Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
File: 6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json)
Hash identifier: p0SWMVOX/j1QftteGTOfdd3Zv93L7LUk7gTx+3n7Sv4=
Subject key identifier: 69:34:36:E5:21:12:E7:27:26:DA:D1:B9:55:75:B6:47:E1:56:B6:DB
Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial: 010D0C9F4328584812D531FD7C3F5DB32E521F80
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 17216
IP address blocks: 192.151.136.0/21 maxlen: 24
198.24.12.0/22 maxlen: 24
199.47.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:31:fd:7c:3f:5d:b3:2e:52:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=61d6ecce-21da-40fc-ba0f-ee546df93f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:00:83:b9:41:e8:0e:6d:6b:96:62:81:53:
26:0c:e9:de:86:2d:68:79:54:42:7d:3b:bb:8d:78:
cc:3a:0b:ce:f7:b8:fd:52:2c:60:25:df:b0:e6:c6:
a2:a2:77:6c:ad:04:29:3b:38:67:70:7a:c1:38:e3:
38:15:7a:e1:9d:9b:72:21:8e:d4:1a:20:71:ef:a8:
7f:1f:cc:f8:7d:91:06:77:12:3f:d5:78:1e:c1:33:
d7:0b:24:a0:7c:86:6f:78:f7:5f:8d:d4:67:db:20:
7a:88:75:2b:2e:ff:28:53:00:a3:e4:be:72:47:a6:
2c:13:eb:97:cd:66:ed:07:c9:01:38:45:35:89:01:
19:2c:50:3f:90:82:bf:f0:e4:95:b9:51:7e:0c:f6:
2d:2e:a9:57:33:af:31:a1:4e:96:32:e4:4b:06:6d:
f0:1a:f4:7f:c5:03:44:ed:ff:88:81:9b:1b:29:ea:
7c:a5:a5:3a:41:48:a3:4d:1a:07:ea:e3:41:83:58:
9c:3d:69:61:9e:a5:99:d0:b7:d1:77:b7:cc:87:c6:
c8:06:4e:a7:d4:c6:2b:27:02:6b:70:e2:17:0a:82:
fb:7d:26:15:41:21:61:4a:4f:9d:19:b4:b6:65:cb:
37:5d:bf:33:33:27:5b:7b:33:7b:5f:50:52:82:d6:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:36:E5:21:12:E7:27:26:DA:D1:B9:55:75:B6:47:E1:56:B6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
X509v3 Authority Key Identifier:
keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
sbgp-ipAddrBlock: critical
IPv4:
192.151.136.0/21
198.24.12.0/22
199.47.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:6e:91:71:ad:e2:0f:c0:e3:9d:65:3b:c2:f7:b1:a1:56:40:
ad:06:0e:bc:8d:26:da:b0:9d:90:3f:66:42:0e:88:30:58:26:
d1:25:e2:c6:76:f8:16:a0:2c:eb:7e:48:0a:1b:86:b0:60:a2:
01:5d:f0:51:f8:57:7b:41:5f:10:13:35:8a:50:b8:1c:c5:d3:
1f:b7:c0:2a:59:84:dc:bf:33:4f:a8:28:0c:b8:a1:93:90:30:
5e:d2:5c:e4:98:b2:25:b8:c1:71:c1:80:c1:47:48:18:f6:c1:
fb:cb:5c:ba:78:29:45:30:45:e4:d9:d6:ab:2a:19:4e:66:9b:
15:5d:67:f6:e5:f6:e7:9b:51:db:f2:dd:f8:1b:c0:ab:13:d3:
02:5a:3d:65:89:31:70:56:1b:2d:88:12:3c:9b:f3:ed:c4:ef:
2e:40:48:83:85:7d:90:0e:6e:05:f0:0f:c3:2a:e6:5d:8c:6a:
17:9f:a8:72:65:e2:ff:0c:e0:22:13:ee:78:43:7f:67:df:10:
de:0d:10:36:10:12:dd:0f:7e:71:3c:fc:94:6d:3d:8f:f4:67:
d6:14:d5:68:00:78:fc:11:7c:a4:d3:2b:aa:0b:76:54:91:94:
d8:4d:cd:27:a0:d7:4f:d2:d2:d6:46:b3:5b:2d:8f:1e:46:34:
32:ff:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:58 2025 by rpki-client