Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa
File: 601eb9b7-a600-387a-b213-2e033e239937.roa (raw, json)
Hash identifier: 8+T5GV7GhfZpgEWy8ExdtfsIsfy18DbWuLG+Fw15OCk=
Subject key identifier: E2:CA:BE:80:62:9B:35:D1:5D:01:5A:DE:C0:19:B5:0D:23:6C:C8:30
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D0ABC9A5034D8BE5253F1C04
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 44893
IP address blocks: 142.252.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c9:a5:03:4d:8b:e5:25:3f:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=b9b9c64d-686d-49f4-8e28-b3f8b2d56a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:9c:f8:6a:6d:9f:b6:4d:84:db:c1:7e:1b:
ef:ed:5b:d3:3a:22:74:14:a9:d3:de:6e:00:50:cd:
3c:1a:7e:29:e0:01:42:37:60:a5:b6:13:9f:32:a7:
ee:a4:ff:72:4c:e5:73:00:2f:57:db:69:0e:21:4f:
a8:2a:67:6a:4d:17:75:eb:7c:10:bd:1b:c6:e3:23:
16:c9:4f:37:9f:71:41:de:00:53:8f:a0:72:00:ee:
ad:9f:8d:ae:e4:c1:e2:4c:08:a7:10:53:64:c1:bf:
7e:5f:23:03:7f:00:f7:d4:c1:3e:30:d9:60:65:0e:
3c:0d:d9:ec:8c:7a:b9:3b:31:e3:80:5d:ba:81:ba:
05:ef:c2:bf:40:24:09:97:8a:01:84:69:81:6b:9e:
0f:e2:80:59:49:94:dc:80:9c:ad:57:e6:cd:6c:07:
8e:c7:11:fe:2f:24:34:ef:1f:dc:44:6c:cd:3f:2f:
bc:66:9c:48:14:1e:c4:b5:af:47:16:f3:a1:ab:8a:
76:a5:89:28:9f:86:28:53:95:dd:e3:76:63:13:aa:
72:bc:ad:e7:02:0d:0d:c5:13:b1:cc:ee:86:a5:56:
f4:8f:f7:51:c4:5c:7d:7b:4c:bb:c4:5d:6c:1a:ac:
34:02:86:ed:02:91:d1:68:66:a0:ae:17:1c:eb:80:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:BE:80:62:9B:35:D1:5D:01:5A:DE:C0:19:B5:0D:23:6C:C8:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.252.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c8:cb:06:5f:c4:60:74:09:af:71:0b:75:93:d6:02:76:a7:
7b:7c:a5:24:a4:32:87:a7:b0:4d:17:f3:11:1b:22:b3:45:ae:
18:88:74:12:42:d0:ef:8c:41:1c:c5:5b:0c:cb:b9:a0:ba:24:
e1:47:d3:38:31:f9:04:f4:64:a3:aa:ea:f1:45:fe:ec:60:08:
f4:44:8c:ce:bc:4d:15:cb:53:8c:0f:de:3c:8e:87:53:f4:ac:
f2:c9:2a:22:2d:ef:86:0f:a4:8a:87:d0:48:6c:73:b8:34:3e:
e2:62:2f:30:ba:3d:c4:38:35:f0:fe:0f:76:d9:51:79:0e:88:
0d:48:02:bd:06:18:87:63:b7:23:cf:9d:d8:0c:e2:6c:aa:bc:
f8:6d:b3:82:27:3a:57:e1:bc:1d:1b:73:a3:65:7f:98:0b:2c:
96:c7:9e:be:76:e1:5a:ff:59:db:3b:44:b7:e4:8d:8a:31:74:
97:42:00:70:27:cf:a7:70:28:8b:33:d2:ea:59:1e:fc:da:99:
9e:a7:9b:c6:96:48:50:e9:5b:33:1e:e7:ca:d7:aa:f1:a7:41:
1e:35:3b:06:32:55:ac:cc:aa:cf:5f:0d:dc:2d:76:44:df:61:
cc:9e:f6:76:bf:b9:0b:0c:0c:cf:72:68:af:ed:95:5a:df:7e:
e9:45:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:25 2025 by rpki-client