Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
File: c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa (raw, json)
Hash identifier: dYS6LhMfZIHKsJGhiGfG52oUzC/YtptuR99GziFcrsE=
Subject key identifier: 9D:AF:57:23:85:8D:A7:A3:90:C4:C2:19:FC:0D:C8:63:73:F8:8C:E5
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F43285848222FDD8398862FE6E4308800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 11260
IP address blocks: 173.252.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:dd:83:98:86:2f:e6:e4:30:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=6f0d4eb5-87fb-49e1-b595-ac100194857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:5c:7f:fa:a6:ae:c2:c8:51:fb:da:02:03:
43:77:75:5f:1b:0e:94:07:ee:1f:50:2e:39:3b:66:
86:98:65:56:69:03:a5:1a:3e:c6:67:98:63:99:15:
46:5e:d1:f2:fd:b0:32:0f:fa:80:5d:42:64:83:18:
f5:1c:87:04:30:e4:73:66:72:5d:99:95:76:12:a3:
22:dc:d9:be:01:14:76:99:c1:d7:1f:78:13:e6:f4:
55:6a:8c:87:ac:5b:6d:3f:25:2c:2d:b1:98:d6:86:
bd:59:ef:e2:ad:13:1e:9a:49:ca:92:79:d5:c4:0d:
5e:d5:27:07:6e:11:cf:1d:4f:8f:a5:e8:76:3e:91:
ad:00:ae:aa:e3:04:e9:2f:5c:43:e8:a9:6e:d8:ae:
be:e0:c2:e2:09:f3:60:db:1e:50:bf:cf:72:89:fb:
00:59:a6:64:40:63:4d:74:43:72:35:72:26:5d:76:
5d:31:f0:dd:09:36:5f:d4:ca:d7:1f:0e:ec:32:cd:
c9:b3:d6:91:f9:d9:a8:27:2e:de:1b:9b:e2:7d:86:
1f:27:9e:23:44:59:a7:56:8e:a7:ca:39:21:22:5f:
d2:22:f1:fd:f2:2a:cb:75:e9:2a:65:b0:ee:7b:c8:
f1:72:e4:9e:ee:58:55:25:ed:14:7e:d9:46:1d:6b:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:57:23:85:8D:A7:A3:90:C4:C2:19:FC:0D:C8:63:73:F8:8C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.252.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:40:c5:fe:5f:dc:80:c9:ad:1f:3a:9b:49:60:8b:97:e5:f0:
38:5f:31:18:2d:e2:d1:c5:ef:e2:9b:aa:c3:3f:15:e6:de:44:
3e:00:3a:d8:95:e4:f7:51:ba:21:4e:29:31:68:3c:6b:99:09:
0a:c7:86:11:27:7e:5b:b4:3b:4f:28:9d:51:52:1a:fe:a9:42:
fc:45:5d:de:dc:29:65:67:a7:91:a4:11:ee:e3:f0:69:9e:66:
28:a8:50:f2:3f:15:95:b0:ac:1a:c3:c5:04:c5:96:e4:52:37:
e8:19:d6:96:7e:4e:79:8c:12:82:d7:cf:b7:3a:3f:42:58:62:
a0:c3:ee:8c:c1:30:02:8f:42:09:ca:42:c6:dc:92:27:78:46:
c7:aa:f0:78:e6:21:07:99:5e:c6:ac:e2:7a:f7:74:bc:3a:16:
9c:c4:7a:9b:bb:89:b6:60:f2:17:66:26:30:38:50:ec:d5:16:
18:43:46:e5:56:17:6e:e0:d5:0a:f5:c3:0f:34:a3:7a:5b:50:
cd:a6:e7:02:62:8e:2e:91:99:ae:84:80:42:61:25:7e:cf:e1:
04:46:60:31:4a:a2:85:53:a0:8c:f5:31:fc:04:f5:60:c7:d1:
95:48:2e:9b:15:10:9f:cd:18:0c:c3:0d:9e:06:57:da:9a:43:
c7:60:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:01 2025 by rpki-client