Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa
File: 8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa (raw, json)
Hash identifier: RYTC+JGZDLMLXuWJsl/q2MoFafNLjixhlycSCMd8lXQ=
Subject key identifier: 3F:EC:F6:4B:87:F2:8A:10:02:6D:70:E9:74:57:36:51:21:28:BC:CA
Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial: 010D0C9F4328584917DC36022D7689B697013000
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 209453
IP address blocks: 173.246.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:36:02:2d:76:89:b6:97:01:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=1a10d95c-f03c-4391-a191-b553fad0d18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:93:8e:5b:0d:a0:4a:86:4b:4a:0c:a2:e1:
d3:29:71:b8:ce:dd:a7:47:40:0b:0c:62:6b:fc:d4:
ce:16:d9:19:ab:58:f0:61:6b:96:38:46:4e:ec:e2:
99:2b:d0:f6:67:15:d8:48:a4:64:9b:ba:3a:c2:c7:
c2:59:4e:ea:c8:89:da:a5:18:04:d0:f1:a7:af:d4:
62:66:72:5c:61:f8:fb:a1:33:eb:29:84:88:36:e5:
c4:13:00:42:d7:2b:e0:a6:c0:bf:cd:00:3a:43:7e:
f8:02:41:05:54:0a:59:a6:91:57:ec:99:47:08:b7:
3b:c4:50:9f:8e:9f:40:46:e2:22:52:cd:7c:5f:2c:
96:c7:cb:8c:3c:7d:17:62:8b:ab:a4:99:12:2e:7f:
65:f7:b5:47:ab:b1:31:e2:b8:f5:4d:80:8d:93:44:
ea:0f:6b:69:12:0d:5f:7c:60:67:f1:c1:9f:59:9f:
47:ec:3e:be:76:ed:05:56:66:26:39:28:52:c2:6d:
6b:f0:cb:0c:68:5f:6d:40:19:10:e1:bf:86:d5:2f:
74:a5:4e:51:19:4e:e4:34:65:fb:e5:22:60:06:a2:
93:29:08:cb:f5:8d:21:54:42:3c:a2:f2:e4:b2:13:
23:4d:10:58:ce:10:60:9a:ad:23:dd:8e:f7:80:7a:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:F6:4B:87:F2:8A:10:02:6D:70:E9:74:57:36:51:21:28:BC:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
X509v3 Authority Key Identifier:
keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.246.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:47:87:c8:ad:a9:d3:b6:e8:80:30:e7:97:eb:2a:a9:ad:a4:
23:8d:38:97:40:fc:7b:b8:73:4f:57:3a:e3:3c:a4:97:a4:c8:
54:73:dd:8b:ea:f6:9c:14:77:a2:48:9e:b9:19:7f:97:7b:61:
5a:7d:24:a5:f8:36:7d:8e:d4:82:e6:94:66:be:5b:99:6e:fa:
e6:ee:4e:db:ee:33:ea:70:7a:d4:cd:0a:77:ff:b0:55:94:29:
09:f6:2d:5e:71:56:39:fc:58:8a:52:a0:be:33:61:e5:bd:32:
3c:42:eb:7d:8c:30:e8:36:67:0e:b1:93:a4:14:02:61:87:d0:
f8:73:5f:b8:43:d2:1c:27:fe:e6:4b:c4:9f:f7:4c:e9:c9:79:
2b:c7:ab:fb:a2:ae:77:9c:fa:2f:6c:fd:24:f0:e9:16:0c:47:
2c:cc:46:86:1f:ed:85:93:d5:ec:03:59:89:b8:75:81:24:da:
49:8d:4d:83:e3:3d:37:6f:53:0a:65:63:5e:ff:63:96:bd:2f:
c2:35:7c:23:9b:64:be:af:52:c1:f4:1e:38:b8:73:e4:bc:37:
cf:df:4d:7e:9a:a0:a1:d7:b9:8c:e7:eb:64:4d:16:c5:a8:0e:
a5:64:d0:2d:15:d7:54:f6:78:98:5f:65:2e:c8:be:a0:a7:4c:
89:96:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:27 2025 by rpki-client