Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa
File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json)
Hash identifier: U1VUW32A5TXbacba7+dbFYNQeKfaOwyeo0E6/3maPYo=
Subject key identifier: C2:FA:E7:0D:9C:4C:38:78:FB:4C:CD:87:7B:68:46:EF:6F:F1:E2:B9
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F432858489075F32CE304E0DC20CE5800
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 212238
IP address blocks: 172.102.218.0/24 maxlen: 24
216.158.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f3:2c:e3:04:e0:dc:20:ce:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=8051c197-43c1-4f58-8244-6adc1d24ab01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:fb:df:c1:4b:76:c7:6f:4d:a5:12:f1:f1:
62:e5:a6:3c:58:97:59:46:41:93:f4:f8:99:d3:b1:
1a:d8:79:85:4a:10:f2:3c:ab:78:38:25:b4:be:55:
28:6b:1d:19:05:10:c7:71:a0:7d:b6:c4:79:f6:60:
0f:b1:21:29:1e:ac:67:d2:5e:6b:aa:67:68:22:f2:
d7:27:6b:b2:eb:7d:5e:37:9a:8e:9d:be:4a:91:91:
13:43:7c:f7:11:4e:29:4c:7d:e3:5b:1f:e5:9d:0e:
9b:e6:bf:b9:24:3b:88:40:f0:00:ed:d4:c6:81:04:
a2:b3:d2:c5:03:47:6a:1b:6c:9a:4f:f3:2e:c7:d1:
1f:1c:86:c5:32:8c:31:fe:5e:9e:bc:e6:89:6e:fa:
81:be:c5:6a:c6:39:bb:a5:1e:8a:f8:a2:9b:ee:72:
8a:99:62:10:18:ad:4a:5c:bc:63:ec:f4:9e:7c:29:
80:43:b5:d8:22:ad:b6:c6:81:bf:d3:3d:f5:d6:53:
f6:19:88:4b:1e:e4:b4:1b:3a:19:60:19:96:c2:af:
b6:a2:76:ec:cd:76:8b:0f:62:19:1b:2f:5d:71:a8:
c7:41:0d:98:4c:29:75:fa:cb:6e:cb:8a:a8:18:5a:
12:88:1e:d5:20:64:f0:b3:80:d8:a3:d3:32:3f:c1:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:E7:0D:9C:4C:38:78:FB:4C:CD:87:7B:68:46:EF:6F:F1:E2:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.218.0/24
216.158.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:40:cd:f2:e7:e8:7c:44:f9:98:ee:25:6b:62:e8:38:2f:60:
93:f8:79:ab:ff:d7:e1:3e:b6:0d:10:e8:d3:27:a7:b2:01:b1:
35:31:43:65:42:b3:6d:a0:aa:ac:89:fa:62:17:74:3a:c8:2b:
81:96:82:13:fa:52:dd:e7:bc:3b:42:21:76:df:ef:e5:fb:74:
14:15:c8:6c:86:26:18:74:4f:6c:eb:e4:44:46:79:33:b2:e3:
fe:76:35:d2:84:4e:80:09:46:de:ec:f6:da:59:9b:cd:e7:3c:
47:8a:20:4e:6f:b4:6f:cd:87:b7:fb:9f:14:26:a6:5c:39:b0:
cd:6a:20:7d:5c:f3:b4:74:b8:52:d0:b9:1d:37:ed:03:13:ee:
1b:8f:c5:43:f4:fd:2d:33:97:f1:99:d0:e9:ac:34:d5:58:25:
3f:1a:01:8f:10:46:0e:f7:2f:04:c4:2c:4c:ed:59:a9:c3:c5:
be:51:60:9f:88:61:16:66:7b:1b:f2:d2:e5:5a:6f:b5:38:3c:
75:43:02:75:e8:d7:8d:1d:4e:0d:dc:71:e4:71:0d:d3:c7:ae:
96:a5:97:b0:20:87:9e:08:f6:0b:c5:92:be:bf:29:b4:06:cf:
73:94:6e:eb:39:22:44:73:4c:74:1f:99:d6:b9:2a:a0:57:ce:
b2:da:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:02 2025 by rpki-client