Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ab0cc126-be42-30d5-937b-3696b0eae9fe.roa
File: ab0cc126-be42-30d5-937b-3696b0eae9fe.roa (raw, json)
Hash identifier: ACkz3M/p0dis3peEql3iIGAya7B8kI5SgCnJ+5O3ij4=
Subject key identifier: 16:0F:21:D2:87:BA:7A:79:95:91:4E:C0:EF:F5:AA:AC:09:26:79:50
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487A207C351F7C7AD8943B7420
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ab0cc126-be42-30d5-937b-3696b0eae9fe.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 206804
IP address blocks: 173.255.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:7c:35:1f:7c:7a:d8:94:3b:74:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=9e3564bd-4c7b-4e77-8ab2-619df2eadb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:6f:cd:19:a5:9e:ea:e2:e2:3b:42:98:55:
f7:22:3a:10:49:10:f6:12:c4:eb:d8:ed:c7:ef:a1:
9d:8f:f2:ab:13:94:01:61:dd:31:86:36:39:80:c0:
da:cf:ff:66:37:fd:3f:d0:e4:34:a2:24:de:12:84:
dd:a2:f5:22:48:92:8b:99:a8:51:16:7e:3a:e2:8c:
97:b7:5a:40:04:db:4e:8b:ed:59:83:e8:05:07:7a:
7d:26:5d:65:ed:72:3e:a3:87:fa:68:d7:9b:01:08:
14:6e:02:45:3a:31:0c:57:10:37:e6:56:38:d8:a1:
42:17:63:f0:f1:d9:4a:6a:12:40:92:60:3a:e7:e8:
b0:20:91:e2:c9:86:2c:45:6e:c3:96:9f:9c:28:a7:
03:1d:60:85:e0:a4:05:6c:d0:62:55:58:39:9b:28:
79:b5:9b:dc:ba:39:0c:5d:1f:92:e5:d7:be:e7:df:
e2:ab:a2:00:49:8d:a3:23:11:29:f2:35:25:f3:a8:
3e:04:35:87:47:0b:af:47:44:95:4c:cd:ab:b2:9f:
c7:88:60:22:d1:82:43:e5:d3:69:57:9c:b7:36:18:
5c:4b:72:3c:16:3a:44:b7:91:98:4f:e7:a2:a9:fb:
16:a8:2c:b7:6b:a2:af:1c:87:fd:af:24:af:38:bd:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:21:D2:87:BA:7A:79:95:91:4E:C0:EF:F5:AA:AC:09:26:79:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ab0cc126-be42-30d5-937b-3696b0eae9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f7:3e:50:e5:ac:04:a0:04:8c:72:60:52:cc:55:25:d3:c6:
d2:38:d4:33:db:aa:4c:bf:3e:8a:e9:6a:41:2a:dc:aa:89:b6:
9e:2a:00:f0:69:5a:71:13:cd:01:e9:eb:d9:1b:99:e8:bd:cf:
c8:0c:9e:c8:4b:8f:29:96:e3:3e:18:da:6b:b1:ad:d1:a9:bb:
68:03:bf:02:c8:4d:7e:0f:20:d8:dd:fe:31:e4:4d:f6:11:e0:
89:3f:25:12:f7:2e:1b:8f:3d:38:1b:c8:29:1f:de:94:89:7d:
5a:97:7e:dd:e7:11:bc:5e:98:83:d6:be:55:b4:a3:15:61:49:
a8:bf:7f:54:dc:b9:23:c1:1c:37:2b:a6:66:8b:5d:f8:12:72:
0e:31:ef:44:d1:6c:9f:59:9f:8f:b2:d1:b0:82:9e:a3:59:6d:
49:78:14:31:28:f4:74:c6:f0:e3:8f:f6:72:f1:29:b2:08:47:
19:43:01:5f:95:da:23:63:df:a9:bb:9e:08:42:52:3d:32:cb:
bd:02:8e:cc:73:26:b0:6c:71:0a:43:74:e7:f0:58:31:69:d6:
ac:c8:14:2a:b1:cb:30:43:7a:65:08:db:ea:23:b8:64:7d:9d:
1d:9f:6f:e2:ec:4f:d3:9e:a4:65:fd:9e:fd:00:06:47:8c:99:
31:eb:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:53 2025 by rpki-client