Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa
File: 5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa (raw, json)
Hash identifier: GUGRGZCPWSXXhK4iGhUUh3yOQT2QUfQGLO7j+w96gUc=
Subject key identifier: 78:63:B6:3B:9A:C7:FF:D8:84:0A:DF:AD:76:AD:32:D7:C0:B5:23:19
Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial: 010D0C9F4328584839EAD06A7A64E0C546F8BE00
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 22135
IP address blocks: 173.242.12.0/24 maxlen: 24
173.242.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d0:6a:7a:64:e0:c5:46:f8:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=0f4f4708-1d98-4e6d-a539-f76bc800b7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:f1:44:76:c2:0b:ce:fb:67:24:2e:40:d2:
86:27:b8:c0:1e:b1:da:46:34:ae:a9:fe:a9:be:2b:
39:a3:2e:da:aa:4f:a4:88:22:24:ff:0f:b6:b2:bb:
7e:e3:7d:ab:cb:64:53:9c:d8:66:10:db:a9:79:b7:
2c:23:ba:ee:6f:c1:43:5d:70:95:b8:cd:ab:39:3c:
1f:d2:04:04:3e:01:93:41:fd:02:0d:af:95:ea:b2:
c9:cb:b9:a7:11:ed:f5:7d:75:5e:d5:78:6d:e1:a4:
f6:79:ce:20:b6:3e:be:4b:b0:be:ee:6e:db:e0:f3:
72:be:10:48:64:a6:d2:48:80:df:37:72:c7:3b:07:
90:8b:2f:c3:28:94:dc:2f:46:ff:42:4e:da:a6:c1:
3e:00:86:a5:38:09:f2:c5:10:cb:7d:fb:06:48:f2:
7d:39:2e:51:05:44:2f:7c:b3:f3:f4:da:57:46:37:
66:0c:b4:4e:eb:bd:ff:3a:b2:c4:51:ee:b6:2b:15:
c1:8f:69:f4:de:8d:fa:ed:48:94:7a:86:b2:cc:43:
a5:81:71:5d:5d:54:aa:37:e5:e4:61:43:10:43:a7:
5d:a3:de:fe:b9:47:ec:31:f8:28:b5:cf:78:1c:22:
41:c1:9c:14:c9:41:e4:3d:05:3a:ab:d6:c2:24:85:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:B6:3B:9A:C7:FF:D8:84:0A:DF:AD:76:AD:32:D7:C0:B5:23:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
X509v3 Authority Key Identifier:
keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:64:0d:35:12:cb:01:81:74:c0:48:ca:b5:e0:7c:23:ab:f6:
6f:43:f2:86:44:e4:e0:ff:ee:80:af:ce:25:d0:a7:f3:d5:2f:
fe:b2:b9:2f:0e:9d:b4:5d:01:af:f5:88:64:45:ec:32:84:fb:
ec:29:be:e9:a5:da:54:5b:b8:a1:0f:e4:d4:22:43:1c:29:82:
23:cd:df:ab:96:0e:61:c3:2c:72:a6:77:0e:0f:e3:eb:55:cb:
43:ac:cc:95:12:d1:84:6e:ef:10:f9:cc:ff:2e:72:cd:87:38:
62:43:12:e5:a0:a8:76:a3:be:b1:9c:41:1f:7e:ae:71:e3:50:
99:88:ee:d2:ec:05:e4:95:c2:a5:ef:3e:b2:15:82:59:9a:06:
92:27:79:38:90:8d:bb:7b:83:25:4d:af:47:2d:3a:36:35:e2:
c5:58:6f:36:dd:f4:29:3f:d1:a0:84:15:ff:f6:40:69:da:1c:
46:48:fb:a9:d5:60:9f:67:b8:fa:a2:9e:00:26:ac:7c:c7:1c:
13:17:94:37:88:fc:4a:f9:0a:fd:6d:06:35:44:5c:b1:dc:14:
94:50:de:82:11:5e:1b:84:4c:2e:da:0a:17:a9:7a:7b:4d:5d:
ea:82:9d:8a:77:04:0b:c8:f2:61:a7:de:a6:9d:8e:5b:af:62:
c4:e6:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:05 2025 by rpki-client