Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
File: f343bc0d-1a47-3448-a18d-34ed64c4539d.roa (raw, json)
Hash identifier: jdOhZKBReoGOwQ1BWTL2ePQqu4/B+1RlAd2GSHrzVko=
Subject key identifier: DF:A0:1B:FF:5E:09:63:94:B8:74:01:74:21:DC:DE:B2:68:93:44:AA
Certificate issuer: /CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
Certificate serial: 010D0C9F432858480BDA71DF8C3F52E567768FC0
Authority key identifier: 16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 11362
IP address blocks: 173.243.232.0/22 maxlen: 24
192.150.211.0/24 maxlen: 24
199.96.108.0/22 maxlen: 24
2602:ff72::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:71:df:8c:3f:52:e5:67:76:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=ecc3ec58-a2d8-462b-b739-7ffb652353f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:f2:0d:24:9d:ba:25:73:56:e0:01:94:a7:
61:57:52:9d:54:d9:aa:79:95:b3:07:1c:56:5d:f2:
95:a3:bc:b2:0b:91:3f:ea:72:4f:68:d4:0e:5c:51:
b4:54:b6:37:fa:ec:28:ed:b8:ba:e7:72:12:48:59:
5a:55:02:15:f9:66:d9:ea:da:b4:b3:b2:1f:47:97:
d0:5b:6e:b5:d9:ae:88:14:4a:79:71:20:d7:af:74:
1f:fa:3b:f7:a7:88:f8:39:34:33:3f:a2:25:9b:96:
b8:8f:b9:88:46:67:0a:03:da:6b:26:b9:81:e3:36:
b8:e6:9a:a4:ac:2a:14:f1:75:36:9f:de:a5:56:17:
56:e7:1a:99:2b:64:71:c4:ec:51:50:09:97:6c:dd:
01:96:67:63:58:93:49:07:8b:4b:c7:4f:b7:b7:2a:
5c:ac:da:4f:3f:b6:35:f4:57:7f:bf:4f:4c:0b:45:
e3:02:2c:c4:ed:56:45:a4:3c:4e:3c:87:48:33:d1:
c1:43:8e:2c:4b:62:f4:0d:79:c2:83:14:e1:c0:23:
9a:2b:c7:f6:2d:cf:32:2c:6b:98:1a:49:37:a0:e2:
38:e3:d4:6d:dc:f1:da:f9:fb:d5:97:cc:9b:5c:fb:
64:43:9d:19:71:23:df:b1:d4:63:f3:1c:fe:14:01:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:1B:FF:5E:09:63:94:B8:74:01:74:21:DC:DE:B2:68:93:44:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl
X509v3 Authority Key Identifier:
keyid:16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.232.0/22
192.150.211.0/24
199.96.108.0/22
IPv6:
2602:ff72::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:44:9c:cd:18:b0:f6:5f:26:cc:2b:db:38:d0:63:9a:4f:37:
64:8e:68:0b:af:cc:73:ca:1d:de:c8:f0:a5:47:20:fc:b4:47:
51:35:66:5d:dd:83:a4:d9:34:0e:b6:e7:23:5b:b1:f7:28:32:
60:67:03:d4:ad:53:de:cf:51:27:93:b5:7d:ec:81:77:d6:02:
e3:03:8d:f5:52:6d:83:c8:62:37:c9:6b:e7:f0:ab:64:35:63:
de:e9:c1:25:e9:e6:9d:24:5d:aa:0f:b1:fa:c1:f1:0e:af:81:
34:c3:a2:af:85:bc:5e:50:4c:f6:2e:43:a7:8c:a5:16:48:2d:
8c:e4:2f:15:91:f4:2b:f4:3b:f0:4b:11:5a:2a:fa:1e:53:fe:
63:66:1b:f6:8c:f4:a2:27:5c:8a:76:02:b8:67:db:50:3f:11:
11:18:d1:07:87:84:9f:de:14:a5:e3:5a:e5:4c:bd:5f:2f:16:
56:5f:24:30:59:b2:ba:55:7d:c4:30:1f:5c:61:6a:e0:f9:86:
cc:61:f2:eb:5f:36:4a:a4:c8:99:e8:ba:57:98:d0:f2:8b:63:
4c:b7:95:4e:d0:a8:88:7a:72:b3:0e:94:5f:2c:81:b7:d3:c8:
56:29:28:d5:93:c0:55:94:23:f0:23:9a:ce:08:f1:59:f2:12:
f4:3b:cd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:44 2025 by rpki-client