Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/7bfff03c-d311-3a98-a01a-26496c928f2e.roa
File: 7bfff03c-d311-3a98-a01a-26496c928f2e.roa (raw, json)
Hash identifier: QDv8ExEC+OFTWOIe1GPiHbQbZ3XGYdvDP96S6OGMMyQ=
Subject key identifier: 03:B2:E1:73:3B:6F:0D:12:D3:EC:A5:80:E5:26:A8:D0:07:D4:04:8B
Certificate issuer: /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial: 010D0C9F43285848854B4CCE4DE76A7F9910BF00
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/7bfff03c-d311-3a98-a01a-26496c928f2e.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 168.238.4.0/24 maxlen: 24
168.238.5.0/24 maxlen: 24
168.238.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4c:ce:4d:e7:6a:7f:99:10:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=f4ea0e63-b8cd-45bb-8ba0-de0ef6eee68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:94:24:fa:cf:86:c2:6a:3d:f6:c6:0f:18:
18:28:93:8d:33:4b:08:86:8f:72:fe:87:3b:18:51:
f0:6f:ce:cb:08:09:97:bf:95:66:43:56:bd:11:cd:
28:f2:be:ce:d2:5d:f6:7a:3d:3a:91:af:3f:cb:75:
70:ee:14:7f:a5:e0:3f:9f:a6:de:3f:3d:52:ba:15:
be:8e:5a:d8:78:df:e1:5e:9c:c0:a4:42:18:2b:8f:
9d:00:64:3b:64:99:38:d8:75:37:7f:7b:0a:07:ff:
f0:f3:99:ef:a6:24:ba:03:2f:78:89:3b:52:49:4f:
31:61:17:0c:a0:42:30:ce:11:42:95:35:b1:8c:40:
29:23:d4:8d:1c:56:66:2e:b7:b7:7a:ed:52:e8:6a:
90:1a:60:25:ee:4b:a0:4a:89:ea:df:01:e9:67:cf:
27:f1:ea:d0:32:4f:a2:5f:22:4d:b9:10:30:fe:88:
d9:39:5b:b0:50:5e:33:3c:e3:45:9f:5a:0d:86:e6:
d3:05:30:1d:9d:43:f8:c0:b2:cf:db:51:d0:a3:be:
db:cf:c7:2b:d4:c5:11:0a:ce:a9:38:43:9d:52:ab:
c4:b3:d2:9f:c2:e0:e5:7d:89:17:4f:c3:1e:42:32:
dd:56:dd:ce:ea:4d:3d:14:3a:16:aa:01:89:e2:3c:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:E1:73:3B:6F:0D:12:D3:EC:A5:80:E5:26:A8:D0:07:D4:04:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/7bfff03c-d311-3a98-a01a-26496c928f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
X509v3 Authority Key Identifier:
keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.238.4.0-168.238.6.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f8:c4:37:05:0d:55:e2:a6:23:e3:c7:23:f7:3a:48:48:34:
6d:1c:52:ef:cf:27:11:39:6e:4c:83:7f:2d:aa:6c:98:91:80:
5b:81:98:6c:46:15:be:4f:44:72:c5:2c:f0:c2:5c:6d:f6:b2:
37:a5:c3:5c:fd:f2:c2:b3:ce:41:4e:8c:5b:b0:a5:2f:92:c6:
ea:3d:0d:f3:bc:e4:03:24:47:db:38:30:ed:bd:d5:17:1a:b7:
65:a2:51:66:4d:6a:00:c9:2e:15:35:97:87:1f:60:e1:3d:57:
25:05:65:37:9d:c0:fd:37:e6:79:86:1e:32:27:c1:15:cb:ed:
b6:bf:fa:6b:c7:b7:be:a6:fd:21:7d:86:62:e0:22:f2:3f:d6:
2a:5f:36:bf:f0:af:da:e0:50:41:ec:d8:14:2c:46:27:6e:99:
e6:b2:09:62:a6:dd:3b:0f:91:5c:85:cc:99:3f:8c:af:65:a6:
c0:1c:e8:e3:2d:e3:3b:d1:f3:ae:f0:5a:77:59:9e:8a:4f:38:
a7:8c:9c:46:34:c0:b0:87:d2:17:80:f5:18:7f:7d:13:7f:07:
0b:16:4b:bd:2d:f7:6e:52:82:d1:8e:05:c6:1e:87:eb:bd:43:
34:99:04:4f:96:70:61:51:d6:0c:07:7b:cc:92:87:05:44:ab:
c2:fd:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:49 2025 by rpki-client