Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json)
Hash identifier: XY+NbiIrM3lwkGM3W8N/Dac5vsjCdfBdeXiHXb0PJ8o=
Subject key identifier: E9:7C:67:31:BB:62:B7:98:D8:4D:38:7B:31:03:B4:93:80:F8:A3:A2
Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
Certificate serial: 010D0C9F43285848530AE56FD56BEA191C497080
Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 25715
IP address blocks: 173.225.32.0/20 maxlen: 24
199.36.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e5:6f:d5:6b:ea:19:1c:49:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1201535e-d808-4c30-81a5-864c3cb2a2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:b8:ab:ef:2d:78:db:5a:b0:ec:12:52:3a:
ae:0b:0d:0c:2f:29:db:65:f3:cf:50:01:e2:c8:5c:
c1:9c:7e:ed:4d:a6:a4:81:a5:fc:87:17:b6:66:2f:
35:2e:de:65:6d:f4:4b:2a:9a:d2:3a:89:57:65:43:
9d:7f:8b:7e:37:70:8e:c7:25:be:40:81:06:52:6c:
61:0b:fe:e0:5f:45:cf:a7:7c:4d:49:1b:87:67:44:
bb:48:be:e6:f8:a9:51:74:56:2b:dc:f7:a7:94:dc:
db:2c:65:e0:82:a1:18:b0:f8:f7:df:b4:62:7b:76:
f7:30:c9:03:b5:a7:af:c6:74:49:56:86:93:d8:c9:
16:d1:74:17:92:a5:f3:de:f1:6a:7a:2d:ac:a6:85:
11:b0:f5:bf:d4:5d:ad:cf:33:d6:79:37:64:68:ad:
56:27:ed:1e:49:45:1d:95:56:63:9d:4b:48:e8:a5:
fd:51:63:87:df:d1:cf:ba:b3:63:6e:15:a1:f7:c3:
74:9a:cd:13:75:90:b1:4b:56:4a:6d:50:3e:89:26:
22:54:03:ab:ae:66:01:e7:27:26:ab:ff:29:06:cd:
60:ef:34:28:93:a6:43:5d:d2:78:99:53:fb:77:7d:
a4:10:03:92:29:1e:17:06:2d:61:31:9e:55:bb:53:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:67:31:BB:62:B7:98:D8:4D:38:7B:31:03:B4:93:80:F8:A3:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl
X509v3 Authority Key Identifier:
keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.32.0/20
199.36.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2f:a5:ab:1d:c1:10:78:2b:13:21:b9:34:9a:d9:34:bd:d4:
ff:1b:0d:48:18:f2:f6:93:be:db:aa:6e:72:8b:32:32:e1:2b:
17:11:4b:81:36:e9:c4:a4:d5:d1:29:09:9e:4d:3e:0d:b0:15:
70:dc:4b:cf:20:d6:44:d6:ec:cf:bd:5d:e2:06:65:5c:2c:e0:
a2:76:78:81:85:55:29:ad:a8:9f:bc:02:a8:0f:35:32:06:ed:
a3:8f:35:29:80:73:9f:a9:b9:29:8f:c6:c2:10:5e:a2:15:9c:
1b:00:cb:26:a3:d1:92:0c:81:ea:69:65:12:f4:df:f4:af:cd:
ee:5b:96:ad:aa:07:c0:54:76:26:6e:aa:57:1b:50:55:b0:8b:
1f:96:ea:90:3c:9b:8a:2d:54:4a:b0:e9:7d:bd:4c:37:a8:43:
00:b4:b9:d5:9c:66:4c:c3:ee:9f:f0:0c:61:59:f6:66:a2:c1:
f5:cb:16:cc:1a:b6:48:7b:5f:ac:b1:e2:0d:7e:e6:c3:6d:ea:
4e:3c:38:89:20:38:b9:1c:b7:85:82:ac:9c:e4:e8:9a:b5:cf:
1b:38:ab:f9:3d:ed:14:60:e1:8c:59:61:55:2f:af:0a:3a:c1:
37:bf:18:d6:8c:02:aa:28:08:f5:5c:a4:d8:3b:51:74:55:56:
7c:68:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:13 2025 by rpki-client