Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
File: fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa (raw, json)
Hash identifier: YPCkPKoNNKU02VMGvOxKSWBlvyLmnwoB/sn9KbRbLXY=
Subject key identifier: 6B:AE:22:36:BD:D1:A5:1F:AF:E9:99:11:9A:BE:E8:EC:48:0A:DB:20
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F43285848773BDF676BC932AF2AB52440
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
Signing time: Tue 07 Jan 2025 13:08:43 +0000
ROA not before: Tue 07 Jan 2025 13:08:43 +0000
ROA not after: Mon 07 Apr 2025 12:08:43 +0000
asID: 9009
IP address blocks: 172.85.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:3b:df:67:6b:c9:32:af:2a:b5:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Jan 7 13:08:43 2025 GMT
Not After : Apr 7 12:08:43 2025 GMT
Subject: CN=e30e12c4-d2a5-4fe1-b203-e61f6267598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:6c:8a:18:6c:4d:2a:ef:7c:fb:c7:12:bc:
63:8d:8f:2e:7a:7c:5a:be:8e:17:bc:14:c2:5a:32:
9f:68:52:e6:8a:a9:b3:6c:fc:57:8f:a7:76:3f:a7:
7b:61:8a:cc:96:84:08:33:30:0c:5d:79:bc:ac:f5:
02:3f:e7:ea:38:92:0e:91:bc:2c:49:c2:9d:5b:bf:
1c:ef:d7:97:5c:d9:7e:1f:58:53:2a:4b:1e:a0:de:
c6:97:ee:5b:1b:f1:44:3a:92:9f:69:c2:88:6e:da:
88:10:fd:8d:a5:60:ab:36:0c:04:b9:07:17:2e:a1:
3a:a2:90:e9:55:4b:87:6c:3c:7f:63:65:9d:a7:b7:
51:52:53:a8:28:33:90:3f:6a:71:9c:93:75:a7:9c:
33:4d:b1:8b:76:0f:d3:0b:4d:44:60:9d:6c:ff:cf:
1b:d2:43:28:e9:4b:cb:3a:58:02:6f:05:32:a8:df:
26:f5:8b:1d:bc:ed:89:51:db:82:dd:ef:9a:01:5a:
ee:4e:ca:c5:b1:32:71:62:8a:1a:f2:92:ce:03:81:
c1:9d:8f:ec:52:10:7d:06:72:be:30:1b:83:93:9a:
52:4b:87:d0:0c:d2:8e:0f:95:b2:f8:67:48:30:13:
ba:c7:85:5e:f2:ec:f2:b3:fd:53:44:7f:38:b5:80:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:22:36:BD:D1:A5:1F:AF:E9:99:11:9A:BE:E8:EC:48:0A:DB:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:06:9c:54:16:fa:45:f2:7e:26:d9:8a:5d:50:68:13:92:80:
5c:f6:ca:e9:69:56:e1:4e:f1:16:e8:77:ba:8d:1c:ad:e9:a4:
40:5f:a4:8d:2a:c2:8f:c5:cd:3f:a2:84:8c:16:19:e9:7d:7b:
3f:b3:cb:2c:7c:12:b1:be:80:a8:76:bb:ba:de:5b:8c:ff:4a:
a5:58:7a:0f:43:d2:bc:cd:fa:11:3e:7b:89:0a:4e:28:9a:aa:
60:97:b7:a3:24:b1:dd:1b:37:4e:ad:87:c0:36:48:f6:c3:1f:
aa:71:83:cc:36:62:47:f4:1b:e1:28:9c:2d:01:c7:2e:44:87:
d6:34:b2:59:e6:74:2a:87:3e:05:fb:32:9e:4d:bd:77:b4:9d:
15:17:40:1f:b5:fb:b9:62:16:65:39:de:93:a9:42:88:e1:24:
24:75:6a:cb:7c:85:b5:06:ce:d7:31:a1:73:a5:4f:09:e3:c5:
13:0c:16:f5:31:73:a0:82:b4:e1:2c:8c:4f:69:bb:50:c9:dc:
9a:03:30:bc:c4:44:6f:c8:ad:1f:57:75:90:9d:e0:c4:86:0c:
ed:ab:b7:3c:7d:d1:c4:ea:65:ed:df:72:b7:89:fe:a9:2e:3a:
23:f7:a0:20:ac:55:1f:bc:2c:d9:61:7e:f9:36:53:69:ce:78:
74:ae:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:32:45 2025 by rpki-client