Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
File: 73407e55-bb87-3af2-979f-f557fb0f4b02.roa (raw, json)
Hash identifier: fWVmoTkpfnWZiqDjsjCk2eB3rTOI8tl8apumI6u8n1A=
Subject key identifier: F2:BC:B7:EF:3C:E5:AC:85:A7:5D:D8:DA:DD:60:C4:4A:74:8D:C7:AC
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F432858480BDA79EEC5BC79FAAC53EC18
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 46632
IP address blocks: 174.137.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:79:ee:c5:bc:79:fa:ac:53:ec:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=f953ed25-4079-4b6a-93df-84b725c77302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:4d:ab:26:11:06:5a:ac:30:62:bb:4a:a8:
1c:bd:2f:13:04:25:36:dd:e1:e1:3e:82:a1:bb:2f:
74:2a:fb:31:8f:d3:82:76:b6:a7:8e:d5:b6:1b:aa:
a2:4e:20:94:c8:2b:5e:73:0d:0d:82:54:55:c2:43:
cf:3e:52:79:f7:ec:64:fe:6d:be:be:ff:9b:e8:fb:
96:8d:a6:b5:9f:c0:dd:7f:a8:e7:f5:f5:e2:4f:5d:
8e:04:4a:44:a1:ef:e3:6d:b9:2d:c6:57:4a:06:d9:
1e:f9:1d:ef:c0:9d:cc:e1:7b:de:3a:f7:a1:9d:9d:
73:0b:d8:eb:f2:59:87:e8:53:0b:5b:64:ff:e9:5c:
3d:3c:f2:f6:f9:92:7a:69:31:34:bd:99:7b:9f:54:
4b:16:9e:55:13:b8:f9:f4:6e:12:03:d4:08:32:cd:
64:3a:17:f9:61:4f:6b:0c:3a:51:2e:58:c6:bf:47:
ce:89:0f:ff:cc:af:d5:eb:53:b1:69:04:f5:8f:0b:
fe:6c:c9:d7:cb:a5:86:4d:f7:67:43:e0:a6:8b:3c:
da:a5:c6:39:db:fb:6e:89:8a:3c:bc:b6:3c:4b:43:
ea:ca:ef:bf:ab:c2:23:2d:31:e3:92:b7:5e:2e:c6:
ee:0e:7a:c1:fb:08:af:9b:94:75:f2:6a:12:fe:35:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:B7:EF:3C:E5:AC:85:A7:5D:D8:DA:DD:60:C4:4A:74:8D:C7:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:9d:dd:57:9c:4c:48:bf:03:c2:58:b4:9a:a0:70:fc:33:62:
86:fd:f2:ea:9f:94:1e:73:f8:77:1d:69:f2:34:4a:be:e8:e4:
83:d4:ac:33:8b:3b:0b:3f:b9:ce:06:bb:e7:74:ca:ca:46:c0:
42:11:ad:2d:2b:cf:f7:63:87:96:75:a0:6e:e6:87:ad:02:8e:
a7:09:27:dd:bc:c0:0d:f5:a1:4b:27:4f:17:90:9a:61:92:8e:
41:c4:fa:f0:09:05:26:50:b7:08:2c:c9:29:10:77:51:80:4c:
22:50:bd:72:e4:1a:f5:d1:9c:bd:a9:a6:a1:98:f7:aa:ed:a3:
dc:02:df:fe:dc:5f:45:ab:e9:14:6b:15:1f:b9:77:a4:ed:f9:
e9:71:f5:a6:49:47:41:e9:6d:67:67:30:c2:39:e8:62:8c:0e:
65:a0:4e:2f:2e:39:fa:9a:dc:09:61:7e:db:cc:83:4e:2f:83:
ac:bc:9f:e3:4a:41:dc:c6:e9:c6:0e:59:59:fc:9e:d3:e6:de:
cd:ba:69:6c:81:e0:47:b1:a5:4d:ad:a7:26:5c:82:fa:a8:c7:
ed:dd:f4:e8:51:d5:a0:68:b2:03:0d:74:91:f9:f5:ef:9b:e1:
c4:ca:51:25:77:12:26:ef:f1:2a:f8:fb:ec:c9:05:65:72:d9:
bb:27:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:16 2025 by rpki-client