Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
File: a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json)
Hash identifier: GdeKiHu6T7ePz4NDJAV/OVRPK8PV0yzsdgVvpI6SdRY=
Subject key identifier: 40:12:47:9E:8C:A6:A6:CB:D6:A7:EC:74:EB:F0:20:E5:9F:46:72:52
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F4328584861005849076E1B529CB84400
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 134450
IP address blocks: 172.84.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:58:49:07:6e:1b:52:9c:b8:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=24e77294-c8ab-46af-9f44-8a9c129b79ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:bf:f0:5f:7c:2f:10:78:ca:3f:13:20:f1:
9d:b5:18:83:fe:88:70:bd:1c:3b:fe:a9:52:cd:8c:
3b:92:fd:b6:76:cd:5a:94:98:1a:ab:bd:fd:65:f1:
a4:18:aa:ed:c9:69:da:39:44:54:8c:a7:49:18:40:
b8:06:7d:d0:90:da:2c:72:34:76:99:7b:a5:c7:26:
f8:08:d2:f8:a3:2c:51:ad:63:82:01:7a:56:78:92:
0e:0c:2b:ca:ed:27:b4:50:f1:95:5e:a6:12:f3:95:
13:1e:db:95:f2:25:c0:89:2e:a9:2f:2a:d9:d9:9b:
59:3b:a7:43:35:00:3b:4d:82:e4:ba:8e:8a:d0:75:
cf:19:bf:03:2c:ca:ee:22:e2:d9:61:db:ce:ff:3b:
f2:f1:4e:b5:92:b1:d1:14:98:4f:36:81:01:8b:79:
30:dd:15:0a:5b:fa:15:75:39:bc:2d:05:f5:34:a6:
d6:15:17:58:ac:06:cc:ca:b4:ac:63:4d:74:d7:cd:
65:af:af:e0:31:20:9b:c2:46:90:05:14:a5:2f:5f:
e0:dc:a7:a2:83:49:86:85:d8:c2:90:60:e9:e2:02:
08:11:2d:2f:8e:e1:04:65:9d:c3:4c:22:8a:f0:97:
64:ca:b9:49:bb:ad:e3:6c:5b:dd:10:13:fb:fa:c8:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:47:9E:8C:A6:A6:CB:D6:A7:EC:74:EB:F0:20:E5:9F:46:72:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:d4:7e:22:46:9c:c9:50:71:fd:ad:52:0f:eb:bf:74:2c:2d:
27:ae:c4:8f:7d:3d:b6:01:21:be:d0:10:09:33:16:73:b1:5c:
39:7e:9c:ff:be:76:02:53:64:56:fd:00:df:3c:b6:7f:92:74:
12:55:40:47:6c:91:c7:97:9a:e2:49:ff:6a:8e:e6:a8:3c:21:
1e:c1:8a:da:8d:e6:93:83:60:48:a4:9d:77:e9:90:b6:b9:7f:
a7:fa:36:7f:c2:45:68:f6:31:12:4d:94:46:9e:15:44:92:15:
5c:10:4f:67:99:6d:d0:b7:37:b4:83:7d:22:06:39:19:ca:6a:
33:d5:21:76:d6:f1:ce:37:9f:75:dd:18:0f:c7:29:ef:2e:d3:
b4:a8:a9:47:78:4a:a9:79:99:71:6c:47:5c:1f:94:b7:79:c7:
5b:1e:94:6d:60:23:8a:2a:47:5d:39:4f:75:be:d9:c4:09:bc:
c4:ca:51:aa:e5:2b:9a:61:b6:fc:d7:ae:9f:4c:ba:e6:bd:7d:
17:59:c6:d8:6b:41:1d:65:a4:f1:22:94:de:53:8f:e0:41:b0:
74:f8:46:9b:43:3d:39:08:96:13:47:8c:41:fd:d0:16:38:f1:
ef:34:94:d6:93:3a:90:81:63:0f:0c:e4:d2:ae:40:a2:a2:c0:
f9:40:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:19 2025 by rpki-client