Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc3359f-0595-3732-b3a3-3947a35d19ce.roa
File: dbc3359f-0595-3732-b3a3-3947a35d19ce.roa (raw, json)
Hash identifier: sqKZ7BRPPXLL626BTyXiH4mjBt7l+3QXvjDQRFoqlAw=
Subject key identifier: 43:51:D4:7C:EF:26:1F:00:00:5F:54:CC:66:15:21:78:A9:C9:CA:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150E00431B5F51D4974AE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc3359f-0595-3732-b3a3-3947a35d19ce.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.218.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:e0:04:31:b5:f5:1d:49:74:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=f4bcae17-d268-487f-b823-e1a4e4cee5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:a9:c3:43:cd:d8:1f:16:d5:7b:cc:75:2a:
1b:8b:cf:a7:1a:68:a2:5d:aa:5e:60:03:82:ca:22:
d2:63:88:8c:fc:63:ff:a2:cc:85:67:49:e6:bc:9e:
1a:6a:b3:7c:b7:5d:04:9d:1a:e3:4e:fc:e0:98:01:
81:e0:02:fe:84:81:b9:37:63:e2:ac:97:21:b4:c6:
9e:75:81:cd:4a:ee:2c:db:66:63:2f:fc:51:b4:5a:
f4:25:86:9b:84:77:24:61:bb:3a:e8:5f:10:55:af:
40:d1:cd:cd:b1:43:13:0e:9c:27:2c:dd:4f:f9:c1:
c6:de:68:fa:e1:64:bf:93:cf:3f:10:8e:36:76:bd:
75:18:93:88:cf:f2:1f:59:76:e4:a1:f1:64:54:a5:
66:83:c2:c8:a4:06:e1:a9:ff:5a:b2:81:9b:4e:b6:
07:5a:bc:79:3a:2a:9e:2c:e6:42:23:03:51:98:63:
cb:77:3a:ff:1b:b3:0d:f2:dc:3a:de:96:ed:ed:95:
94:45:94:3d:6f:a1:da:a3:39:6f:e7:4f:85:54:93:
b1:a1:7c:ff:24:8f:50:73:2b:d2:ca:14:50:f1:2f:
6a:5f:7d:a4:d4:be:c5:17:0e:0a:e6:7d:11:db:7f:
a4:ba:7c:3d:3b:ab:e2:10:a6:39:1f:f1:64:42:96:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:D4:7C:EF:26:1F:00:00:5F:54:CC:66:15:21:78:A9:C9:CA:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbc3359f-0595-3732-b3a3-3947a35d19ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.218.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:87:73:2d:be:4f:fc:56:96:1b:c7:ac:ec:fa:b1:74:c0:b1:
6f:7e:75:bd:fc:e0:d9:d3:6c:1e:de:f8:38:57:d6:12:97:be:
04:ef:34:9e:15:8b:93:ca:53:45:77:75:a3:14:62:41:42:5c:
5f:ac:08:85:c1:b6:2f:98:f0:44:95:17:a6:7f:f7:83:6a:22:
d4:37:ec:ea:16:62:b4:0a:1b:58:14:ca:43:08:f6:26:50:b0:
30:34:0f:f8:56:41:36:26:63:e8:d1:37:2a:e7:ab:6e:b2:b2:
be:31:74:56:f4:ac:b8:36:fd:88:bc:ab:69:d3:d9:b5:2d:a2:
ef:6a:4f:5e:89:41:21:57:3d:e2:24:e5:68:d1:1a:35:2b:33:
ad:2d:0b:fa:cc:d5:c5:29:d4:03:d5:18:36:a1:0a:58:c0:a7:
e1:fd:73:2e:c4:a4:16:1a:36:dc:6e:73:1c:77:50:b7:23:55:
19:e6:21:35:9b:8c:17:aa:c8:31:1e:15:3f:c4:62:7f:74:2c:
34:7c:6f:91:98:6e:ae:ca:f6:69:a8:10:06:ae:a7:1c:1e:9f:
bc:48:40:e8:73:f2:cb:24:c9:61:f5:68:24:d8:6d:3d:ec:60:
67:cc:fd:b8:70:55:7b:2a:f0:93:00:cc:39:d1:17:bb:bd:a7:
8f:2f:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:03 2025 by rpki-client