Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa
File: 14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa (raw, json)
Hash identifier: gjJAsZp3wBqrZAlgmT/l16hlGevHKS/Au1GJKR8RFug=
Subject key identifier: 78:D2:D9:9C:64:61:11:78:FF:83:40:34:63:3F:06:06:DA:B7:E7:37
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285847FF4A49B775A4CFEA72A55640
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 21928
IP address blocks: 172.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:49:b7:75:a4:cf:ea:72:a5:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=fd613f65-4c3f-431d-af6d-1e1675edae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:dd:a0:f9:6b:03:95:20:66:61:c8:62:76:
dd:54:b4:a7:bd:22:4f:3a:52:ff:89:f9:17:6c:d9:
99:63:e6:c2:98:8a:6b:a5:a6:f7:f5:9a:b5:11:1d:
84:db:08:45:a9:2f:9e:c1:43:1d:df:b9:db:90:6d:
d2:64:c0:52:ae:bb:0b:03:7b:a1:19:c3:6a:d1:05:
8f:79:f2:e2:30:07:10:29:79:11:60:07:53:52:e6:
d1:e5:9a:ed:4d:69:66:77:f3:6b:4a:a0:b7:74:10:
e7:1f:8a:9c:b5:98:2c:8a:90:24:bf:99:1e:cb:69:
aa:3e:1c:57:f6:91:6d:69:43:a2:fd:4c:d1:3a:f8:
a0:b8:b9:77:1a:de:f0:5c:69:24:03:07:22:45:63:
ab:59:2a:24:ef:3b:5a:94:3f:52:a2:ed:67:73:f9:
b2:11:b4:3a:c8:d6:8b:a4:3f:34:4c:7d:f2:b3:d0:
f8:c5:22:1d:16:27:84:cd:9f:64:7d:9f:7e:a2:5e:
cc:8f:a0:02:ae:ee:b8:c7:74:b9:a7:f3:f8:76:e3:
26:e2:80:ac:7c:db:52:6a:b0:d8:a8:0d:f0:82:ab:
bf:12:b0:37:3b:d5:db:77:99:23:44:1a:08:2c:4e:
8b:74:03:35:0f:a7:60:34:6b:4e:62:9b:04:02:e3:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:D9:9C:64:61:11:78:FF:83:40:34:63:3F:06:06:DA:B7:E7:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:eb:7a:ad:bb:00:67:c1:d7:81:69:f8:4d:33:33:13:8e:db:
9f:28:88:3f:1c:90:c0:46:37:ec:72:3b:4f:25:47:56:aa:b0:
a8:d9:13:6c:48:aa:6c:71:3c:9c:b1:69:e0:28:25:ba:31:b4:
f6:32:9f:dd:6e:c2:c9:21:9d:da:08:87:27:b7:3e:4b:2a:42:
e4:c9:f0:b6:02:ba:2b:68:eb:c5:4a:81:67:4b:41:f4:7c:b1:
e0:18:1c:e5:33:8d:83:a6:ef:b7:36:c4:78:93:42:27:ad:40:
2d:af:a1:cf:99:2c:29:81:6a:5f:48:b5:3e:00:d8:40:82:7b:
c1:7b:17:3c:cd:dc:f7:9c:d4:1a:79:69:03:7f:17:92:3b:19:
c0:04:c2:a4:46:1b:1e:e4:be:2c:9b:99:3a:a2:c4:7d:78:de:
86:ef:f9:db:45:74:9a:38:b1:de:ce:9d:f5:f0:eb:a4:57:cb:
ad:6b:47:ce:3d:0d:3f:b1:c3:03:d6:74:12:32:ea:80:45:8a:
09:e9:61:74:53:19:2c:91:d0:3e:34:2c:fb:59:ac:e9:3f:a7:
62:66:7f:c7:c6:d4:aa:d0:a2:4d:cf:5d:cd:d4:91:fb:c7:ea:
e6:d0:3c:85:c6:6b:d0:bd:76:df:6a:23:b4:97:6e:73:b3:72:
d2:0d:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:28 2025 by rpki-client