Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa
File: f3242823-2b2c-394d-b738-86d40bb02316.roa (raw, json)
Hash identifier: xpsYr639OdvJBC3C6zwZ/quEL7CNS8SGgnOmNcXoHt4=
Subject key identifier: A4:D8:C0:B7:24:EA:D2:0B:27:38:C1:D7:39:76:C0:92:BE:57:32:55
Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial: 010D0C9F432858493ED3D02B11826476049937A0
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 138699
IP address blocks: 71.18.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d0:2b:11:82:64:76:04:99:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=343fd447-c722-4dcf-9a18-6720828a1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:79:3c:49:5b:6d:4a:7d:da:f9:bc:63:2e:
2e:a4:a0:c4:7f:f8:66:69:e3:0b:2d:fb:bb:42:81:
32:92:df:cb:a6:4e:b3:4a:33:cd:35:76:e5:35:94:
ce:b0:0a:e6:93:dd:34:4a:56:76:69:b5:f4:9f:e4:
23:25:43:15:64:cd:fa:c6:92:78:c8:25:a0:85:9a:
dd:d6:2d:a8:61:87:3a:16:9f:53:ed:92:0e:76:34:
a8:e6:08:1a:e0:9e:f4:e4:02:e5:fb:09:c5:5e:b7:
51:9e:cc:f7:93:85:e0:0e:f5:c6:fd:51:85:57:f3:
1c:76:fc:d4:39:31:bf:62:f8:a9:a8:b3:16:78:da:
4d:32:fa:88:45:0b:ee:4a:b4:47:f0:87:e6:da:12:
02:03:c0:53:d1:aa:76:c3:1b:ce:07:e9:c8:b2:f9:
2a:50:c5:bc:1e:6c:ed:0b:16:91:84:95:cb:9e:f7:
35:78:82:13:5c:56:95:42:fa:77:e5:eb:93:1a:ba:
e7:2a:f5:02:c2:83:8e:01:0c:f1:a6:6c:44:00:35:
8e:f4:cc:cd:3c:54:1c:d4:2c:17:f7:dc:fa:50:27:
cc:62:48:0c:25:e3:1d:2e:19:e7:8e:f7:7b:9a:b5:
b6:24:08:4e:23:98:85:1d:ea:af:8c:d5:f1:8b:7f:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:C0:B7:24:EA:D2:0B:27:38:C1:D7:39:76:C0:92:BE:57:32:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
X509v3 Authority Key Identifier:
keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
sbgp-ipAddrBlock: critical
IPv4:
71.18.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f0:09:e5:57:54:72:f7:62:47:8a:44:f0:06:b6:98:e1:b5:
67:d6:f7:b4:6e:96:d8:16:ca:c2:6a:06:ce:ba:83:81:2d:ec:
ad:8c:61:d3:a4:65:3e:f1:e4:55:c2:82:ee:97:21:94:4b:fa:
1c:11:1e:c7:20:88:83:6f:59:ef:5d:4b:bc:54:4b:5b:67:a2:
ea:a0:fe:4b:60:d0:80:9b:dd:39:e0:9d:ba:3c:a2:28:20:50:
f2:0d:46:d1:0f:a0:2d:a9:33:17:e0:c1:f9:13:bd:18:72:9c:
b5:88:1b:6a:d8:71:63:f1:62:35:7c:f5:6b:6d:8a:6f:c8:06:
c0:8b:c2:75:15:54:18:74:a5:5b:05:4e:a4:eb:00:c8:2a:c8:
b7:6c:e4:6c:e3:41:0b:83:76:1e:34:7a:6b:70:58:c2:cc:a6:
f8:f5:77:e4:9a:50:65:99:e8:57:ae:63:82:9b:52:53:0f:47:
09:0c:52:50:f4:7a:9b:91:c8:8a:0b:ce:70:97:34:8b:8a:60:
53:6e:41:7b:7c:a6:b9:65:d1:e0:a8:48:cf:f7:58:e0:5e:fc:
d4:6e:2e:c7:b0:f6:49:77:2c:57:c5:71:66:f8:60:f7:bd:21:
4b:51:da:a8:2e:42:96:ad:5a:4f:86:9b:28:39:ed:b9:31:92:
b1:f3:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:42 2025 by rpki-client