Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa
File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json)
Hash identifier: Ylq2WzfVtfw+YKoSc9gqu/8TJY+nVEb2h/z6axAHpXk=
Subject key identifier: 8C:97:8B:E2:76:51:73:3A:B1:88:8B:94:C5:B7:BA:1C:25:56:76:C2
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DC649EF9299D09BBBF57D480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 852
IP address blocks: 172.219.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:9e:f9:29:9d:09:bb:bf:57:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=5c188389-e5d1-4825-ab7c-43f8d2d393a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:22:1a:77:f0:dd:e0:39:93:cc:06:95:14:
fc:ba:93:dd:8b:0f:76:08:c0:9c:10:b4:90:b7:eb:
df:33:65:fc:26:f0:65:42:7b:33:18:b4:45:c3:c6:
a4:ad:f3:54:9b:bc:64:18:86:95:a4:f2:51:c5:5c:
91:b5:63:28:17:4a:70:7c:8b:4e:0b:96:54:da:17:
a2:71:7a:a3:95:83:e9:d9:d6:fa:1a:08:20:db:38:
4c:9b:44:9a:0c:2f:00:d6:db:e8:41:52:fd:1f:1a:
d2:89:36:18:98:87:1d:7f:b3:2c:f4:e0:3f:14:dc:
4b:23:ba:d8:98:27:35:70:68:41:77:37:c9:9c:d1:
6f:3b:38:f6:82:9e:53:b1:17:88:0b:f1:94:5b:c8:
ec:a1:59:ae:61:96:51:fa:ea:3a:55:7e:d3:9d:a3:
fa:8f:64:d7:70:68:3d:0c:86:02:da:c9:e7:52:5b:
d5:66:8e:15:1b:41:5b:a3:57:83:28:e6:c8:49:9a:
5c:b6:c6:89:fd:72:24:27:f2:9e:13:4e:db:c8:d0:
db:87:41:a6:4b:4c:02:32:0b:d2:ee:04:37:0a:12:
e6:90:17:5d:66:ff:46:49:8d:64:83:aa:3b:f9:c9:
08:2c:3e:50:06:67:cc:a7:8d:11:fd:e3:59:1f:8d:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:8B:E2:76:51:73:3A:B1:88:8B:94:C5:B7:BA:1C:25:56:76:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
172.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ed:99:7b:d0:d5:78:aa:f3:11:9a:28:41:be:d2:fb:48:b7:bf:
1e:40:7f:63:37:46:4b:7c:07:40:5d:d5:3e:90:94:0a:b6:5e:
88:cd:e8:4a:8b:27:4c:16:77:19:41:d0:9a:c5:74:cf:c1:ca:
f2:07:a6:cb:48:67:57:79:40:28:89:89:2c:76:2d:69:71:f5:
a6:e7:24:f6:78:de:1f:ba:9f:c1:06:10:6d:5d:5f:7a:8d:59:
11:1b:3d:1b:12:97:dc:b9:a7:56:5b:9f:06:0e:26:5b:5f:04:
0c:a0:4d:3f:fb:d6:05:2e:9d:8e:8f:6c:1b:1b:83:17:73:d1:
52:56:8e:61:43:b8:6a:f3:94:52:f5:14:21:3c:ea:5f:a4:11:
28:94:27:c8:4a:fe:08:c1:07:29:62:f1:74:c1:69:91:95:4d:
23:43:d7:ef:b7:52:fa:a8:19:31:e0:27:a9:60:56:89:c7:0d:
1c:1f:7a:1b:28:08:c4:6c:de:b7:74:77:9f:d0:22:3d:a8:f1:
ff:0e:64:a3:00:a3:32:48:c9:6b:bb:87:c7:56:85:aa:cf:d1:
dc:17:c9:1f:7a:b2:da:a4:2c:13:06:4d:df:13:7b:81:c8:77:
bb:32:e2:52:b5:02:65:e8:fa:05:db:55:e1:87:d5:8f:6c:a2:
10:e2:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:00 2025 by rpki-client