Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa
File: c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa (raw, json)
Hash identifier: oXJTsWD3d//w78synHCpGJ3PgeO+kfWS3dhYIyLo0Zc=
Subject key identifier: 63:3E:8A:FF:7D:9B:48:C6:62:91:C2:45:94:2B:12:B8:A8:C9:8F:10
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B5010CB0B23B8672F61E000
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 15290
IP address blocks: 71.19.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:10:cb:0b:23:b8:67:2f:61:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=43f3988e-0de3-4132-aebe-59415ac312ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:87:54:bf:f1:18:f9:00:1d:91:b6:97:e7:
51:c7:0f:b8:b8:c7:d1:9a:9f:aa:6f:a9:9a:42:4b:
57:62:69:29:98:86:11:cc:8d:e3:90:92:46:03:26:
fe:84:80:a6:8a:d5:71:15:d0:85:be:c2:f3:51:95:
7d:a0:75:76:81:49:0a:5c:ea:44:6b:ad:81:af:20:
dd:18:1b:2c:a4:6d:9b:64:7d:1a:19:44:41:66:a6:
16:8b:b7:f1:14:91:c1:7f:0f:cf:b8:61:30:87:1a:
aa:46:36:67:fc:96:68:97:1d:db:b1:0f:09:01:a4:
f9:e7:0f:94:13:9e:7b:33:b1:a5:2f:18:29:39:aa:
e1:3e:b3:ed:1d:8b:20:e7:c6:d6:66:1a:d6:dd:4b:
b0:2c:42:da:00:a4:57:f2:f3:e8:30:5f:07:ef:cf:
3a:dd:cb:46:9f:32:1b:98:d7:f7:69:3f:c5:cd:b4:
43:9f:82:29:5c:09:5b:ab:58:44:8e:3e:1c:de:c6:
3b:a2:39:cd:33:8b:a9:8c:ea:45:3e:25:4e:ab:4d:
07:69:28:ee:c4:c2:b1:b0:54:10:d1:20:9f:fe:3e:
12:76:73:2c:8e:97:d5:1b:92:e5:35:63:21:b2:71:
a6:bf:18:73:4a:53:be:d1:10:b8:83:bc:48:d1:12:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:8A:FF:7D:9B:48:C6:62:91:C2:45:94:2B:12:B8:A8:C9:8F:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
71.19.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:a4:19:17:a1:b9:9b:14:ad:28:0d:72:74:4c:58:62:9e:4c:
10:74:b5:53:87:15:fb:70:82:52:44:41:7e:22:17:a0:05:ca:
28:e1:a6:f8:8f:ba:02:0f:e7:65:56:eb:96:20:a9:83:db:c4:
ef:bc:15:bf:ff:e9:2c:8d:cb:b6:bd:c8:78:00:7f:d3:ce:b3:
8c:41:d7:df:47:0e:e4:dc:1b:aa:a9:6f:ce:a6:2a:d6:f1:5b:
7a:2b:66:13:bc:9a:56:26:c7:39:ef:6c:d4:5c:7f:72:53:d5:
89:6e:b5:7f:be:51:db:0e:73:22:4c:39:9c:4e:61:10:e1:f2:
01:85:40:e0:d9:ef:ba:42:b5:74:ba:cd:d5:32:20:dc:d7:fd:
dc:a3:35:ab:c6:a1:a4:9b:c2:f3:5e:8d:23:bf:bc:48:72:62:
85:0a:3c:0b:49:d4:6c:9f:ee:2a:b6:64:ab:4d:be:d6:93:df:
9d:37:38:ea:be:23:e5:18:30:33:f4:56:e2:3e:11:ac:b7:38:
7a:0d:4f:da:9d:45:fc:28:2c:db:11:bf:f0:ce:58:34:f2:fd:
9f:fe:b3:fe:18:f6:d2:94:64:be:d2:08:3c:36:ab:84:2e:27:
ff:59:48:f6:fc:04:fa:cd:b7:df:78:50:63:8d:fa:c0:86:44:
c0:fb:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:27 2025 by rpki-client