Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
File: 1f9591b0-4083-39f8-8942-3519df96e89a.roa (raw, json)
Hash identifier: MD0BbOjZD84EKSPzrezvSbM734u4wmEIoxM6HtqMC7o=
Subject key identifier: 73:DE:E3:C2:23:53:0F:B2:70:C0:7E:46:25:65:8F:DF:BF:FA:9D:04
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F43285848A2D86C8960496D1744C48FA0
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
Signing time: Thu 23 Jan 2025 04:03:54 +0000
ROA not before: Thu 23 Jan 2025 04:03:54 +0000
ROA not after: Wed 23 Apr 2025 03:03:54 +0000
asID: 30058
IP address blocks: 217.149.96.0/22 maxlen: 24
2602:fb1b:60::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:d8:6c:89:60:49:6d:17:44:c4:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 23 04:03:54 2025 GMT
Not After : Apr 23 03:03:54 2025 GMT
Subject: CN=85fc169b-2936-4e2c-b52b-9497f77f5e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:f5:e8:11:a5:a5:2b:b8:e9:df:d5:2f:5b:
bf:f3:ae:02:be:30:0c:cb:a2:27:40:a3:04:71:83:
c1:64:97:f7:b1:d3:59:72:32:b2:ec:81:1e:a3:6e:
e7:eb:1a:4b:0a:a2:59:88:87:01:0b:50:77:db:8b:
ab:5f:c5:0d:4f:d8:c8:c3:19:c1:3f:67:f6:83:18:
54:4d:f0:cc:9e:5f:58:ae:56:85:47:e7:65:5f:54:
3c:1d:fe:6e:7f:21:ea:40:99:0c:fa:43:05:50:56:
04:88:b5:12:14:b0:9b:23:ae:00:4b:3a:75:26:22:
71:95:4c:c5:6f:19:83:3a:2d:07:e5:df:26:8b:ae:
9b:fc:7d:7f:ee:98:ff:3c:fb:b7:fd:cb:e1:91:d3:
2f:4b:c2:ba:7f:3f:02:82:bf:df:c9:9d:69:79:0c:
07:51:00:11:07:1a:f8:f6:18:18:4a:55:e3:3f:dc:
ca:3e:64:05:db:48:4a:53:fa:66:4a:87:1d:55:97:
67:bc:5c:ba:31:88:7b:fe:d1:99:58:26:85:81:cf:
46:c3:7e:59:56:3f:3e:aa:6a:49:fc:00:c0:68:2c:
4e:40:d2:ad:18:12:ad:a2:1c:20:31:3a:4d:50:12:
94:d7:4e:e7:10:17:a6:3c:c5:f8:9c:23:89:b7:a0:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:E3:C2:23:53:0F:B2:70:C0:7E:46:25:65:8F:DF:BF:FA:9D:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/22
IPv6:
2602:fb1b:60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:e4:b3:d9:8a:6c:bb:23:31:fc:a9:c5:3a:23:f9:fb:59:89:
e5:38:ca:c8:08:38:da:93:57:7c:f5:4b:7c:d9:a4:90:ab:07:
bc:45:0d:1c:4f:73:9c:72:82:16:b4:d0:dc:b2:dc:09:7a:a7:
45:15:e9:ba:d0:5c:9d:27:b3:d4:91:b7:7f:06:56:5c:01:3a:
a6:5f:73:8e:f8:3c:c1:57:3b:c7:71:a2:ae:87:48:7a:1d:af:
aa:50:5c:37:d2:8b:05:bc:1e:48:4e:f9:fa:a2:21:6d:32:1d:
e2:d5:11:89:bc:6e:ec:e2:65:2e:b6:9f:d7:22:60:e2:0b:e4:
9d:be:56:38:c4:7f:d5:47:1e:ac:6e:7f:4d:d9:5d:e1:ff:01:
47:e3:3a:cd:19:20:06:36:b4:1e:d4:dd:95:47:9f:32:b7:5f:
85:e3:6d:d2:27:fe:9d:9f:d1:a0:b5:33:2f:b0:1e:5e:ad:b0:
8a:23:5c:87:e0:f0:5e:1a:23:25:cc:89:7d:96:d0:2b:ff:2a:
15:65:1d:be:ec:fc:cb:95:d4:c2:f7:a1:70:8d:4b:7d:1a:ec:
46:bd:c4:b2:0b:9b:5e:f1:1e:be:a1:0f:18:9c:b3:52:a5:77:
1c:a4:60:bd:47:d6:ca:f9:96:40:19:1d:64:f4:57:ee:0b:be:
00:b8:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:51 2025 by rpki-client