Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
File: bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json)
Hash identifier: ReaeZE9FIpyjq5LPp4zIqEl7tr9OjabiMiOTZMIZ+dg=
Subject key identifier: FC:D5:6C:BC:5C:3B:ED:A5:99:31:A4:36:74:0E:FD:1C:F5:36:90:EC
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B17472E7E7B0E053DF100
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 174.137.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:47:2e:7e:7b:0e:05:3d:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=569290bd-44d8-4ec1-8590-633282f0717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:de:f9:5c:ac:96:e1:d8:99:c1:01:8d:21:
17:95:de:75:03:79:c4:78:7e:5e:d9:cf:71:54:db:
22:ea:fe:97:c2:96:50:f7:2b:89:a9:79:cf:01:cc:
c2:52:db:cd:c6:1a:1f:be:24:9f:80:5d:1f:1e:be:
8d:b0:9e:3c:da:2d:a7:04:f6:f7:9d:7e:f4:f4:43:
02:c8:0f:9c:06:d8:ad:a7:73:24:5e:fe:77:3d:7a:
40:24:b3:2a:ef:83:c2:3c:73:67:99:89:d5:6f:c1:
50:ee:6d:80:f0:49:49:79:7c:7b:2a:b1:22:50:e2:
18:f5:dd:53:ca:cf:dc:56:2f:e9:4a:71:4f:36:d1:
63:2e:3d:3c:74:b9:4e:02:cd:4f:07:d9:ee:52:ff:
fa:f3:ef:b1:25:dc:b3:71:3a:25:fe:86:42:34:18:
ec:6e:ea:46:5f:93:42:da:02:f4:e4:e2:fb:f3:19:
00:dd:aa:6b:27:4f:78:7d:d4:21:43:30:27:46:8d:
6c:bf:40:18:22:ac:4e:67:a3:c2:8c:be:51:bf:56:
ab:14:a7:33:0a:0b:87:3d:dc:46:ce:63:72:0b:57:
5a:bb:e1:2c:9b:8d:8d:c7:d1:fa:18:bd:76:ac:91:
2d:0f:38:8e:b1:9e:42:60:b2:be:b9:40:be:ce:8e:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:6C:BC:5C:3B:ED:A5:99:31:A4:36:74:0E:FD:1C:F5:36:90:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:69:50:21:ac:b9:c0:39:e5:e7:43:b2:88:a4:35:15:ed:c1:
6e:64:01:0b:c1:a8:a7:41:8c:62:5c:e6:31:9d:0d:01:0d:cf:
e8:27:b8:5e:dc:03:08:07:22:9e:da:87:02:11:45:f8:65:9f:
fd:b9:31:6c:9b:d9:09:fa:fc:84:0b:42:d1:a0:24:61:3f:ae:
9b:dd:9d:10:d1:c2:6d:73:6b:c4:e5:9d:e6:d1:d6:11:0d:d6:
4c:7a:03:f3:61:ce:79:f9:46:8c:eb:f7:df:e4:ae:11:0b:a1:
60:86:a8:1a:4b:8c:6e:8e:70:d7:fa:a2:45:27:7b:1c:9d:99:
3c:7a:19:34:39:15:7c:a7:a8:70:0d:fc:53:e0:51:89:48:a2:
08:01:9d:4e:7a:43:cb:a0:fd:a9:e1:e6:13:2d:80:7f:d6:31:
1f:d2:9c:5a:37:40:a3:ac:9a:70:ae:4e:4e:34:fa:49:da:8e:
53:49:a1:90:3b:32:bf:e9:48:bd:7b:b5:d5:28:6d:39:44:51:
65:26:dd:87:ae:5d:5b:63:05:83:a4:23:fd:7b:ae:0b:9d:b1:
7a:74:2b:5a:ca:5e:46:99:46:57:a3:b2:06:36:13:05:59:6a:
71:0b:b5:a9:a7:de:87:21:2f:e1:0a:24:c6:81:ed:e2:df:cb:
49:b2:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:17:36 2025 by rpki-client