Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa
File: cf08f486-d545-3af7-8954-bbed4a161cdc.roa (raw, json)
Hash identifier: QEiFcvHE5IOkKuZbQsJI+W72vVm+Fx8OwJmqpIZPmeo=
Subject key identifier: 71:2F:23:D0:1A:52:D3:4F:60:02:FE:5B:5E:A9:69:6A:D3:0A:BC:61
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150EB138CA1C66A2A6BF300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.213.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:eb:13:8c:a1:c6:6a:2a:6b:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=565b200c-77f5-4df8-967e-a5b4d9466d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:7d:2e:c0:aa:b3:bb:c9:ab:10:dd:52:65:
69:b7:4e:c1:0d:e8:7d:4e:cf:8a:8e:a3:8a:db:0a:
87:93:93:2a:67:ca:a7:54:1c:be:ae:fd:c1:6d:a1:
9e:91:d1:1c:25:94:c2:fa:3c:e8:92:85:fc:1a:80:
66:19:59:a2:61:11:d8:6b:18:5e:d1:a2:f3:59:d2:
00:de:0c:05:d5:a1:6b:ec:9b:60:4d:e2:7b:3b:56:
eb:47:26:6e:8d:52:7e:51:31:8d:13:fe:0b:9e:54:
f4:8d:1d:24:cf:ad:d2:38:dd:97:75:c6:f8:b5:80:
d2:b7:6b:19:1c:95:de:92:2f:f5:88:09:20:da:76:
92:c1:a4:d4:9b:69:ef:f0:e4:53:4a:43:03:e3:63:
28:06:e2:71:12:76:ff:17:e3:a8:af:83:b9:98:90:
fd:3b:96:bf:01:ca:80:79:48:e7:a6:0c:38:27:f9:
bd:45:68:50:68:52:b3:e2:91:a9:bb:5b:fb:14:d5:
bf:5b:f5:59:ec:c4:3b:b2:6c:a4:c0:25:15:23:92:
00:f2:b7:44:49:2d:9f:7b:e0:14:42:62:7d:24:aa:
0f:21:d9:ce:59:c9:15:db:cd:35:62:c3:e5:1c:39:
28:e9:64:71:2b:a9:e9:12:40:e0:91:f5:6d:23:46:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:23:D0:1A:52:D3:4F:60:02:FE:5B:5E:A9:69:6A:D3:0A:BC:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.213.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f4:e1:63:2c:6c:0d:90:ce:06:ee:1d:12:ea:7b:a8:cd:84:
b3:9b:9f:91:7f:10:e7:40:14:8c:87:cd:d5:80:30:fe:47:d4:
18:da:ef:25:20:05:e8:34:c7:ea:7b:e1:9c:6f:89:24:c9:5e:
15:f9:6b:df:4b:b6:60:f2:33:05:6c:09:46:49:9a:71:c3:f8:
14:ca:93:61:b7:cb:d7:31:50:10:02:a4:fe:63:62:2f:8e:1e:
25:e8:dd:ae:99:d3:57:21:31:ca:91:39:c4:6b:80:a0:2b:ed:
f1:d2:db:27:5b:b3:0a:f7:1b:e3:a5:f1:b3:f0:c7:f4:52:e2:
96:59:d4:ec:74:af:18:fa:8f:af:1e:fe:f1:0a:bb:39:f5:ff:
90:d9:7e:4c:a4:90:e9:64:73:74:23:3c:f5:90:2b:cb:08:61:
a7:db:47:ad:2b:fe:68:f5:cf:ac:f5:e1:a8:08:74:4e:f1:65:
8b:38:54:f3:eb:0a:20:95:60:de:b1:3d:ef:ae:1e:e7:ab:13:
99:87:c6:d6:50:91:b3:c7:bd:fe:55:86:36:b3:d2:f3:17:90:
2a:f3:32:c8:e9:41:d7:fe:19:8f:41:a3:42:44:eb:d5:39:b1:
69:3e:38:b2:82:25:ce:1d:04:66:b7:b9:05:28:82:29:13:b4:
83:1e:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:37:36 2025 by rpki-client