Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
File: 4c84f840-5512-38ea-ab51-9bcc058dfef4.roa (raw, json)
Hash identifier: 7jRgJKqfVTBz7F0g+5p/KcYbMJdzyN7oLKiK7PYI70c=
Subject key identifier: 25:AD:37:D6:FE:8A:AA:A1:11:57:97:52:0F:2B:00:8A:23:2D:A0:D7
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F4328584819CFCEFDB90D9ACA41CF0580
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 64236
IP address blocks: 142.147.96.0/22 maxlen: 24
162.251.120.0/22 maxlen: 24
172.96.8.0/21 maxlen: 24
192.188.88.0/24 maxlen: 24
204.10.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ce:fd:b9:0d:9a:ca:41:cf:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=dc1c0bee-b04a-4031-9d76-338af52ba37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:54:ce:bf:b5:ab:f3:0b:32:45:55:18:40:
e6:05:ae:19:7c:8c:2e:f8:b5:fd:c6:08:dd:83:ee:
f9:d1:5c:51:65:c1:33:f7:a9:3b:c1:a0:d0:2f:a5:
e8:46:fc:38:77:e5:a1:5a:93:11:8c:9e:27:93:96:
42:16:8d:1c:61:fb:bf:8e:da:d1:3e:0a:25:7d:f5:
6d:f5:23:19:e3:45:3e:de:b0:8a:cc:a4:2e:ea:a9:
3e:7d:67:10:60:81:0c:7e:ea:9e:88:eb:59:de:85:
21:a7:f0:eb:ce:66:98:87:15:dc:49:79:68:8e:55:
0f:82:32:ef:fe:71:96:b2:ef:25:ab:0a:18:53:18:
0a:65:c2:8d:f9:c3:a0:ac:a3:69:b4:ef:52:e8:6a:
89:e5:88:2f:ad:dc:ad:7d:d3:0f:a4:52:04:6f:cc:
6f:82:ad:f0:75:95:e6:0f:53:72:a5:e4:7e:f9:21:
9f:49:2e:a9:f2:7b:a9:15:fb:2b:28:cb:97:63:29:
a1:72:03:bb:a3:fd:a0:ef:0d:54:c2:c2:00:d1:b5:
df:af:e8:bc:80:4a:36:89:cf:71:9e:d4:84:a8:7f:
ef:80:f1:08:ef:41:79:7b:d1:30:df:f8:aa:14:af:
80:63:37:77:eb:2d:e6:3b:5f:ff:13:54:21:8c:c9:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:37:D6:FE:8A:AA:A1:11:57:97:52:0F:2B:00:8A:23:2D:A0:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.96.0/22
162.251.120.0/22
172.96.8.0/21
192.188.88.0/24
204.10.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:94:ea:47:97:f8:43:d4:f4:3d:87:c8:05:78:ab:9f:e4:b9:
83:fb:4a:ef:4d:6f:7b:8f:3d:82:0e:9d:97:5b:3d:03:bf:72:
61:a1:3f:c9:7c:2e:97:38:7f:d9:fd:9a:4d:c3:e2:29:5e:c2:
5f:2b:f5:b5:aa:f6:28:b1:33:fd:93:91:a1:ee:e0:cb:d2:2c:
9a:6f:72:52:58:75:fb:a1:32:3d:89:14:38:7b:ca:26:ec:8b:
a5:f9:3b:57:3b:1d:79:b5:75:95:9f:2c:23:1c:94:ff:aa:73:
e5:9c:4d:b6:2a:24:62:2a:7d:74:04:2a:07:33:eb:18:aa:97:
67:00:08:f8:b6:85:3d:54:ab:8f:8a:57:32:ae:45:3f:55:4b:
d4:db:ed:c0:91:51:09:3d:1f:69:06:74:d5:d4:02:6f:48:db:
13:56:e5:bc:72:79:2a:2b:8b:a8:6b:77:2a:ad:45:b1:54:11:
ab:26:9d:62:a5:51:cd:2c:c1:3a:79:64:a3:46:c2:30:21:94:
a8:f7:2a:fa:8a:84:df:5c:10:42:e8:8d:69:aa:45:c2:87:0b:
ef:e1:e2:7a:50:3c:bf:ab:96:30:4e:c4:34:a3:dc:79:0f:59:
6d:a0:cb:82:0f:52:b6:32:69:04:65:6c:76:a4:ea:3c:fa:2b:
3a:75:78:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:26 2025 by rpki-client