Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa
File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json)
Hash identifier: fbvP/8VKKHArIRWm5ZDTSHh92g+wcxb/YYxyf5MKifo=
Subject key identifier: F3:A4:DE:A6:F9:07:FF:EF:96:84:13:1E:12:A1:26:38:86:3A:A4:41
Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Certificate serial: 010D0C9F432858481F651E297562E6772AE05800
Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 46979
IP address blocks: 173.225.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:1e:29:75:62:e6:77:2a:e0:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=22888cf4-5d36-4023-b9fb-a4012a129256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:c1:9c:38:c9:ac:d1:4b:5e:7b:8e:04:55:
5d:25:48:d2:50:00:59:8c:94:d6:0c:ab:e4:c0:ad:
64:f9:57:d5:6f:af:8d:83:2f:a2:34:46:6c:87:df:
a2:c2:a3:2b:01:f6:0b:d9:9d:5f:db:3a:a1:d9:8c:
58:f2:02:e5:ce:ad:8a:f2:8d:e0:86:28:a1:df:37:
62:11:5f:96:40:c2:b3:8b:eb:2a:40:a7:5b:cd:9d:
0c:b3:af:da:a5:a9:0c:74:9b:f0:86:df:2f:cd:45:
ce:1c:49:b5:8e:a2:b9:34:0a:7c:8b:6f:42:d1:90:
ff:cf:6e:68:a4:5c:69:69:c2:9f:0e:2a:a5:93:b7:
fd:82:10:9a:ea:1e:49:80:ae:e0:0a:e4:9e:f9:7b:
5b:9f:14:1c:b4:c4:f7:86:6f:5b:fb:6f:b2:6c:29:
c1:c4:c6:80:8c:d7:37:ab:96:4a:0c:f9:c4:76:31:
d0:cc:45:13:90:9d:3f:d7:62:46:02:b4:fa:57:58:
a6:d7:cb:c3:eb:6f:d5:d5:dd:aa:08:46:94:40:61:
a3:dd:5e:d8:da:3b:c1:63:d6:f5:02:06:f0:6b:0e:
ed:77:2d:5f:60:84:41:40:19:3d:40:d0:19:f7:55:
8a:4a:3e:02:71:fe:fc:7a:4c:08:4b:75:4b:81:b8:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:DE:A6:F9:07:FF:EF:96:84:13:1E:12:A1:26:38:86:3A:A4:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl
X509v3 Authority Key Identifier:
keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8e:ad:c0:c8:19:3a:5f:63:76:e6:2c:81:4d:ca:bd:98:b1:
63:fa:03:e9:1d:32:f8:d4:68:45:c9:16:64:5a:4a:d0:29:38:
87:31:57:c1:5d:38:82:74:f9:c4:23:0e:2d:65:c7:c9:29:9a:
73:25:84:b7:27:a9:4d:68:0d:69:a7:3e:08:89:0b:63:58:00:
d7:3c:11:7f:aa:a2:69:9b:10:eb:4e:52:ff:f5:9d:3a:06:ae:
06:64:1a:13:c0:08:d3:47:e9:6b:62:08:54:ba:08:e7:6e:32:
54:eb:0f:fe:da:b1:9e:ce:51:db:5e:ae:0c:a8:53:b5:49:9c:
a8:44:17:9c:92:f3:0f:31:71:75:24:f4:1c:40:08:03:be:19:
7c:11:e0:23:53:32:5e:2c:b0:9e:06:4b:ca:f1:47:11:df:76:
55:e3:c6:41:d3:51:be:89:aa:06:2c:08:07:59:83:f4:06:9f:
a1:95:40:61:74:5d:76:cb:b7:bb:15:5b:61:21:da:72:1f:5b:
ea:de:6d:93:72:41:13:d1:7a:8f:c2:d9:14:69:2a:2f:94:a8:
b5:e7:74:0b:dd:72:fe:b3:39:db:a1:c7:0d:5b:4e:0b:3d:95:
af:62:7b:3e:c6:e5:e7:98:ae:44:3c:81:dd:dc:d1:ad:5f:c6:
c0:88:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:13 2025 by rpki-client