Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
File: df77201a-b7c3-33da-a03d-039105f79e13.roa (raw, json)
Hash identifier: 6bUhY05vOq/0BiY8389TLwjIkuvrYmSY32SM7Jc1Ayg=
Subject key identifier: AB:BB:D1:CD:BE:81:A0:9F:D2:E0:C7:97:F6:ED:46:C6:0C:46:67:19
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305A47A400C882ABA35B4700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
Signing time: Fri 13 Dec 2024 03:47:35 +0000
ROA not before: Fri 13 Dec 2024 03:47:35 +0000
ROA not after: Thu 13 Mar 2025 02:47:35 +0000
asID: 13335
IP address blocks: 173.245.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5a:47:a4:00:c8:82:ab:a3:5b:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:47:35 2024 GMT
Not After : Mar 13 02:47:35 2025 GMT
Subject: CN=361467ed-5f2c-48bb-b9d3-33c3bbd00716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:e5:c2:0c:61:b3:a3:4a:4d:a5:fe:9e:d7:
59:63:50:45:be:4d:b3:43:47:8e:58:43:e5:96:89:
3b:0a:f9:83:fb:26:e8:3e:22:9e:44:d6:c5:89:ee:
31:de:33:ca:87:33:58:20:e2:15:6d:8a:10:b6:9b:
96:ad:14:3f:7e:c6:22:66:5c:11:ab:14:7d:2c:27:
cc:0d:26:bf:1e:9b:1f:31:d0:ce:9e:37:5b:1e:9d:
8a:f4:2f:35:ed:3a:71:0f:0d:9e:42:f1:f4:2e:26:
49:36:ba:2a:08:75:84:fe:ad:76:e5:36:f5:76:62:
2c:9d:21:03:81:0e:2f:9b:b4:eb:cd:bf:da:cb:b1:
d1:ac:62:56:6c:f7:a3:f9:09:51:93:7f:6e:ce:69:
d9:ed:12:09:a3:d8:93:f4:d3:bb:61:4c:b3:41:04:
0d:61:03:07:9f:50:8a:0b:eb:51:e5:11:b9:9b:36:
c9:e8:ff:b2:f4:90:25:09:15:4f:71:ba:81:25:60:
cb:09:e7:ce:cb:3d:c0:04:cd:a7:9b:d5:87:7a:52:
f0:47:ed:d7:2f:a5:3b:14:11:1d:1f:ec:08:a2:90:
4b:ad:9c:94:42:20:cc:25:5e:f3:4e:21:05:42:ee:
6b:26:b0:a2:d7:a4:2f:df:8e:0d:4a:44:a5:65:ae:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:D1:CD:BE:81:A0:9F:D2:E0:C7:97:F6:ED:46:C6:0C:46:67:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df77201a-b7c3-33da-a03d-039105f79e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:93:78:c8:1b:d8:0d:a2:2d:48:85:65:6b:db:a2:35:de:ed:
1e:cc:93:29:30:53:37:36:c9:7d:ed:8b:d6:21:e1:46:5b:b6:
5d:61:a5:7b:44:da:ea:31:c8:b0:2e:20:87:4f:98:0e:aa:73:
fc:34:32:10:43:93:bc:5c:fe:75:31:00:dc:ef:5b:2f:78:e1:
cd:d1:ac:44:cd:5e:5c:8b:46:9f:2f:da:7c:ef:d7:b3:5a:d4:
a8:f0:72:57:8d:82:12:88:4e:c0:25:78:08:57:1e:f6:90:99:
5c:c6:a5:29:4e:f6:29:ca:a7:22:c5:ad:b5:6b:58:3c:01:7f:
14:4a:3c:88:6c:2b:18:76:fe:80:11:5e:c0:69:42:f1:d1:de:
78:1d:76:2e:7e:af:64:5e:9d:12:f7:88:5c:31:f2:53:39:9f:
44:01:e0:f4:81:d2:10:a8:ba:bb:21:c7:5d:bb:46:fc:ec:9d:
15:ce:1f:24:33:d4:ec:ca:25:6c:35:83:b9:17:25:7b:06:c9:
e4:c8:11:23:c1:bb:b9:0e:58:ab:bc:7b:09:9a:b7:4b:ea:ee:
a6:64:0c:b4:80:40:f7:54:fd:75:fc:bf:cd:89:96:6c:35:7a:
aa:b5:07:58:e5:4c:36:36:7e:13:78:d0:b8:84:f7:a8:57:c6:
ad:4a:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:20 2025 by rpki-client