Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa
File: eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa (raw, json)
Hash identifier: wqraWnFScK2ZQlhaMtmzpi7Y0KiAdjGvOTeoEF4edcE=
Subject key identifier: 9D:52:F5:07:C6:32:D4:E7:37:CC:EA:2A:80:2E:3B:FC:2F:D2:03:1D
Certificate issuer: /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial: 010D0C9F43285848037B66F264909BB129C1F8C0
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 394080
IP address blocks: 172.110.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:66:f2:64:90:9b:b1:29:c1:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=511db09e-12d2-4415-8ef5-40d33fbbed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:11:d5:3a:d8:e6:c8:1b:4d:ef:20:43:3a:
b5:75:46:03:ab:d5:6b:cc:24:24:fb:a4:65:95:d5:
81:2f:c5:56:d8:af:db:8e:18:6f:91:91:96:43:37:
96:ca:60:92:fc:3a:ef:73:4a:39:8f:6b:11:36:bf:
c0:63:56:8a:5f:ed:c3:a1:75:d4:51:67:28:19:3c:
c3:e6:0c:d3:c8:35:bc:e5:90:56:3f:57:81:e7:c2:
af:0b:fc:15:8b:82:6a:48:f8:a1:ae:ef:00:f2:1a:
db:ee:e3:58:eb:f6:6c:ae:b9:04:ef:17:b6:84:10:
0d:20:b1:ca:1a:01:3e:2d:0b:69:d6:a3:50:67:88:
f0:96:8a:69:66:9c:85:a0:92:d6:ac:ea:bd:63:1d:
52:18:4a:53:ac:e1:67:56:76:4c:6c:2d:33:36:53:
b7:26:a1:34:bc:0d:75:8d:9c:b8:6c:6e:f8:41:cb:
e0:9c:00:7b:97:e1:ef:44:e0:12:61:2c:1e:84:d9:
4f:eb:48:81:49:19:ab:39:e5:77:eb:40:11:88:cc:
9d:8b:2e:75:88:d7:de:96:a9:ce:c1:72:17:37:f3:
40:dd:4d:4b:2a:08:17:9e:cd:73:8b:59:72:a1:2e:
2e:a7:1b:7e:06:da:f5:e8:ea:8a:5d:36:14:0e:cb:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:F5:07:C6:32:D4:E7:37:CC:EA:2A:80:2E:3B:FC:2F:D2:03:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
X509v3 Authority Key Identifier:
keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:33:46:f6:2d:cf:6b:e9:69:3f:a8:5d:13:98:40:67:8d:c2:
ee:8f:a3:a5:3d:01:b5:21:e6:2e:a9:37:31:bd:f3:7a:ce:b1:
41:5d:83:32:08:9c:dc:2c:89:7c:13:aa:21:f2:38:f9:e5:cd:
63:7e:82:aa:8e:db:84:c9:e3:e5:53:74:f3:e4:e4:09:ff:9d:
06:83:f6:91:a9:3c:ab:34:77:03:5a:41:68:a4:77:13:4c:6f:
83:db:0b:a8:29:00:24:53:ea:a0:3c:aa:fd:90:61:c7:7b:06:
42:99:69:c3:2f:0e:9f:71:1c:07:eb:f4:1f:42:f6:98:e5:7a:
73:0c:74:fc:c4:e2:10:9d:47:2c:c9:d9:0e:66:d8:e7:8e:fa:
f7:cf:23:76:fc:0f:aa:8b:82:50:d3:e5:a2:94:b1:5a:6b:bf:
26:f6:a3:99:eb:e3:b9:dd:f8:3f:a9:7f:cd:bd:d3:9a:09:7d:
0d:ca:d9:48:c8:3c:52:36:f1:52:7a:51:95:43:24:9a:8b:e6:
83:eb:e1:10:7a:bf:ac:b9:ec:8a:86:2a:0c:f0:7e:56:7d:6e:
39:22:50:f5:e1:9a:99:db:5a:4d:a4:5b:85:6e:61:fd:2f:84:
0f:15:0b:74:27:22:9b:98:d7:3c:b2:30:7c:38:1b:f4:d6:a8:
24:06:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:14:35 2025 by rpki-client