Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json)
Hash identifier: 6rljWf+EcU6yOETO3ztEPV+vcHJ7vkMsr5fDRy8IVJQ=
Subject key identifier: DA:E7:2E:FA:0E:67:9C:D1:01:E7:DB:8D:40:D3:AF:64:5A:C8:E5:38
Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial: 010D0C9F432858481C9A83371E823AF48BEFC9C0
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 11550
IP address blocks: 173.243.176.0/20 maxlen: 24
199.96.120.0/22 maxlen: 24
204.89.253.0/24 maxlen: 24
216.249.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:83:37:1e:82:3a:f4:8b:ef:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=61372bc2-2d0e-494e-9f6e-f4fc88067822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:9a:98:44:ac:5b:2d:f2:2c:ae:ce:23:b6:
c5:30:4f:07:37:32:72:19:76:0e:91:4f:57:c8:d5:
71:ea:25:e9:42:89:e1:af:42:c7:c5:79:45:f3:d5:
20:8f:5a:17:11:a9:1c:52:1a:95:2f:34:47:ae:47:
8c:0d:65:6f:7b:09:b6:52:76:9a:bf:05:25:a6:f9:
fa:81:87:c3:44:d4:e5:d6:90:66:7b:ea:e2:b2:57:
60:34:06:99:ec:ef:43:ac:00:a8:22:4f:a2:df:bb:
f7:39:4d:cc:85:fc:8e:44:7f:1d:8b:06:59:c5:aa:
c3:48:1d:8d:97:85:5b:58:e4:51:a9:73:76:24:b8:
ab:6b:40:9e:6b:05:b3:63:3c:5c:55:62:86:ab:5c:
fc:ab:60:6b:2a:25:26:15:ea:77:c5:b7:69:35:1c:
6c:b4:68:33:23:18:31:76:e1:e8:ea:9f:ad:75:19:
ab:a7:45:a8:f4:4e:d5:ff:7c:23:05:ec:86:cb:7e:
f5:45:87:e9:3f:b6:c3:eb:25:c9:41:6f:9d:ac:a8:
a7:69:b9:1f:ab:29:54:13:8d:00:ce:b7:57:fa:e1:
87:b5:2e:5c:ae:7b:5c:5c:7c:3d:aa:6b:2f:a5:2c:
80:7a:2c:56:45:60:74:38:a6:a2:fc:7e:01:55:58:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:2E:FA:0E:67:9C:D1:01:E7:DB:8D:40:D3:AF:64:5A:C8:E5:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
X509v3 Authority Key Identifier:
keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.176.0/20
199.96.120.0/22
204.89.253.0/24
216.249.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7a:49:a0:ad:dc:d0:af:38:58:f3:a9:28:8f:56:d9:c5:b5:
2d:36:a5:6a:f2:bc:7c:45:7a:e2:8d:00:f1:0c:c5:b8:07:eb:
c8:88:7e:be:54:55:d5:4f:b1:78:87:e8:d6:03:b8:34:bb:eb:
08:2c:eb:f4:23:e2:d6:95:fb:de:d3:30:bf:38:ab:f2:62:b4:
de:cc:e8:58:89:1c:07:d7:b8:56:ad:6d:93:10:01:71:24:e6:
71:09:74:f4:59:aa:35:c6:1d:5f:b5:6c:79:05:b3:91:ad:a4:
41:60:48:3a:60:fe:9e:53:b8:02:0f:a7:1f:5a:09:3c:53:e9:
c5:c8:98:54:af:c6:8a:f0:7c:9e:10:90:11:c8:d6:73:6d:43:
7c:c0:5c:ed:d1:80:18:0b:1d:be:52:f6:e2:da:07:47:b4:fb:
65:ed:a4:aa:bb:41:28:a8:3a:ad:78:95:44:d3:90:64:49:3a:
6e:ca:8f:4e:75:b9:80:4e:88:ff:a5:ce:c3:e0:7f:f5:07:19:
f1:f2:a1:c7:7c:c4:50:9f:09:90:6c:28:73:b9:76:f2:f8:01:
83:09:8b:2c:64:25:cc:7c:2b:73:c9:f0:3d:c8:aa:69:72:d0:
9b:1f:40:80:22:1a:5d:7a:0e:d5:46:76:de:28:91:91:6c:31:
1a:cd:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:32 2025 by rpki-client