Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cbbbe526-edc2-31ea-896b-641729051c0e.roa
File: cbbbe526-edc2-31ea-896b-641729051c0e.roa (raw, json)
Hash identifier: tEyD3m6zWyuWzLP4/mBg5W914beeMEinlDLbvDxmfU8=
Subject key identifier: A3:AA:F6:D9:7C:D5:52:93:1A:8C:EF:75:FB:58:CB:8A:9D:1E:A4:BD
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858488031518F5AFD80CBB5CDE600
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cbbbe526-edc2-31ea-896b-641729051c0e.roa
Signing time: Fri 10 Jan 2025 18:09:44 +0000
ROA not before: Fri 10 Jan 2025 18:09:44 +0000
ROA not after: Thu 10 Apr 2025 17:09:44 +0000
asID: 22652
IP address blocks: 173.242.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:31:51:8f:5a:fd:80:cb:b5:cd:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 10 18:09:44 2025 GMT
Not After : Apr 10 17:09:44 2025 GMT
Subject: CN=24bd4766-aea3-4860-b254-e3c8086383d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:8d:34:9a:e6:10:0e:ef:8e:1a:85:71:92:
89:56:5c:b7:65:a5:88:6d:a9:0d:32:e5:c4:84:53:
c1:df:bc:22:12:0d:f5:02:d1:bb:e9:a0:9e:4b:a0:
8d:aa:d4:32:e4:81:c6:8e:55:0a:8e:91:a4:85:34:
56:09:19:48:e1:55:7a:69:05:8e:e8:7d:4a:4a:b2:
81:40:d9:d7:e8:fb:cb:36:fe:33:a8:7c:d7:bf:57:
4e:b1:0e:34:94:18:4b:ef:2d:6b:b9:9c:d7:22:2a:
98:5b:11:1c:68:7f:cf:19:f0:53:16:07:9a:c5:4c:
ee:cc:70:01:23:69:9e:89:32:22:c9:e5:84:a7:b0:
d0:05:f1:25:f1:20:31:dc:01:78:e7:2b:33:f2:9c:
dd:d9:b4:ca:b5:df:27:b3:82:74:6f:e3:01:a9:38:
8a:d4:e9:5f:ea:cd:05:c2:76:d8:f5:bb:11:5e:2c:
66:35:00:34:11:4d:a3:fc:31:15:6a:1d:fc:f7:bd:
47:f8:29:fa:c9:19:7e:11:52:a6:bf:a2:87:c4:e1:
61:9d:c3:f7:ff:84:e9:ff:5c:57:56:68:4d:bf:2c:
7c:e1:91:9f:d4:67:db:90:c5:73:74:2e:7c:a4:e3:
6f:fd:81:25:0b:62:85:07:70:55:5c:2a:af:2b:2b:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:F6:D9:7C:D5:52:93:1A:8C:EF:75:FB:58:CB:8A:9D:1E:A4:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cbbbe526-edc2-31ea-896b-641729051c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:08:a9:0f:c3:d8:20:20:1c:c1:fe:5b:66:91:d5:3a:93:05:
ab:66:00:80:2d:35:5e:ab:df:bd:f1:e5:9a:f8:bb:89:ac:fc:
93:d9:e7:66:29:7f:b3:5b:29:1f:3b:0d:02:ec:01:ac:4b:8f:
d9:23:45:62:78:5c:7a:ca:82:93:5a:bd:f2:85:bc:0f:53:de:
96:aa:49:83:8b:21:79:33:a6:61:28:ff:c1:4f:00:ae:d9:eb:
d5:67:e0:63:70:33:76:fe:55:25:95:12:57:ae:69:8a:30:c0:
e9:2c:f4:38:47:b2:04:96:57:3b:1f:dd:f0:61:b8:75:27:9f:
d0:16:5f:46:ea:95:4d:f6:5c:f8:c2:85:ca:fc:66:f7:89:6e:
02:e1:91:0a:4d:ba:75:2f:49:5e:1b:83:d8:a6:12:f1:b0:5b:
e1:bb:14:21:0b:49:88:a7:cf:30:00:ea:08:1e:1f:9f:81:b6:
f1:fa:bc:e0:88:eb:52:96:b0:91:46:66:60:fb:31:f8:cc:9d:
50:b8:17:a5:39:1f:fd:7d:9f:75:01:db:a4:f9:60:7a:51:bc:
05:c5:eb:fc:3f:fa:3e:e2:4a:d3:d8:e4:19:70:bd:9c:9c:10:
7a:ed:ec:1f:ab:d3:34:51:24:8e:a2:f5:b1:f1:44:2f:0e:93:
c2:00:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:24 2025 by rpki-client