Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa
File: b4847fd5-99d0-394d-a346-7cf3022a06cf.roa (raw, json)
Hash identifier: S84OWJJEpX9BMtRg/3t2uVPkH6htDxMAlv2nsMYpoB0=
Subject key identifier: 0A:C1:A3:4A:E3:43:D8:A1:64:BB:4D:42:B3:87:C1:A8:C4:E7:C0:3D
Certificate issuer: /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738
Certificate serial: 010D0C9F43285848F1806D1B8AC97B6A7A920CC0
Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa
Signing time: Thu 20 Feb 2025 08:15:28 +0000
ROA not before: Thu 20 Feb 2025 08:15:28 +0000
ROA not after: Wed 21 May 2025 07:15:28 +0000
asID: 16509
IP address blocks: 173.240.222.0/26 maxlen: 26
173.240.222.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:80:6d:1b:8a:c9:7b:6a:7a:92:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738
Validity
Not Before: Feb 20 08:15:28 2025 GMT
Not After : May 21 07:15:28 2025 GMT
Subject: CN=cec7dc5d-cde0-4296-a1ec-87b23ddc68d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:5a:6f:f4:a1:ad:3c:85:79:7b:c0:cf:4a:
32:6f:24:71:34:47:ca:66:92:35:25:9e:58:58:5c:
96:5d:ea:29:25:48:c5:fb:17:c9:5a:86:40:f4:bd:
fe:43:84:d8:3a:2f:47:2c:32:30:a6:96:0f:aa:ed:
8d:32:76:ac:80:a6:88:cc:96:2d:fb:4c:d7:d8:8c:
3d:c0:9a:ac:a1:63:89:59:ce:0e:bf:db:1b:93:7b:
f5:26:25:e9:36:c1:22:6b:21:26:07:36:8f:fd:22:
e1:26:2f:7a:2e:cc:bb:69:64:ef:71:be:30:ff:e6:
46:3c:1e:96:65:5b:72:8f:15:8f:b3:15:e1:76:e3:
dc:41:c9:50:79:1e:8a:02:a0:82:d6:e1:4f:af:0f:
58:a7:0e:26:fb:30:e3:38:be:aa:6a:00:fd:5c:3a:
57:54:50:83:16:03:5a:77:85:c5:24:43:1c:6b:5a:
47:17:d6:d5:5b:05:d9:c1:b2:75:e5:f9:47:1c:51:
44:ef:93:17:f0:3f:bc:0b:97:15:9c:82:7d:fa:55:
04:c1:09:a1:e2:92:f1:39:d5:2b:71:30:01:f8:65:
82:37:62:2e:54:b3:7c:88:18:9f:f2:ae:fb:0c:c1:
3b:d1:08:c0:87:7b:61:d2:6a:13:71:d3:f9:40:df:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:A3:4A:E3:43:D8:A1:64:BB:4D:42:B3:87:C1:A8:C4:E7:C0:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl
X509v3 Authority Key Identifier:
keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer
sbgp-ipAddrBlock: critical
IPv4:
173.240.222.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f6:24:d7:66:fc:de:55:3f:49:7f:27:f1:58:7a:97:ba:16:
b6:9f:de:41:7e:a4:17:32:6a:d6:0d:de:51:37:fe:86:b9:04:
23:59:b8:f3:d6:ea:3c:f5:22:cd:13:6b:91:01:91:f9:0f:db:
c0:91:d1:77:a3:0f:94:ae:6e:dc:09:17:f8:3a:de:ea:6f:47:
38:d5:de:66:46:11:d9:18:84:74:0c:9c:d5:9a:71:ad:3b:ce:
cd:fe:cb:0a:60:6b:5d:4f:bc:ac:09:f9:f6:bd:da:b4:78:12:
f3:9e:2b:3f:e9:39:af:a3:57:0b:10:b5:92:02:19:ae:11:4d:
2d:fe:fe:f1:3c:04:37:f4:e4:5b:f9:9f:ef:74:9a:38:f6:1a:
c2:35:54:5a:0a:24:93:5f:c4:8e:48:fd:f5:be:1d:67:ac:42:
c2:52:b9:83:2c:0c:b6:67:7e:38:75:7f:41:ce:59:39:93:3f:
e3:f2:27:77:b4:76:0a:3b:5d:3d:c9:ae:17:a1:24:77:9f:68:
57:cb:3a:ed:13:42:14:9b:9a:62:61:f8:3c:94:91:5e:ec:27:
43:f6:26:5b:d7:8e:05:38:07:c4:6b:22:f3:63:2c:e5:0b:2b:
18:f8:0a:9e:13:42:5f:1c:0e:28:a3:0a:07:9b:2f:bd:5c:85:
09:e6:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:32 2025 by rpki-client