Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa
File: 10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa (raw, json)
Hash identifier: ky0LtTIcLQfAZ8wh2OPDlU/OxqcKBp3B0zB83iqyPAU=
Subject key identifier: DC:D4:CB:30:83:9E:40:F2:93:E7:81:3C:FF:69:13:0E:63:D1:91:96
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584800AF805468ECE7C5678B6280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 204670
IP address blocks: 168.143.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:80:54:68:ec:e7:c5:67:8b:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=3eeab527-9e01-46e8-8f88-b8fa558eecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e2:5c:0d:c3:10:68:ae:94:42:15:db:28:
19:fb:73:79:4f:4f:34:24:b4:dd:58:02:4c:28:a5:
3c:53:b5:8e:1b:46:67:c3:68:3b:e8:51:d0:09:31:
1d:aa:ad:a6:ed:2d:7c:84:a0:48:59:80:99:86:81:
c3:ce:9e:ea:a8:cf:5a:36:90:c9:54:f2:f8:a9:7a:
26:29:7c:f9:31:16:76:ad:ff:30:55:1c:1c:c0:6c:
ca:43:20:d7:00:51:4d:fa:83:86:b6:02:e6:5a:01:
67:b7:95:a8:52:2d:fd:e3:7f:34:d3:7a:6c:e4:9a:
b9:0e:3f:3c:b2:f8:06:9f:2c:14:d1:04:96:85:f4:
99:a8:29:e6:8f:35:21:a7:e5:55:29:aa:af:ea:79:
a7:be:96:1c:74:27:d3:9b:57:53:cd:13:15:9e:02:
dd:a1:14:f1:43:1a:99:c2:57:f1:26:89:a3:dd:ff:
87:b9:ad:4e:5e:74:4b:ff:f8:ac:d9:02:da:da:2b:
fb:ff:2d:5c:1f:68:81:67:a1:07:18:21:eb:25:56:
08:a7:93:46:09:2f:d4:f9:0e:b9:3d:87:b9:a3:f3:
d3:77:fe:cd:9a:74:62:e4:53:d3:4b:31:bf:30:d5:
69:1f:6b:78:97:78:7c:e2:1f:34:c1:e5:99:ea:e8:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:CB:30:83:9E:40:F2:93:E7:81:3C:FF:69:13:0E:63:D1:91:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
168.143.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fc:bb:82:06:53:a9:d1:98:9b:41:0a:ba:2c:32:5c:cb:b7:
4e:d2:07:14:2d:25:59:ef:6f:72:c5:5c:56:66:fa:d1:46:34:
45:ce:32:80:8b:60:34:59:0b:5c:4f:16:94:66:f1:42:68:6c:
ba:20:b9:14:18:5d:43:86:19:a0:91:cf:c1:2e:e7:8d:b5:d0:
cc:35:ea:06:45:db:ca:96:6e:3c:bd:b9:d2:e6:fc:ed:d3:a8:
b7:06:98:8b:8b:96:0f:ee:65:d3:37:5c:2f:57:fd:9d:fc:6f:
13:5f:5c:13:9c:63:c3:47:ce:aa:37:a4:22:b6:9b:19:f2:e2:
d6:71:84:42:0e:46:b9:91:e1:fb:f1:73:ce:4d:cd:4e:69:4b:
e2:40:11:0e:7c:e9:d9:5c:22:4b:53:f8:a3:b4:d7:73:64:37:
c1:ae:0f:5f:5a:dc:3d:6e:3e:62:64:a8:e9:80:b8:27:6a:88:
7f:7d:46:38:37:b6:68:3f:74:14:17:bf:00:a8:87:8f:d3:fe:
78:99:fc:f1:a5:b7:51:2c:b4:8f:c7:e9:44:fd:1c:0d:f3:16:
3d:df:74:86:95:ec:f5:2e:53:04:3a:0b:72:50:72:f5:93:d2:
5a:35:a2:a1:42:bd:5a:3f:32:57:3e:eb:d7:6c:9e:5d:9d:6e:
16:be:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:36 2025 by rpki-client