Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json)
Hash identifier: mwUtCq7zq6Eycrd7MKB0lhIxZAOumod+GPT3eoDqkBw=
Subject key identifier: 27:83:58:8F:58:F4:8C:E4:B7:D5:E6:77:F3:1A:40:FF:C2:33:90:43
Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Certificate serial: 010D0C9F432858481F651CF586C071AF9612EC20
Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 46979
IP address blocks: 173.225.0.0/21 maxlen: 21
173.225.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:1c:f5:86:c0:71:af:96:12:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=38d13e0b-e2e3-4b6f-976f-4924932eac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:f8:ce:1a:ec:f1:1c:7d:a1:62:6c:21:4b:
9f:16:4b:c7:de:98:fc:12:66:0c:85:52:b7:65:3a:
69:31:df:2a:97:f1:5b:9a:10:75:7d:5b:b8:3a:73:
44:7f:15:e5:55:e4:0e:f5:ce:01:0a:b2:1e:47:79:
df:47:da:f9:c4:0f:1a:5e:40:93:6a:80:52:54:f0:
5f:42:5e:e2:66:d1:25:35:bf:82:f2:2d:bf:0e:72:
37:f1:68:8f:f2:74:06:ad:03:a2:47:2d:ee:25:5a:
79:d6:da:eb:0f:0d:b1:97:44:ec:69:43:8a:31:64:
82:64:1c:44:af:e2:84:01:d5:1a:c7:22:10:31:86:
36:39:c9:1d:a8:d1:fa:4f:8d:a3:46:04:59:05:8c:
98:9e:ed:72:6f:70:18:bf:03:06:3f:ec:3c:32:08:
5e:6b:0c:b2:5b:fe:3f:f0:80:d2:d0:06:43:21:aa:
28:fe:0f:4d:9f:9f:9c:57:ef:18:d5:64:a5:f4:e9:
97:1a:bb:58:18:bf:3c:ec:52:b5:5f:e3:35:a1:80:
00:a5:9a:40:f5:16:d4:5e:3f:9a:4a:d0:6a:94:25:
52:e2:6c:f2:13:03:ab:41:f1:36:51:93:2b:8a:7f:
de:7d:99:46:99:6a:ec:6b:80:a2:3a:a3:45:f3:5e:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:58:8F:58:F4:8C:E4:B7:D5:E6:77:F3:1A:40:FF:C2:33:90:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl
X509v3 Authority Key Identifier:
keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:24:d8:b5:4c:06:93:aa:0a:b2:c7:90:71:02:aa:ed:43:20:
a5:8b:0d:aa:6b:75:1d:ac:3c:28:18:6c:ce:ca:63:f3:5b:47:
7d:e9:41:df:ad:f7:4c:5d:51:83:f9:ce:04:e0:8c:20:7f:0e:
e1:e6:b9:88:a4:c8:e9:3f:19:e0:b9:22:91:ad:34:8a:b6:0c:
bb:3e:10:f1:a6:34:29:30:af:e0:69:07:1f:1f:76:40:0a:c4:
09:ab:b1:58:27:4f:66:a2:b5:b4:ff:fa:f3:35:29:12:80:1b:
e6:3f:9b:fa:06:9d:63:48:50:aa:e7:4f:e5:c5:50:54:ea:9f:
49:be:f8:db:09:17:ad:85:ef:76:53:83:b6:ce:1a:f3:68:49:
36:34:0c:2a:f6:bb:60:c1:f9:c2:24:d6:7b:b1:1b:06:8b:cf:
e1:34:0d:07:b3:b4:bb:ac:90:c8:87:a1:28:a2:e5:00:11:96:
4f:83:a2:cc:63:7c:78:f5:06:a0:c2:d5:29:f2:75:1f:95:c4:
55:2b:1a:a9:a4:e8:40:56:27:e1:ec:cf:13:4e:60:40:b3:20:
fa:51:9c:cf:dd:91:b2:a2:2b:a2:89:44:ef:f7:09:7f:39:1e:
a9:c7:61:3f:a2:10:95:d0:98:0e:c4:9c:9a:14:2d:d7:cf:0c:
56:79:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:51 2025 by rpki-client