Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
File: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json)
Hash identifier: EpQmzbe+UxlBwgikS3Rtxplo3k814Y0OqjVCTXyvPl4=
Subject key identifier: 73:19:52:19:49:A3:C1:06:A8:1F:E2:AF:F4:FD:AE:5A:20:0B:A1:0F
Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial: 010D0C9F432858484945725D3C497D4054B79700
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 18705
IP address blocks: 173.247.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:72:5d:3c:49:7d:40:54:b7:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=c65d875d-17ac-4e09-8481-86af9eec5f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:c0:86:e9:f3:4f:94:f3:de:79:69:ea:ed:
d8:aa:64:9f:61:1d:a1:f4:21:21:26:d1:97:5b:0b:
76:53:f8:69:2b:44:27:96:13:fe:65:01:5e:c8:57:
72:f7:e3:03:cc:1e:42:ca:00:d0:f3:1e:6a:2c:41:
e7:fa:12:c6:8d:88:9d:31:f0:7b:5b:0d:ad:fe:aa:
0d:b1:f6:41:e3:bd:0c:d3:74:0e:68:1d:fb:5f:3f:
a0:9f:68:f7:d2:68:1c:8a:0d:ee:96:77:03:b0:69:
3a:ef:5b:f2:39:16:76:9e:ba:3f:2c:99:82:1f:b6:
e8:56:ce:c1:b7:2f:ea:4a:07:47:2f:f1:15:54:51:
af:5e:5b:ea:55:d5:a2:81:75:da:5f:89:d0:ca:62:
8e:73:51:76:3c:5b:1f:2f:9d:49:cd:a2:67:89:3a:
0a:7e:bc:41:45:4b:d0:d9:8f:6c:9a:66:44:49:9d:
b0:7f:4f:46:fa:b1:57:27:c1:28:4d:82:9b:ed:d8:
f9:9b:1b:5e:9e:f5:3f:98:5b:3b:48:81:dc:f6:05:
d6:5b:95:eb:d4:09:2d:a1:05:68:b4:46:bf:7b:b9:
62:27:b0:29:e0:ab:98:b8:41:1f:c5:6d:c2:41:62:
79:9c:7d:f3:1a:91:94:8e:14:60:26:5e:12:b4:f1:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:52:19:49:A3:C1:06:A8:1F:E2:AF:F4:FD:AE:5A:20:0B:A1:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
X509v3 Authority Key Identifier:
keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.247.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:1c:36:38:e8:64:0a:df:cd:8a:2c:ac:a2:be:f7:b9:b3:69:
cc:55:30:4e:ee:e7:1e:4e:17:d5:89:ce:1f:f0:7a:8d:b1:a1:
30:44:d2:d7:56:2d:58:22:3f:37:33:f3:8e:58:58:d2:5c:5f:
60:ba:10:20:53:f5:6a:bb:46:c9:cc:e9:58:19:fe:5c:3d:b1:
e2:e1:7b:17:5f:c2:b6:b5:e9:e1:65:fd:97:1d:fd:bd:4a:ce:
d1:e2:57:10:b0:52:99:30:c8:bd:4a:a1:43:62:36:90:7b:72:
00:27:31:ec:1c:8f:46:46:c3:03:6d:e4:8a:5f:47:cb:2f:6d:
25:47:3b:0a:27:ec:7f:11:e8:8c:98:9e:6a:4d:cf:3c:70:ec:
d4:f6:8a:46:1c:6b:2d:e9:ee:85:26:e5:a2:86:f5:c1:2c:33:
2d:d1:8d:dc:81:e2:26:bf:02:6b:0e:b8:49:2b:3e:b8:ec:86:
2e:fc:33:c0:a6:bc:88:3a:20:30:ae:4e:06:3b:65:5f:21:59:
1b:ad:4e:04:2a:2d:69:53:ab:00:d8:ef:18:5d:10:c4:93:e3:
6a:59:44:2d:8d:e6:23:fc:8d:44:28:b5:05:6f:cb:5a:f2:6e:
8b:25:62:c7:94:b6:e3:f6:b9:9e:3e:69:8d:6e:b3:4b:8d:6f:
37:2b:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:29 2025 by rpki-client