Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa
File: caca24ff-244e-3f40-b4e1-8a4214624d03.roa (raw, json)
Hash identifier: dqQ/YQRN6vUsBkSkc5xoJSjwzJMwTSSoZyWz0kRkbQI=
Subject key identifier: CC:8A:05:16:37:C3:5B:1C:95:17:7D:6E:59:E7:02:0E:FB:23:87:F0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150DF5B06B4C84CD562F180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.216.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:df:5b:06:b4:c8:4c:d5:62:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=483676e0-0979-48ce-ab68-cb00c92695a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:55:17:1d:88:45:8c:02:e2:be:2f:f8:d7:
82:02:bd:fe:e7:0f:14:c9:de:e6:71:57:f5:5d:69:
72:9e:a9:b7:be:ed:89:ca:e4:ce:30:4a:f0:c6:9b:
bb:b4:e4:13:20:93:b2:38:45:4d:ba:75:97:95:53:
f0:cf:d8:30:3c:76:33:99:d9:06:f2:e7:31:8e:fd:
67:b7:d6:cb:99:79:26:94:02:6f:3a:ab:68:9a:98:
e7:a9:a3:b4:38:33:4e:42:3d:4b:a0:8f:3d:ea:6a:
3a:86:6b:9e:1d:68:2a:42:0b:9e:7b:02:c1:7d:b8:
a9:e8:d8:a3:67:02:ac:bb:81:a0:9f:97:1b:7e:fc:
0f:8a:60:e9:0c:bb:ae:2b:65:86:e0:31:56:57:35:
c7:1d:6b:39:c0:1b:65:f0:8c:ac:cc:89:d8:21:73:
05:f7:d1:cc:2f:6e:5f:3f:00:61:e5:03:6d:cf:8c:
67:89:64:47:ed:a9:bc:e0:50:46:5c:67:2f:71:f4:
78:d1:43:a2:0d:86:df:07:76:86:a1:d0:60:18:76:
6d:c0:1f:e7:56:24:f3:a4:15:04:a1:a9:8d:ce:63:
9a:6d:2e:d1:b4:b9:d1:ca:8b:4d:d6:69:42:54:f9:
5a:e5:bb:f4:62:e5:36:31:7d:b0:7b:fe:a3:8e:b7:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:05:16:37:C3:5B:1C:95:17:7D:6E:59:E7:02:0E:FB:23:87:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.216.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a6:80:5a:ec:e9:3a:33:19:93:f5:c9:f4:71:92:6a:f5:90:
3f:16:81:65:3a:7b:35:c3:60:11:ae:3e:dd:16:ba:e2:75:d9:
0b:3e:d5:dc:d5:8d:8c:6b:6c:bd:44:27:e7:9a:17:f6:98:8a:
8e:c2:ee:91:f1:dd:8c:8c:45:19:66:34:cc:0c:b2:32:7e:fc:
d2:fd:29:91:66:5a:86:59:5a:f4:80:de:a4:0a:87:3a:eb:7c:
d9:d6:d7:6a:3f:cd:57:08:5e:b1:48:ce:f1:37:c0:fe:a1:7e:
a6:da:36:06:04:32:29:27:b6:3b:7d:9b:8c:17:2c:f0:77:8d:
45:35:a2:b7:ab:a5:6c:a8:47:b9:ec:e5:50:56:fe:cc:78:13:
15:d6:b5:3e:be:17:0b:e6:58:e6:4a:55:cb:42:13:66:a8:c0:
b2:26:ac:0e:1d:99:11:a6:5f:a0:63:fd:79:36:57:1d:e8:f7:
26:c9:fb:90:90:59:66:a3:12:77:a3:18:bb:5e:48:65:dc:3c:
cc:1d:de:88:db:f4:6f:0e:70:95:95:09:58:15:e7:98:e7:6c:
2f:b5:de:ca:68:c9:27:34:f8:47:0c:33:59:15:55:9b:88:90:
f5:30:06:36:90:44:0f:43:5c:e0:52:1d:e2:1b:a6:d1:c0:d6:
70:3a:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:20 2025 by rpki-client