Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
File: 735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa (raw, json)
Hash identifier: 7VWtJsqvNJIacDDub2V0iYyGs5wUUN+6NYKpf9kknhQ=
Subject key identifier: 5C:0D:EE:B9:A9:E9:17:7A:76:D7:3D:39:16:50:BD:C8:15:CD:FB:D8
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858488815EA6A9D3ABD1A713AE500
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 140224
IP address blocks: 104.143.46.0/23 maxlen: 24
172.81.96.0/22 maxlen: 24
172.81.100.0/23 maxlen: 24
198.176.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:ea:6a:9d:3a:bd:1a:71:3a:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=c6c1d5e0-b0f8-487d-94e5-adffd2679a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:80:b2:ce:8b:c8:04:c6:e0:75:a9:1c:c9:
23:87:82:0b:64:38:49:d5:05:55:71:79:ee:94:a8:
26:46:8a:6e:b6:26:a0:81:31:ed:be:57:37:02:c3:
0e:39:51:cb:dd:1b:81:be:33:bc:0d:e2:c8:03:a4:
d0:7f:71:c8:5e:02:60:03:c3:61:e2:c1:27:f9:95:
d6:83:87:90:98:ca:8d:6f:45:6f:ce:90:a4:c6:e3:
74:02:e2:ae:83:d9:32:87:03:cf:4d:18:1d:f1:24:
f4:1a:7c:f4:5d:5c:8f:4a:8e:dd:88:b9:73:db:39:
4c:d7:3a:5e:3d:19:e7:ff:a6:f7:49:bd:de:5c:eb:
84:f8:a7:39:f6:0b:a4:78:f1:3c:43:4c:df:8e:fb:
0d:ac:4d:bb:31:bc:f3:0f:a1:3c:e7:8a:74:5d:9d:
e4:c8:e4:8c:c3:ce:08:9e:7b:6f:dd:a7:a1:2c:36:
86:a3:bc:5f:77:5d:08:48:82:74:cd:b5:20:49:98:
66:10:03:78:ac:56:24:2c:e0:94:a4:b0:40:db:41:
8f:5a:82:b3:16:e6:a4:85:9a:98:f4:33:c2:f3:0d:
5c:ba:9b:5a:a0:57:5a:20:c5:4b:dc:a3:c5:49:3b:
1f:80:20:7f:bc:f6:c1:48:12:32:c1:58:25:80:a4:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:EE:B9:A9:E9:17:7A:76:D7:3D:39:16:50:BD:C8:15:CD:FB:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.46.0/23
172.81.96.0-172.81.101.255
198.176.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:73:fa:0e:95:9d:23:a4:5b:03:60:2c:ff:8b:77:bf:87:d7:
1e:e1:9f:d7:84:fa:8f:12:1e:61:fc:87:af:35:63:c9:74:b0:
d7:f1:4d:e9:eb:53:8b:7e:e8:a0:9c:4f:23:70:33:b5:fd:a3:
a7:45:63:1d:19:75:63:3a:82:5e:b4:f1:9a:fa:9c:77:33:e7:
1b:46:14:df:15:dc:2b:8e:87:aa:d7:8c:14:fb:99:75:ca:58:
62:3e:2e:6b:c6:e5:a2:00:72:f2:14:9e:fb:ba:f7:7b:de:d7:
ea:e2:db:eb:94:02:c1:d2:5e:00:4f:ea:fb:d8:1a:79:24:d0:
dc:0a:bf:a9:f8:b8:f0:ef:31:23:e8:8f:ac:06:d7:79:23:ba:
49:d6:39:ce:c9:32:4a:da:08:5e:cb:a2:fc:2d:7f:ee:a2:13:
f0:7d:1b:cc:a5:d8:14:3c:78:84:c8:cb:46:9a:56:42:6f:56:
0e:b4:72:8c:99:c9:ce:15:06:67:18:96:7c:7d:14:5f:dd:85:
2d:8e:29:fc:2f:72:92:f3:91:83:9c:20:b3:e0:aa:f9:79:a0:
15:5e:3c:99:0f:10:28:4f:33:bf:3d:c8:60:5a:7a:68:a1:b7:
ac:3c:35:c3:94:b4:79:9e:ff:32:28:1a:fa:21:14:9e:03:63:
8d:7d:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:18 2025 by rpki-client