2:a7:14:d1:fd:e8:
73:1d:4b:3c:b3:d7:75:a0:46:27:c1:66:4b:10:b3:c0:c8:64:
d4:50:ae:55:e7:06:56:1b:82:e0:61:f3:4a:24:ce:d9:f5:a2:
ee:a9:9f:6d:4a:fb:65:14:77:c0:0c:ac:1f:c7:d6:9c:2b:7e:
5d:4f:ea:ef:d2:50:ed:6d:ab:88:5f:3f:4e:cf:74:2a:d5:78:
d0:e5:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:45:59 2025 by rpki-client