Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa
File: a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa (raw, json)
Hash identifier: a+R+ylaD2AfrV+eBDtYVuFlhyN5cQlC1+kSZfOnVe8M=
Subject key identifier: 59:E2:AE:AA:F0:9A:ED:98:C4:B5:35:E1:23:0B:67:09:D0:94:8F:FF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E46282D4DCD467C92DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.220.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e4:62:82:d4:dc:d4:67:c9:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=c5a7402b-456b-4ef0-973b-4d17e7110fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:f3:76:b3:13:28:34:37:ea:30:06:d3:ed:
f7:8f:74:1e:10:21:58:70:8d:9c:49:16:9e:f2:e8:
c0:25:14:49:98:b5:e6:4f:9d:52:e3:be:af:19:be:
d1:6b:61:12:83:6b:bd:27:76:86:3d:9a:b6:68:e0:
7b:40:79:0c:ff:ac:74:9d:67:0c:15:ce:96:43:d5:
1f:c0:e6:ba:4d:60:56:21:0f:1d:2a:c0:13:d4:99:
79:4e:fb:01:20:fd:f5:a4:47:98:52:80:2f:2b:5f:
f7:e4:fc:75:e5:69:3c:51:8c:76:79:dc:8e:74:ec:
c2:8b:7c:91:91:ec:70:bd:d5:ce:07:52:0a:9b:b8:
04:0d:4c:cf:58:d0:a8:74:11:f4:1c:71:8e:92:53:
17:d1:27:98:fe:ae:9b:46:8c:75:52:fc:8e:84:3e:
7e:6b:9b:40:3f:05:67:33:db:77:5d:88:ac:68:d7:
6e:cc:85:5e:8b:44:45:c9:59:52:5c:49:11:9d:76:
76:31:d6:fa:2a:f3:49:58:b0:5b:c8:6f:e0:9a:9b:
41:b7:85:c9:c9:99:41:45:20:48:c3:be:0d:a7:af:
31:f5:b2:48:9e:87:88:8f:83:73:c1:fe:fc:a4:2c:
86:ff:95:b2:b1:d5:c8:72:d0:ca:7a:ac:08:34:03:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:AE:AA:F0:9A:ED:98:C4:B5:35:E1:23:0B:67:09:D0:94:8F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.220.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:4f:04:1d:a4:87:66:aa:cd:c0:cc:08:c4:3b:f9:c9:90:e3:
74:56:7d:c1:1b:f5:38:5f:1a:92:9d:b4:cf:0a:71:2b:3f:22:
19:00:1c:bc:84:85:bf:86:a2:68:a6:ea:cd:7a:0c:70:8f:9c:
8e:fa:6f:61:2f:79:14:9a:58:d5:92:d0:ce:13:b6:c7:23:c9:
44:42:a3:65:1a:c7:79:8f:41:a5:d1:f6:c9:66:de:a6:62:c1:
6f:05:43:50:90:98:b4:ed:6c:c2:24:96:5f:ef:f9:f9:14:3b:
49:3f:64:fe:60:73:d6:55:cc:0b:1f:e7:19:4e:b6:86:8d:e5:
b0:fb:8b:a2:fb:cf:43:c0:04:6e:7b:09:df:97:60:15:03:0c:
12:d9:76:1c:eb:80:9a:e0:f8:07:fb:7e:6f:2d:3f:f5:7a:87:
0a:be:a1:2e:de:3a:6b:b3:7f:c5:60:53:99:24:cc:d4:4e:c2:
26:a1:c0:de:6e:5d:81:f2:8c:17:57:67:ce:45:0f:3e:de:ec:
38:0e:5d:d0:77:18:58:e1:94:61:65:c0:cc:2c:96:09:70:95:
d2:40:e6:bf:42:4c:8b:f3:88:0f:05:a7:77:c8:8f:42:4c:0d:
dd:8f:37:65:18:9a:08:8a:b3:bd:3b:7a:e3:91:ad:54:2e:ec:
4c:87:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:54 2025 by rpki-client