Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
File: 3b2baeea-9ebf-3e73-8198-bfb726dce325.roa (raw, json)
Hash identifier: BvpCuNI+v+Qo6FmXRdo11sDOvNA+q974AWoBboWvAR4=
Subject key identifier: F0:8C:56:52:26:6D:B4:61:D6:19:BC:33:8A:C6:72:DA:89:C8:8E:AD
Certificate issuer: /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial: 010D0C9F4328584819CFC2EDEE1313AF4B94DC80
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 22996
IP address blocks: 173.241.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c2:ed:ee:13:13:af:4b:94:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2ac2c6ad-9fc2-41e0-ae48-6f308bae2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:70:08:dd:83:b4:40:82:4f:77:8a:ae:5b:
dc:52:83:d4:38:49:7f:3f:85:ae:eb:8f:78:16:de:
6c:36:85:26:d7:7d:5a:3e:96:3d:43:ca:15:3d:ce:
02:88:af:c0:de:61:9a:3f:26:9a:ab:07:09:86:d2:
16:eb:a7:6c:eb:e9:78:79:8d:69:36:65:45:1c:c3:
2a:b3:8d:b8:2b:a3:a2:46:13:07:b9:da:6a:13:43:
a0:e1:5e:ca:fc:5c:b5:fb:c3:5e:ec:4d:d4:78:40:
5f:e4:42:87:1d:8a:91:be:a0:ed:17:db:b8:35:37:
ba:25:fa:da:6a:fd:70:a6:d1:a5:80:39:7d:ee:9d:
60:24:64:cf:92:4f:d8:a4:30:9a:f4:63:f4:82:8f:
3a:a0:36:0b:79:6e:c5:cc:06:61:69:f7:57:98:1a:
39:bf:75:4c:9f:33:2e:5d:cd:a0:e2:f4:bb:2f:b1:
c1:bb:fb:13:7d:af:08:33:c0:38:36:8a:96:5b:a2:
a4:19:bd:ef:fc:83:c8:18:09:8a:7e:6e:92:fa:66:
cc:36:61:ca:12:ee:e2:89:06:80:e2:36:8f:ce:48:
04:1a:c4:63:10:90:33:99:32:ef:86:8b:b7:45:06:
97:18:4b:d5:b6:5a:f8:24:6f:b1:27:ed:46:db:2b:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:56:52:26:6D:B4:61:D6:19:BC:33:8A:C6:72:DA:89:C8:8E:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
X509v3 Authority Key Identifier:
keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.241.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:39:47:2f:35:08:41:1c:27:54:f1:fc:9a:51:c4:f4:51:ad:
af:5d:06:d7:28:00:ad:f1:01:ad:6d:f8:78:c2:e7:f7:87:63:
fb:99:73:bc:c7:fa:4e:ac:81:71:c0:b8:84:a7:9b:06:07:81:
7d:0a:b4:79:c1:5f:a6:e1:c1:84:61:4b:62:54:43:99:24:92:
72:47:70:02:c0:34:c5:64:71:09:64:fc:1d:b2:a1:03:6a:12:
d5:fe:04:58:21:4b:7f:7c:ff:2a:98:69:aa:40:ea:fe:03:be:
df:a7:c9:ef:60:10:26:71:dc:0d:19:66:65:60:e2:aa:ce:17:
bc:70:b4:fd:aa:74:79:88:cb:2f:12:24:d0:2b:7a:ec:2c:64:
02:cf:fe:3a:b4:6f:a0:4d:3a:5d:a6:f9:4e:8f:1a:89:61:15:
7c:76:96:47:29:97:99:3d:2d:96:05:c3:7d:6c:18:53:6b:bd:
4c:4c:70:db:0f:bc:60:1f:b5:7a:3f:3c:e4:d0:2f:20:56:3c:
9c:24:90:6b:cd:1a:87:41:30:65:b4:17:ce:22:e9:d4:22:a6:
8e:a6:6d:8c:b6:7f:e5:1c:b3:7c:b3:9b:2c:e2:87:96:61:56:
84:81:31:a3:cf:cb:58:db:3d:2e:d6:2c:ef:6f:10:4a:3c:22:
f9:c9:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:55:54 2025 by rpki-client