Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa
File: 9c105563-24b0-38b3-a529-1a243ef05aa4.roa (raw, json)
Hash identifier: QtIyUBgHUL485JNbVyAGJ/mjxkoSe1Ezj1AfA3uOTk0=
Subject key identifier: ED:E8:65:B6:8F:10:BB:50:D4:BF:24:B4:AF:D4:0F:AC:66:5F:3A:D9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305A840937855D8C09BBF3B6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa
Signing time: Fri 13 Dec 2024 03:48:04 +0000
ROA not before: Fri 13 Dec 2024 03:48:04 +0000
ROA not after: Thu 13 Mar 2025 02:48:04 +0000
asID: 13335
IP address blocks: 173.245.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5a:84:09:37:85:5d:8c:09:bb:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:48:04 2024 GMT
Not After : Mar 13 02:48:04 2025 GMT
Subject: CN=29033ffe-4b40-4ffb-bb2c-a57d7d3c225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:8d:a6:01:e5:39:d9:9f:e3:49:7f:61:29:
0b:4f:11:7d:89:80:ca:a2:af:86:be:4c:bc:26:a0:
58:64:d7:b9:6f:aa:6e:b2:ac:61:20:48:04:39:34:
16:5e:06:47:e3:8c:43:45:1c:d2:4c:f8:51:3b:0c:
fd:1d:c5:2e:06:e7:00:a6:c8:37:50:10:10:50:84:
e8:84:2c:9f:37:62:c6:90:4c:ef:fa:9e:6e:c9:d2:
5b:03:66:1d:60:1d:b3:04:f2:c0:b7:6f:71:dd:dc:
0b:74:95:40:84:96:c1:b3:99:1e:72:7c:34:02:02:
83:b6:dd:65:b9:0a:f7:74:7a:0e:7e:0e:cf:99:62:
d9:e9:13:05:9e:57:ee:6c:cc:ac:16:65:01:12:09:
a6:71:f6:c9:08:1e:60:9a:49:e5:4b:1d:e0:94:01:
68:89:12:86:36:84:59:61:83:de:10:31:0f:46:b6:
f4:7c:46:ab:7e:28:86:06:c7:69:47:99:c3:76:1c:
36:ed:82:d3:07:d5:67:01:dd:72:3a:a6:d8:73:e9:
68:ab:8f:da:86:e2:4c:c3:0d:79:b9:d4:a8:bb:57:
53:43:d9:1e:9f:78:cd:25:c0:1c:32:55:8a:2e:66:
25:f7:65:e0:15:ae:24:c6:17:82:67:46:e9:08:02:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:65:B6:8F:10:BB:50:D4:BF:24:B4:AF:D4:0F:AC:66:5F:3A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c105563-24b0-38b3-a529-1a243ef05aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:26:a6:ab:3e:b5:fd:70:c7:6d:54:9e:42:da:b3:b7:17:d9:
06:f1:bb:5b:87:15:9a:d3:53:cb:d2:14:92:09:3c:1c:51:c0:
5c:e9:ee:80:78:a9:5a:bf:28:cb:2a:05:73:8e:1f:1d:03:53:
2c:4c:1c:3c:15:b3:d2:ca:40:82:82:f6:e7:25:97:d1:87:b2:
a5:98:23:85:fa:8d:5f:a9:6a:f7:b6:9d:d8:7d:12:fa:45:62:
80:60:f1:53:e4:31:75:30:58:75:1b:22:90:19:26:02:98:98:
55:a1:38:bc:ed:f1:ba:7e:6d:e3:ac:4a:23:7a:f3:f9:b1:1c:
25:2d:c8:35:a4:c4:f5:b2:ab:a8:48:af:ea:1d:83:ca:d1:37:
88:50:47:5f:64:b5:5c:90:de:73:45:74:4e:6d:35:e0:5f:05:
d2:45:d7:3c:13:8d:d6:ff:44:bf:6f:8a:86:e7:5f:20:0b:27:
57:fa:0c:5c:a4:4f:8d:2c:e0:4a:2e:47:59:7d:8e:c0:5f:e8:
2c:8e:f7:ef:1d:ff:40:5a:bb:48:06:66:41:03:09:38:ad:67:
bd:3e:a2:96:55:16:82:b2:0e:b1:19:43:63:8f:d8:bf:d0:8b:
c0:f5:5f:d5:b7:c5:0b:35:04:5b:41:40:ff:45:a8:13:5d:73:
70:8f:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:24:00 2025 by rpki-client