Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e5f257-e651-3dc6-a3f3-642b59c2a769.roa
File: 25e5f257-e651-3dc6-a3f3-642b59c2a769.roa (raw, json)
Hash identifier: ywcCJ2SzZDgTJGD4NHnhNg5tNaCduWaVPMYyVB184g0=
Subject key identifier: B0:9F:06:CA:6B:1E:9B:36:8F:AE:A2:C9:01:B7:18:E0:8E:87:74:D7
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285847F691DC0C0095F27FD513CE90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e5f257-e651-3dc6-a3f3-642b59c2a769.roa
Signing time: Fri 22 Nov 2024 11:02:42 +0000
ROA not before: Fri 22 Nov 2024 11:02:42 +0000
ROA not after: Thu 20 Feb 2025 11:02:42 +0000
asID: 204957
IP address blocks: 172.120.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:91:dc:0c:00:95:f2:7f:d5:13:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Nov 22 11:02:42 2024 GMT
Not After : Feb 20 11:02:42 2025 GMT
Subject: CN=99be259a-6dc8-4def-8557-085b76e5778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:0d:17:16:3e:42:4c:b7:fe:8e:1e:3b:7c:
44:54:eb:3c:3c:2f:0e:5a:d2:99:10:50:36:45:ad:
8e:31:31:c5:78:ce:3a:2f:1f:c9:a2:85:40:6d:e1:
1f:fd:26:a0:ca:fc:a6:af:1a:c5:be:88:b1:f3:de:
d3:23:20:bd:70:63:29:4e:e3:b7:b2:23:57:01:e2:
8f:db:78:ca:7e:b0:79:be:71:a8:91:ef:56:bd:95:
54:d8:ca:31:55:7d:90:73:c5:d6:13:8e:8a:7c:d2:
b8:33:ec:12:f5:7d:64:b5:38:27:39:da:bb:b3:a6:
57:cd:ff:56:34:9d:95:d9:83:e1:f3:bc:fa:78:51:
b2:39:fe:3b:c3:70:8c:ba:26:82:ba:37:d7:4b:b9:
9b:60:aa:5c:6f:6e:13:9d:ee:ce:62:62:cc:37:f2:
b2:85:36:3d:f4:32:44:a6:b8:7d:36:ad:e8:42:7a:
03:09:b7:d1:25:04:f5:ca:16:6d:17:9a:13:90:3e:
66:fd:91:cc:0a:a0:8e:55:ef:da:cb:64:05:00:99:
0c:1f:ba:77:8b:a8:ae:43:11:a5:6e:b9:02:e5:61:
10:52:0e:46:02:c5:52:02:7d:49:11:f3:87:5d:a1:
73:73:b4:f3:f7:ec:ff:89:6c:6d:ac:27:ce:53:9d:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:06:CA:6B:1E:9B:36:8F:AE:A2:C9:01:B7:18:E0:8E:87:74:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e5f257-e651-3dc6-a3f3-642b59c2a769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e1:97:6b:1a:c3:66:f1:e6:80:8b:f6:15:2c:3b:75:9c:2b:
a0:69:1d:3d:a0:36:7b:f8:2d:c0:de:c4:f7:70:1c:75:8d:1e:
89:b2:c7:f8:33:37:16:d2:14:81:e8:23:ac:10:79:24:f4:77:
60:b6:2b:a0:0d:85:39:ad:5b:5f:3a:fb:dd:ec:c4:8c:10:8c:
5e:cc:5e:c4:57:05:44:75:36:0e:69:36:a1:1f:e7:e8:35:52:
51:aa:d5:d6:fc:e1:79:51:92:4b:c0:52:3b:5d:8c:ce:ca:79:
66:78:5e:cb:aa:ef:a0:49:8f:7c:66:41:47:79:9c:01:e8:bc:
38:34:95:32:2f:07:77:30:47:9e:c3:5b:66:5c:82:38:88:dd:
f0:2c:8a:4a:0a:51:7f:7d:88:17:f2:c5:ed:58:ed:3e:22:cc:
70:8e:34:32:a4:dc:1d:c3:68:f6:fc:53:a0:8a:dd:37:74:76:
ae:bd:67:41:83:57:e6:d3:59:88:0d:8c:25:bb:4e:50:53:4d:
83:e6:3e:96:8f:00:e7:6a:48:03:eb:68:c3:0f:6f:dc:6f:8c:
87:aa:e5:8b:0a:79:a1:f2:23:d9:1c:55:b7:3b:cc:60:92:ff:
d5:4b:e6:c6:6e:1a:19:84:b3:3e:e5:98:e0:0e:c3:a2:5b:0a:
86:fc:fb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:02:32 2025 by rpki-client