Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed22d4be-b6c7-39d5-bdcc-83d5efc83d35.roa
File: ed22d4be-b6c7-39d5-bdcc-83d5efc83d35.roa (raw, json)
Hash identifier: +633+/DcBXASsROYC4Od36kxFPPJGpxhjkEeolX3Ea4=
Subject key identifier: A8:71:8F:82:3B:04:51:CD:68:01:3D:4A:5B:3C:3B:60:7C:91:4B:72
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF61709637536F860A4E6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed22d4be-b6c7-39d5-bdcc-83d5efc83d35.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6167
IP address blocks: 174.42.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:70:96:37:53:6f:86:0a:4e:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=8e8032d2-da14-4185-9fda-f80c35d051a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:38:5e:cd:00:e1:9b:3b:cf:d9:8e:2e:b8:
39:85:67:c7:77:cc:16:b2:f9:dd:a0:98:4b:28:39:
7b:9a:b5:12:21:2d:f1:bc:83:1b:40:be:71:11:cd:
f6:58:a0:b8:9e:9e:c6:e6:a8:11:9c:cd:8e:ff:29:
cf:ba:bc:fe:1a:1d:4d:1c:09:77:60:e9:84:29:ef:
53:d3:7e:48:d5:f7:9f:a5:cf:ca:be:6e:1d:c8:69:
1a:e3:e8:42:74:a8:87:b2:15:41:e2:1d:de:1b:bf:
e4:5d:10:49:67:84:da:c3:8f:2e:67:00:1f:15:92:
69:28:50:05:b9:71:53:c5:bf:99:9c:75:7c:45:fa:
2e:37:82:ad:ea:42:b9:04:5c:09:43:b4:e6:fa:bb:
19:91:c9:bb:42:14:98:39:29:07:f4:36:8b:3b:b4:
f3:ba:e3:74:0e:58:31:3d:71:a3:67:ca:07:d9:c8:
85:da:87:36:26:dd:c1:f4:e5:c9:6f:61:3b:e7:48:
95:eb:ca:1a:f9:70:f6:1f:89:d8:a4:8c:58:58:71:
d0:2b:4e:c9:b4:65:bf:80:62:44:6f:3f:1f:a8:ea:
09:af:17:d6:24:48:aa:41:e9:37:69:81:7e:ec:54:
64:39:34:f5:b9:62:fd:e3:b0:fc:02:a7:ba:b5:d9:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:8F:82:3B:04:51:CD:68:01:3D:4A:5B:3C:3B:60:7C:91:4B:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed22d4be-b6c7-39d5-bdcc-83d5efc83d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:96:1c:6c:50:8d:b2:12:7b:c0:b0:d0:0e:e6:49:22:c9:09:
93:73:d7:dd:73:b9:5f:de:bb:01:7b:b4:3c:be:df:94:b9:b5:
68:62:c0:e5:d2:bd:45:0f:3a:8f:82:45:53:89:f4:53:a2:00:
b7:a9:cf:fc:51:d6:f5:1c:80:42:6b:1a:7c:a0:b5:de:74:f0:
d5:40:37:0a:80:9b:ad:79:3a:87:34:76:cb:59:1c:12:58:59:
fc:5f:42:fe:77:47:f3:53:a1:87:88:24:41:4a:c2:5c:64:cd:
65:38:07:79:7e:75:b1:8e:f9:fb:20:3f:d9:51:cc:4d:13:21:
82:b4:e1:6d:7e:f5:d1:99:21:c2:5f:c5:73:80:0a:50:3c:44:
80:9a:84:6d:05:61:71:b1:3f:98:3e:f6:80:63:5c:e0:dd:84:
ec:cb:2f:b6:f9:66:70:7e:0d:c5:55:38:9c:97:f2:dd:3b:0f:
4f:16:15:36:b8:b2:82:bd:b1:c6:ab:0c:bb:a1:f1:51:a4:d5:
14:a3:bf:d6:a9:49:0d:4e:9a:23:5f:61:3f:47:78:38:3d:08:
b4:c1:46:61:83:63:68:7e:02:9b:7f:ac:1e:08:84:ee:78:fc:
a2:b0:ac:b9:ff:cd:74:d9:f2:c8:4b:70:34:62:9f:24:ec:8a:
8d:34:aa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:22 2025 by rpki-client