Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa
File: 9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa (raw, json)
Hash identifier: fRVy8jQNeLAn4iMKbil2LZRUbBTioHPZZ4crmX1Eta0=
Subject key identifier: 99:E2:42:90:17:0F:7A:34:B1:92:98:D2:6A:8A:61:89:59:19:86:45
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858480BDA5855CE08A98196C80140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 7029
IP address blocks: 172.120.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:58:55:ce:08:a9:81:96:c8:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=c2c45c9c-1f37-44e1-8f2b-cbf4a44b8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:59:1f:23:45:52:eb:83:22:72:c7:f9:7e:
b8:ea:2f:b3:82:40:e2:2f:85:6b:84:c5:8c:33:78:
51:3e:e8:3f:f8:e3:b9:30:39:5d:0e:36:c2:10:57:
4b:51:d3:16:92:ba:d3:38:9a:10:ce:14:63:2e:6f:
f5:a2:4e:1d:e3:a3:59:ff:e4:23:7b:36:6c:52:32:
d3:a6:56:70:08:df:d3:ca:0f:f8:cb:1e:95:56:65:
b9:39:f8:5e:29:d3:4a:3c:03:c4:9d:ae:bb:73:25:
5f:6e:7a:c8:6b:33:0d:c4:23:47:28:a2:a3:1b:7b:
db:7a:a3:1a:ca:95:e6:26:c7:0e:45:28:5b:c7:9b:
52:47:e4:a8:a1:f5:f5:47:00:49:68:0a:c9:b7:5c:
bc:b7:b8:ee:56:15:06:42:c6:09:d3:50:7b:ba:f5:
75:99:5e:51:91:b4:cc:79:37:33:01:10:69:7d:87:
b1:87:30:2f:54:a8:51:cd:c5:37:be:0a:19:a4:c5:
ee:31:89:8f:75:35:e1:ec:42:84:c0:71:47:06:29:
74:24:55:b4:59:2c:46:46:44:b2:a7:27:07:91:8e:
6e:bf:3e:66:09:a0:74:2e:c6:74:6f:83:ce:1f:1a:
d6:26:42:14:05:e0:e0:a5:2c:a5:f1:b6:ac:f3:1f:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E2:42:90:17:0F:7A:34:B1:92:98:D2:6A:8A:61:89:59:19:86:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f1:73:88:e5:b0:02:74:2f:ab:23:83:f4:23:0e:c6:a9:91:
2e:6d:0a:77:9f:62:10:c6:ac:4e:db:d3:a7:01:90:b0:ce:3c:
01:57:77:fc:d2:4d:bb:41:c2:dc:da:c4:76:7a:47:62:39:e9:
af:e6:96:3b:e9:63:41:18:b4:06:e6:31:38:24:4f:7e:ec:50:
85:d3:1d:54:0f:bc:88:f5:a3:27:0b:4d:08:1a:27:7b:1d:b2:
ce:f2:67:a2:a6:b7:2e:00:cb:a7:42:1c:71:c6:77:d5:a5:79:
2f:7c:73:fd:8a:e8:de:1e:fb:ad:3f:f7:36:b1:19:f9:a7:30:
f7:4f:e9:cd:06:d1:3e:f1:c5:4f:11:9a:d4:b7:92:f1:4d:5d:
92:56:ad:50:fc:c4:54:54:40:13:14:55:a2:dd:3e:4e:1c:cc:
21:37:5f:9f:70:02:58:1e:52:c6:c6:91:61:3f:f7:7e:1c:7d:
ca:b3:d9:d0:9b:13:ec:6b:99:e8:36:ea:8a:0f:6b:98:23:90:
cb:a3:8d:3d:63:4b:9a:ce:d5:02:da:07:1b:f7:04:53:e7:83:
d8:52:4e:f4:82:07:fb:de:af:2d:60:e6:bf:75:5d:ce:41:d9:
38:d7:85:1f:49:5a:63:f2:6d:a3:30:c9:f1:31:3d:15:2c:10:
ec:37:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:42 2025 by rpki-client