Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa
File: af80ab34-df48-35ad-907c-ab7e6260b68d.roa (raw, json)
Hash identifier: ZT0NTwE4qlRUg1jOAjeDgtegYXrS0aW9equX3nMv74Q=
Subject key identifier: 0A:3F:A3:82:98:8C:BB:C6:00:0A:FD:88:DD:F1:53:01:F1:86:2E:DF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E935F22396EE544E9BE4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.197.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e9:35:f2:23:96:ee:54:4e:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=08295ec4-f825-4758-85e9-70c14b544e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:3d:bf:b7:0c:0a:e7:0f:d9:ad:68:18:0e:
8b:51:ad:91:a8:7b:be:14:b5:86:af:45:7d:11:07:
1e:92:f0:b9:9d:06:ac:b0:80:e4:62:a6:a5:2d:38:
e6:b8:cb:9e:52:35:16:94:2e:20:2d:be:1e:4e:1f:
e0:df:80:30:83:31:1b:d5:af:f0:65:da:8d:6e:04:
73:8f:68:5b:a0:72:67:b5:bf:d5:04:38:6d:a4:7f:
1b:e1:7d:16:fd:31:4d:06:e6:e4:06:9d:1b:36:5a:
1e:c8:65:68:2c:fd:52:b1:75:e9:d5:8c:0e:11:f7:
5a:e3:82:41:41:a8:be:10:a4:42:a5:f8:e4:3f:29:
c0:0e:29:e8:57:08:ba:14:d2:21:c1:92:41:39:46:
6d:e1:89:e4:3b:3c:cc:2d:4e:aa:fa:a7:6e:10:16:
33:bb:9d:d6:15:96:f3:52:31:aa:07:44:34:41:b6:
e5:89:7f:98:d0:d2:5d:55:52:65:8d:91:3d:37:c1:
2c:92:e2:24:db:79:a2:8a:b5:70:a1:20:3a:78:42:
e3:fc:20:2d:52:70:e7:b0:ec:9b:38:ff:df:2c:28:
a7:99:70:1b:9a:30:5d:d1:34:af:5e:06:29:4f:db:
0c:b8:ff:ab:a3:e1:d8:e3:64:be:4d:a9:b4:b2:15:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:A3:82:98:8C:BB:C6:00:0A:FD:88:DD:F1:53:01:F1:86:2E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.197.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d5:2e:17:d4:3e:cd:a5:f4:93:bc:9a:e4:42:78:cd:19:91:
27:a7:74:29:12:0b:e0:65:39:a9:08:07:10:78:b2:15:2c:fd:
65:8f:5b:af:ed:c0:66:a3:55:62:30:87:b0:53:f2:ca:55:f0:
75:3c:ce:a7:da:57:de:07:11:72:6b:63:d0:fb:55:c8:3d:fb:
3b:24:70:c1:ca:14:0b:6b:09:dc:d6:90:ef:b6:a2:96:c8:75:
ad:30:50:56:e8:b5:f0:f2:45:8b:2e:45:28:3b:90:7b:21:fd:
65:81:71:c8:bb:08:58:18:0c:e8:ca:4d:ea:b4:c6:59:cd:fb:
a9:e6:6d:70:a4:b8:18:8f:dd:87:69:32:c0:69:fb:ae:8c:4a:
79:89:a8:e6:6f:1f:61:2a:41:20:06:b2:b8:b6:b8:96:09:c6:
c3:5f:5e:10:04:ce:2e:19:cd:65:98:d9:a9:c8:a8:44:c0:de:
31:7c:a1:19:a2:2a:e4:36:44:7c:5c:91:80:3f:40:17:29:29:
36:32:c6:11:82:71:5b:f0:83:93:1b:54:61:b6:50:c5:c1:7c:
f7:37:55:6b:35:63:8a:ec:9f:4e:df:60:b0:4d:03:78:bd:c0:
d2:2d:d7:d0:38:d7:fe:9e:8f:0b:9e:60:40:8f:37:86:d6:f1:
94:c6:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:52 2025 by rpki-client