Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
File: 03f961f3-6b43-39af-89bc-92927876bcab.roa (raw, json)
Hash identifier: aMEC7bXQS1ZTLbB7M9yYM/YNAtMP+RZEHKNZ/GfEjo8=
Subject key identifier: 68:71:76:B8:89:95:B0:BD:E9:71:33:76:5B:9B:1E:0E:C3:D9:20:C0
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848C581762C9EE17833E228E8C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 172.102.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:76:2c:9e:e1:78:33:e2:28:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c99195ab-7a19-4414-9828-1d6391c16f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:31:f9:6c:19:1f:88:04:ab:96:a8:ac:ea:
7d:2e:cd:f7:b0:4c:99:d5:a5:a1:93:c4:bb:c9:78:
75:cf:d1:19:2a:82:84:32:4d:82:52:12:26:0a:b1:
a5:1f:a9:f5:77:9c:f8:40:df:4a:3f:52:90:c2:85:
ff:22:f1:28:17:06:4f:5a:5f:5d:a9:d5:66:70:03:
2d:b9:df:d7:54:87:1a:19:66:ca:09:7c:59:ff:31:
6f:23:0e:7c:17:3e:89:32:6e:c5:2d:b2:a5:be:1f:
4a:98:38:ae:5a:84:b0:db:93:c8:b3:03:dc:9b:1d:
d6:27:a2:10:b0:5c:f7:45:b6:c2:f2:9b:1f:95:85:
7b:e6:cd:2f:24:e2:28:37:2c:0d:7a:57:b4:4f:a6:
11:29:af:66:84:b3:7d:55:0f:cb:8d:63:8d:90:49:
4f:cd:34:d6:c5:5c:8d:30:c6:4b:a9:eb:c0:48:88:
38:2e:89:cb:dc:5e:f5:fb:76:4a:e4:a2:2d:b4:c5:
7c:8e:b6:c2:ae:83:02:84:3f:48:ad:71:7b:58:91:
c8:20:e0:3d:6e:96:9c:9f:25:01:72:75:2b:01:0f:
d1:75:8a:dc:60:0f:68:28:e6:6f:02:8e:ed:28:f3:
b7:d2:d5:21:61:98:38:a1:ae:6d:e3:38:db:8e:3b:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:76:B8:89:95:B0:BD:E9:71:33:76:5B:9B:1E:0E:C3:D9:20:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:6c:73:cb:0c:fe:82:2a:c1:b1:44:12:97:2c:b7:03:d4:60:
2d:65:f5:32:d5:9f:ef:32:3e:ba:e7:ea:2d:dc:56:da:64:00:
33:6d:d0:23:3b:b0:d0:55:b9:26:f5:e7:12:61:fa:e1:70:54:
2b:8c:f9:d3:fe:08:80:e0:1f:11:8d:0a:95:bc:3d:d8:99:5b:
c1:83:6f:92:12:cb:78:9c:05:3e:5c:44:a5:6c:60:ef:5b:6b:
65:99:ed:71:d7:0b:7f:b0:c2:bd:8d:01:bb:93:49:27:07:3a:
a2:73:de:8c:d4:da:7a:7c:83:28:59:d5:50:81:cd:56:d0:b5:
99:55:45:70:69:16:2f:66:b7:9b:51:17:7f:4e:d2:8f:9b:b0:
0e:2e:1a:61:dc:9a:fa:20:6f:9e:5a:92:5c:23:aa:5a:66:a4:
08:0e:9c:aa:98:fc:aa:26:43:cf:fe:63:1d:2a:b3:b5:2f:42:
bb:91:2c:45:ea:a4:2a:cd:0f:92:b1:02:25:a5:bc:b7:25:44:
69:48:01:31:5e:95:5e:f7:45:e1:a0:db:ad:fc:33:46:cf:63:
b3:e0:63:cc:7d:ec:af:64:07:82:93:75:5c:c8:01:56:de:54:
be:2c:30:89:8f:f0:83:cc:3d:6b:e6:03:0f:c7:c0:f4:15:b3:
90:60:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:34 2025 by rpki-client