Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa
File: 5292dfb9-21b0-34f9-a00c-7362ceea7168.roa (raw, json)
Hash identifier: 0V2HkTW7rVsuj9pCj1oLpQ4CTuSguHRNuXfTJTiD0EQ=
Subject key identifier: 88:79:1C:84:F4:48:C8:41:B6:DC:29:12:9E:96:36:F3:BE:EF:8A:19
Certificate issuer: /CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Certificate serial: 010D0C9F432858487A2086ACB9F67A30E4C0DE20
Authority key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 172.83.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:86:ac:b9:f6:7a:30:e4:c0:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=e451c927-8f58-48ae-9588-8b1ac4b592ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:15:7f:87:97:d7:69:21:9d:14:6f:fe:e3:
98:24:87:61:e9:6f:2a:b3:22:f3:ca:1f:66:ca:74:
64:18:c4:aa:7c:e4:24:c9:b4:5a:3f:97:36:d2:84:
89:b4:8e:b9:81:95:f6:f6:ad:48:6a:ed:f4:f1:11:
c3:5b:6e:83:d4:db:41:7c:f6:74:36:13:40:82:34:
ee:46:67:01:ea:a9:7a:c6:94:59:61:10:9c:30:ee:
4c:72:11:5f:db:ac:ce:73:10:e8:4c:46:4a:a4:7d:
b3:ed:b6:da:f8:7f:b2:ac:3f:7a:62:c9:03:20:f0:
98:55:1c:0e:c8:47:08:35:2b:7b:50:3c:34:dc:b4:
2a:84:0b:5c:2d:86:6a:a7:f7:15:75:40:dd:51:9f:
b5:7f:22:8f:97:a0:10:8f:0b:10:59:19:66:0e:03:
5a:9a:27:d2:70:54:cf:c5:25:9d:2e:91:ef:82:ec:
e5:1b:96:87:70:3e:15:5f:49:3d:09:89:57:05:28:
bb:fa:1b:f0:f6:05:db:04:85:df:7c:95:28:df:fb:
c7:a4:92:e2:fa:6f:99:97:b0:d2:8b:19:73:04:b3:
6b:a4:6f:65:75:63:a0:e9:c7:e1:69:0c:e9:27:31:
29:16:bf:2c:88:9f:87:dc:51:96:c9:31:ea:c9:a1:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:1C:84:F4:48:C8:41:B6:DC:29:12:9E:96:36:F3:BE:EF:8A:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl
X509v3 Authority Key Identifier:
keyid:5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:a9:e0:d9:c4:c8:4a:a2:f2:86:ec:a9:06:60:9b:b5:d2:a2:
03:38:9d:4d:83:93:2f:05:b5:a0:32:bb:de:61:79:95:e8:f4:
46:5b:58:49:b9:68:90:ee:23:8c:3f:96:e9:3b:67:84:ee:74:
4d:07:d8:2f:8d:57:dc:0b:fe:8b:2a:fc:71:d7:10:1a:d7:d0:
67:55:20:a7:f7:ce:00:1f:30:30:7b:0b:fe:a8:4f:35:b5:bc:
85:18:af:7f:21:b3:08:79:c3:17:87:0c:c5:3c:ab:3e:7d:a9:
af:d9:86:b3:d7:fb:c2:78:9d:56:39:ec:86:97:1d:ec:35:4b:
10:8d:8a:4a:e1:39:d3:83:cd:f8:45:c3:d1:96:11:e1:3d:10:
7b:25:2f:6d:94:bc:58:32:81:cc:56:3e:e0:08:c7:cc:bd:37:
0e:12:54:73:4f:c9:d5:a9:51:12:fb:d5:12:4b:c3:ea:74:82:
8d:50:9e:14:03:79:bd:e6:c5:4f:9d:95:80:85:8d:7a:db:9e:
4a:67:97:7e:6b:04:21:f4:85:0f:9d:60:47:01:82:22:71:03:
ac:64:28:2f:41:44:eb:02:9b:bb:65:d0:57:dc:8a:97:7d:13:
34:f6:76:ed:2a:95:86:ad:70:b5:e3:9a:3a:60:69:c4:aa:49:
02:06:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:41:57 2025 by rpki-client