Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
File: f75bf140-96bb-39c6-9751-302d7120307b.roa (raw, json)
Hash identifier: FCKlZ9yJw5nhN15PvZy4qCZv5RyhqSLpIU7NUT6xoOk=
Subject key identifier: 91:C7:37:EE:1E:86:34:C9:14:10:3C:92:76:81:E1:A3:00:8C:89:BB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150EB4E1C6183B9C670DEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.213.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:eb:4e:1c:61:83:b9:c6:70:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=1709bd6a-0432-465e-ac54-8dbe0f8a0ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:7b:37:63:84:da:96:76:56:ac:eb:db:4f:
48:3b:74:22:13:93:14:b7:8b:60:82:36:f9:fb:9d:
3c:92:60:f8:f6:4e:fe:f7:41:f7:16:75:74:03:d8:
c5:a8:81:7f:f2:08:37:44:79:f2:a0:8a:b6:cd:e1:
93:e6:71:3a:21:67:3d:5a:a4:db:08:61:39:29:95:
97:38:82:be:22:2f:15:0c:b9:9c:c6:24:2d:7f:84:
76:08:89:de:b7:55:b5:f7:a3:08:29:65:e4:51:72:
29:af:94:c8:ff:7c:0a:e5:66:93:93:e4:08:7b:65:
4b:aa:e7:3f:13:9d:56:f4:dd:ef:a8:96:5b:d8:53:
10:e0:c3:48:78:8a:45:67:e8:24:3b:b3:95:48:76:
27:9d:1c:70:83:92:70:08:10:b5:a3:2c:6d:fc:ff:
be:a4:09:54:5a:98:97:fe:76:f8:c4:48:28:1b:cc:
86:38:f2:da:1e:75:76:03:62:1d:85:80:77:6b:4b:
90:e3:db:0a:9e:e0:1d:bc:b8:72:b2:3f:3b:59:94:
80:ae:cc:a5:02:5c:1e:0f:cf:37:f3:3e:a8:18:03:
97:59:2d:26:fa:b6:85:32:4f:95:67:72:c3:c4:92:
58:38:30:ec:7e:b1:cb:88:eb:86:79:40:d0:bc:38:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:37:EE:1E:86:34:C9:14:10:3C:92:76:81:E1:A3:00:8C:89:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.213.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ea:14:47:f0:d3:ee:d2:0a:08:ae:b9:87:8b:8a:87:a0:60:
1b:88:81:2e:49:00:2f:be:53:43:13:fa:3c:50:e0:80:6a:2a:
a9:be:ff:e4:10:b8:a4:d8:dc:e5:5d:6f:b9:ce:2b:17:1c:b2:
e7:f3:67:ed:5a:99:21:11:37:a4:82:4b:28:91:e0:0c:f2:de:
09:de:b9:8f:13:ad:83:f4:e5:31:d2:62:35:27:94:76:07:20:
e9:1b:32:7c:9f:f4:42:56:ac:5d:da:3e:67:11:36:8d:b2:c3:
fb:db:43:e4:9f:39:fa:0d:6f:7f:65:ef:d3:a1:9c:ec:c7:1d:
bf:5d:87:e0:c9:2c:bd:9c:72:70:63:7d:ee:5f:e0:d4:00:b5:
47:b8:c6:99:d2:b9:5d:1e:f1:9e:84:3c:96:28:b3:3a:7a:0b:
99:8f:70:54:7e:e4:8d:d8:17:cc:41:d6:81:33:80:7c:97:8c:
95:4d:df:68:d8:b3:e8:e8:8b:5f:2a:ac:c7:5b:0b:57:39:f1:
2e:fa:57:77:22:75:78:6f:e7:a5:b4:d1:1e:7a:20:54:f1:2f:
02:ed:22:e7:ef:e4:e6:94:85:2b:ea:aa:92:0e:8b:08:e3:68:
3f:ff:cf:e0:b8:d8:97:b9:4c:b6:f8:c4:e6:b5:1b:b8:0b:2c:
a9:7c:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:04:15 2025 by rpki-client