Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa
File: e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa (raw, json)
Hash identifier: fQrq+WSPzbd8ZCf/ZQSeE3PvDyrpnDqpUd16vQp1ebY=
Subject key identifier: AE:14:C3:E3:63:FC:6C:BA:82:87:7C:32:D7:EA:66:2C:C9:D7:D9:71
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858487B85B92F123574104B2D7900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 9009
IP address blocks: 173.211.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b9:2f:12:35:74:10:4b:2d:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=b254e2c2-fb92-49d7-8c39-e236d110f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:92:2e:22:65:7c:9d:50:00:55:f3:3f:d9:
8b:3c:65:da:c8:94:b9:92:76:86:cc:ec:52:3c:1b:
92:2a:d1:87:7b:58:8e:9c:92:c1:6c:a7:7f:cb:91:
d7:91:be:fe:f6:57:96:7d:76:3d:de:52:41:a4:21:
07:25:49:74:de:2a:88:7d:21:9c:e2:33:10:69:11:
84:4a:a9:9d:f9:31:ac:c9:3e:b8:98:48:ca:1b:0f:
70:61:13:3e:b9:14:d9:f8:2c:30:b8:76:10:b3:67:
6b:4f:d0:c8:7d:37:cd:df:40:39:8a:5f:d1:ab:16:
aa:17:db:3e:ea:62:80:50:ed:20:1c:18:99:a8:f3:
ec:a1:85:9f:a9:47:17:16:27:67:bd:1b:19:38:41:
f9:09:eb:8e:4e:ed:2e:fe:c0:ac:c6:e3:db:32:ad:
f5:5d:b1:6b:c2:7c:9d:66:a9:73:ca:42:a4:c5:45:
00:a9:e5:64:8a:64:34:2d:54:9a:20:bd:eb:6f:b3:
fa:d7:70:1f:a8:fd:ec:af:a9:d5:70:bc:5f:22:9a:
65:13:65:3d:a7:91:2b:59:12:c5:2d:5e:fc:e3:72:
c3:9f:79:be:43:25:c5:d5:77:09:bc:79:59:aa:a1:
2e:dc:a5:bc:48:0f:86:f7:18:cb:8b:ac:34:49:d9:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:C3:E3:63:FC:6C:BA:82:87:7C:32:D7:EA:66:2C:C9:D7:D9:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:03:60:2d:f3:a0:c2:49:ed:eb:fe:29:f4:2b:31:6f:8f:11:
9e:c4:c3:01:f7:3c:34:3b:ff:c2:cf:c0:c8:b3:00:98:a8:b0:
73:b3:ae:52:40:6b:d6:94:4a:65:81:f4:a3:06:fe:1a:95:a7:
39:ad:58:2a:a2:80:90:fd:09:e0:ab:60:49:52:3f:16:3b:d8:
3a:53:b6:ee:5f:cc:ba:5f:90:13:52:55:60:2c:b4:3b:e9:cf:
38:28:d3:36:c4:72:dd:d8:06:1b:87:af:86:23:f9:ac:3d:ad:
76:3a:0f:83:db:25:9a:ac:b9:fa:18:97:1d:30:33:18:4d:6e:
01:c0:df:18:ae:c4:bf:dd:a9:ee:98:a5:85:4c:4d:83:40:2c:
23:57:74:63:76:9c:33:c0:9c:b1:33:ef:09:a4:c7:18:04:4a:
26:af:e6:48:b7:5b:6b:b8:8f:e8:e4:7d:3f:c9:10:3a:62:7f:
02:58:6e:66:fc:e8:0d:dc:32:90:99:66:ae:db:35:5b:72:13:
ef:9c:b2:f0:33:a5:7b:b2:30:8f:9e:e5:1e:16:99:92:b5:30:
ca:86:cb:71:45:1f:0c:56:35:1d:0a:83:91:99:d9:e1:30:1a:
5b:f8:3d:ac:f4:91:13:97:51:92:97:84:53:e5:29:2e:cc:89:
9c:ee:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:53:05 2025 by rpki-client