Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa
File: b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa (raw, json)
Hash identifier: qkxcD2RuJ529OrmJ93qeF0MJ2eQvqwbRIf/PXwVPaUs=
Subject key identifier: 76:79:E0:AA:E5:77:DB:88:3C:B7:33:2D:CF:25:8A:1D:53:92:14:75
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF6177167676DABE28E50800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22394
IP address blocks: 174.41.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:77:16:76:76:da:be:28:e5:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e296c5bf-aa37-4c58-a21a-a21544bba0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:67:7d:73:8c:ee:86:ea:b1:3e:e4:41:81:
cf:9f:ae:6f:46:b3:34:df:ee:9e:a1:a6:91:61:29:
9d:0f:cb:ef:fa:42:fa:91:7d:5a:2f:e8:02:7c:e6:
3a:48:1a:2b:be:a4:7d:57:4c:89:59:2b:c6:d0:cb:
27:d3:69:10:8b:a5:88:ef:ef:c3:30:cf:e8:7e:55:
7f:ba:79:9f:61:f9:a3:83:13:fd:30:85:2b:f5:42:
b8:a3:97:81:29:9d:03:6e:96:3f:c6:5c:7b:91:94:
23:d4:64:ce:f7:f2:db:f1:2e:5f:9e:cf:37:66:5f:
7b:3b:dd:62:39:1f:4b:82:42:be:27:48:99:f5:14:
5e:3a:09:fd:a3:4d:47:53:60:48:5e:47:ee:11:69:
ab:e9:49:16:9e:a7:f8:3d:ec:13:b9:86:9e:1e:d8:
02:f5:57:7e:83:ea:c9:40:99:3f:fe:e5:dc:dc:f6:
93:bd:b8:3a:df:2c:fc:71:77:97:84:5a:6e:23:34:
83:f5:be:d9:d7:8d:01:17:87:9f:9e:cd:ed:5d:75:
ab:54:16:36:44:d9:e0:b1:de:cc:c3:2e:15:95:97:
3e:58:c8:28:ef:ca:b4:5e:2c:34:e5:ad:81:3a:f0:
d3:75:43:29:8a:1a:e3:89:4e:e1:d1:3f:42:79:45:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:E0:AA:E5:77:DB:88:3C:B7:33:2D:CF:25:8A:1D:53:92:14:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2bfb73a-2cf4-3d55-b6cb-6cfd1f2633b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:be:81:d8:2f:4b:02:4a:8b:84:2d:2b:20:d8:e9:f6:a1:ad:
bb:a5:6d:09:51:2d:8d:f1:24:b7:f0:53:08:4f:c2:49:b2:57:
73:e9:c7:78:81:95:46:95:70:85:de:f4:3a:b4:65:26:00:8b:
ca:d6:9a:e4:38:de:2c:fe:57:5d:9b:ab:33:ff:69:5d:45:3a:
7f:bd:df:67:3f:a1:ba:ee:5d:8c:ce:86:12:f2:70:ce:c4:72:
2f:fe:a2:9f:3f:79:c1:86:ea:a3:c1:a4:26:b6:f7:b4:80:7a:
29:11:51:ba:6d:95:a8:8f:4c:e3:c2:90:f0:a4:9e:13:43:0b:
82:e8:9b:76:7f:da:ae:eb:24:90:78:3a:f5:5d:85:68:94:5d:
b5:1a:34:fc:07:a6:a4:3c:34:16:86:1a:49:71:63:70:9a:c6:
21:4e:27:00:15:b5:23:8a:63:5b:55:9a:5a:f6:39:3c:43:05:
3b:b8:c9:82:61:1a:6e:f2:02:89:a7:a3:34:f2:7b:17:92:0d:
b6:4d:1e:ae:28:4f:ad:7e:48:68:57:ca:96:7d:5d:c7:4a:55:
f4:98:df:40:8e:8f:ea:8b:1b:11:8e:73:eb:68:df:07:58:4e:
cb:dd:da:97:f8:a6:12:3a:db:10:48:75:57:19:c1:32:71:9c:
dd:a7:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:33 2025 by rpki-client