Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
File: c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json)
Hash identifier: NB1gvs+wkL3iCfQHPs6wPk5LWP/RssoHAxRW+lQVmEU=
Subject key identifier: 8B:C9:CC:AF:CE:8D:60:1A:3F:85:94:E4:9E:CF:EA:E0:B1:D8:2D:D2
Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial: 010D0C9F43285847EA5A13FCEA475958B9C07BC0
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 40495
IP address blocks: 174.137.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:13:fc:ea:47:59:58:b9:c0:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=30ca031a-890c-41e4-b84f-a298281a0ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:ae:ee:ea:43:c9:97:90:24:e8:ff:9b:e0:
90:ae:98:28:9e:d7:d1:4c:f5:e6:a7:bc:3a:55:4f:
95:e9:8a:2f:0b:7c:c4:74:9a:e1:17:5c:fd:52:7e:
9a:9c:bb:3d:d4:9c:16:aa:b0:55:91:d3:fb:bd:15:
cd:0b:5c:f9:ff:ad:d9:cf:3d:7f:80:10:6e:ef:cb:
d0:5a:06:90:c4:7b:ab:e7:24:a2:21:ad:70:bb:d1:
c7:9d:38:58:91:68:82:7c:ad:76:27:e9:2b:55:3a:
94:59:c1:a1:e7:a6:93:cd:31:38:c9:32:07:7b:99:
14:dc:5d:43:01:4c:2a:78:cc:53:8b:09:4a:a3:fe:
54:55:1f:d3:db:3f:84:31:42:5b:fc:4a:ac:ef:d2:
b3:4c:1b:d6:5e:87:c3:08:e0:0f:ad:89:3d:5d:a6:
5f:fc:f0:50:d8:c2:57:59:7e:8d:1e:66:c4:37:a0:
07:fd:14:c8:46:4f:9f:36:21:90:9b:4c:6a:9b:4e:
18:99:4d:f8:60:27:54:a8:40:00:83:51:49:d7:ed:
bb:91:a4:99:0d:98:6d:05:67:6e:aa:92:70:d1:7f:
cc:80:d1:0d:fe:82:f6:6c:e0:08:a1:38:85:4e:75:
6e:4d:47:8a:cf:71:c5:a1:a9:d6:da:a5:0e:78:31:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:CC:AF:CE:8D:60:1A:3F:85:94:E4:9E:CF:EA:E0:B1:D8:2D:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
X509v3 Authority Key Identifier:
keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:19:f3:f5:cc:11:7a:c6:93:a5:1a:bd:3a:52:c7:2b:1c:3c:
04:c1:85:f5:ba:05:4d:f1:10:51:c2:7e:61:65:72:7b:e5:11:
42:24:04:ae:1d:b2:9b:56:bc:a1:e1:b5:70:62:a1:c8:fe:31:
85:d5:d3:e6:f5:96:5e:a7:29:8f:81:d9:c1:ea:14:f1:cd:71:
6a:65:09:f6:b9:d1:ef:d9:03:71:c0:3f:87:15:bf:c4:3c:45:
70:a0:00:42:4b:48:ba:12:44:87:13:03:0e:56:0e:59:fe:bb:
68:16:d0:60:40:32:5f:4e:7d:d8:e6:7b:ef:36:7c:55:0f:a4:
84:85:08:13:ef:d9:eb:20:0e:2d:c3:a3:bd:34:e4:2c:83:6d:
b6:9a:e7:d6:c1:f3:48:ad:89:2a:5b:32:06:df:55:25:69:28:
80:f7:0f:47:ec:5c:df:09:8f:cf:ab:53:f3:37:bc:09:ac:69:
46:8a:36:0e:d0:3b:cb:67:9f:ea:59:53:c6:44:56:04:e9:74:
27:97:e9:73:84:93:00:1d:7f:84:14:55:c4:d5:e0:cf:58:b2:
0b:7a:b7:6d:fa:ec:52:01:23:0f:b5:22:21:7a:31:b7:a7:14:
68:2b:42:87:ab:09:3a:81:8c:e1:68:e4:84:64:39:f0:b0:e9:
bf:ba:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:05:19 2025 by rpki-client