Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json)
Hash identifier: svQKS3K6aqGz6dPK9I4RlAEniKGNAtgQoRTcEzdfNXQ=
Subject key identifier: A3:79:C4:94:A9:8F:4D:07:DA:CC:34:AF:73:1C:27:80:21:D5:42:0C
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F432858486EF5C0FC7A151F2A4B3F9900
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 13849
IP address blocks: 173.243.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c0:fc:7a:15:1f:2a:4b:3f:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=81dec3c0-9226-4aa5-8636-10b1303969b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:da:94:11:5d:7e:20:fe:ce:58:c0:8c:f8:
6a:8f:e2:d2:af:24:b7:b3:ad:1f:d1:d0:0d:f1:f9:
55:85:7e:22:df:ed:ee:50:7c:42:fb:1c:18:d3:4c:
42:dc:15:ee:b6:8f:4e:b3:d2:57:3b:0e:f0:74:28:
df:5f:52:75:86:71:d9:c2:4c:4c:86:1a:0a:26:d5:
a6:0a:0d:8e:f5:17:c0:24:3b:36:95:44:34:7f:73:
d5:ad:48:31:38:fc:6e:30:8a:16:46:a9:89:a8:c0:
a9:a8:e6:93:c8:9f:98:9d:a8:e9:dc:f9:40:aa:0c:
75:8b:50:4c:7f:da:52:78:79:51:2d:83:af:a9:4e:
a7:9b:42:e4:71:2e:ab:cb:a0:fe:11:05:db:d0:89:
5a:a9:b2:c3:e8:de:be:4d:39:bb:63:1b:bb:d8:d0:
b0:f5:ce:31:0f:c5:48:c2:29:5d:2e:6a:c5:c4:c8:
55:86:aa:48:f1:ab:8b:af:81:ea:3c:24:f7:da:18:
8b:60:33:52:bd:66:ab:24:7d:f6:64:c0:1f:92:f9:
74:bf:b1:19:66:d8:d2:09:74:20:cf:9f:14:9b:cb:
f9:2d:e0:bb:9c:e5:11:4e:9b:b4:da:cb:a7:ca:23:
91:83:ff:97:62:42:66:57:1e:a9:a6:4a:21:b4:c0:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:C4:94:A9:8F:4D:07:DA:CC:34:AF:73:1C:27:80:21:D5:42:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e0:56:db:d4:5f:ee:eb:61:d0:47:6c:46:a7:fa:22:f1:4a:
c1:56:2f:fa:60:e7:ac:e4:c6:ee:99:90:9b:1f:81:4a:93:1b:
bd:8f:9a:25:47:36:ab:58:b3:ca:3b:91:ae:21:7b:d0:d9:01:
c7:c9:ea:db:5c:ee:92:8c:41:fc:86:4b:87:04:8d:2f:f7:d2:
03:72:ab:5a:12:70:9a:2f:a6:70:74:d6:df:1d:14:64:52:8a:
fc:b0:89:d4:23:7f:6d:30:51:8c:e3:e9:8b:e2:b6:28:ad:53:
bc:d8:95:c0:11:22:84:30:12:93:44:25:77:48:7e:66:7e:6b:
0a:f9:65:3c:95:19:8e:9e:b1:cb:83:8a:fe:30:d1:83:74:36:
3d:ac:6c:83:a6:26:8f:3c:33:67:fa:9d:2f:a9:34:7c:62:6a:
48:10:bf:c0:42:aa:17:49:4b:29:77:82:29:61:57:5e:4b:8a:
49:fa:65:73:09:e2:08:81:29:82:f0:66:c0:9c:16:c6:bd:47:
d6:c6:6e:a4:c5:88:66:69:00:1d:53:c3:97:17:56:34:ad:fe:
88:97:bb:1d:86:9d:00:73:95:20:17:2c:4b:4f:47:2d:0a:9f:
e5:97:49:7e:9c:94:27:2d:8f:b2:44:8c:26:53:26:50:be:16:
24:c9:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:49 2025 by rpki-client