Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
File: 3929a969-6b96-389e-aeac-0034a05d30fd.roa (raw, json)
Hash identifier: Bcc4oRlqts9BWljsp0rm+tSvve5R1mUamLEYQD5EQkc=
Subject key identifier: B7:86:79:5F:BD:37:27:B9:8D:98:B9:B4:CE:65:66:AE:63:73:B9:F0
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848E16BC523363BAB24DB1AEB00
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 55410
IP address blocks: 172.84.180.0/24 maxlen: 24
172.84.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:c5:23:36:3b:ab:24:db:1a:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=ce9fcf57-0e3b-45b4-a4f9-b034ed0a4ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:e5:67:4f:58:df:02:49:42:83:0c:15:54:
18:a5:ea:d4:24:72:2f:45:df:89:a4:2d:9c:12:5c:
80:bc:fd:89:f0:1f:58:aa:45:78:cb:68:ac:65:03:
b5:73:95:6a:9b:f9:26:15:b7:b9:87:17:f3:a9:1d:
b6:f8:2f:53:18:55:2a:bd:e2:a4:79:e9:61:4a:21:
df:e8:c2:c8:48:4c:60:27:07:c0:96:37:3d:25:8d:
6a:dc:d3:24:07:6c:82:50:da:59:6b:f1:3c:30:f1:
83:4b:40:72:cd:a1:11:01:4c:51:67:67:a9:c5:06:
06:15:95:44:d4:82:e0:8b:fd:48:6e:39:e9:e1:36:
6c:1c:b9:bd:f3:35:7b:40:01:04:27:08:e9:04:ae:
f7:58:e1:17:d9:40:e3:cd:ed:53:3f:4a:56:54:84:
bf:c6:0a:f3:cc:bf:4c:11:87:cc:41:2f:6c:f1:da:
ba:47:4b:01:ef:5d:da:c3:a7:5c:56:7e:e6:ff:91:
8c:8d:59:32:e2:87:0e:fc:69:59:11:c4:13:76:a9:
58:3a:bf:3d:ad:58:8e:9f:a2:3d:b9:70:33:01:b1:
36:1c:a2:78:29:87:11:80:11:10:4b:1a:3d:ae:ec:
e8:b1:4a:69:26:f1:32:c1:3f:09:38:0e:32:78:cb:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:79:5F:BD:37:27:B9:8D:98:B9:B4:CE:65:66:AE:63:73:B9:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.180.0/24
172.84.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:35:6f:d4:06:c0:85:df:ce:83:a4:81:79:87:2b:a5:54:7d:
9b:75:a5:00:49:74:f4:b8:48:60:13:13:5f:c8:4f:68:8e:49:
47:00:ef:41:02:21:a2:36:ba:2b:06:a9:96:fa:bd:60:a2:55:
c2:cb:10:e6:29:51:00:ca:32:66:a0:c2:de:93:10:db:d5:db:
67:03:52:9d:14:ca:ae:3f:c1:66:fa:51:b6:69:d0:85:80:21:
cb:d7:7a:56:cc:54:56:b0:fc:74:24:45:27:f3:37:51:0b:d4:
fb:e6:ea:70:1e:7b:ab:80:4f:45:89:da:18:62:f8:9b:5a:c9:
82:5d:5f:95:92:2b:ab:ce:ba:de:50:b9:4c:b3:3a:de:c5:9f:
16:17:03:4f:9f:65:89:8c:5c:23:d3:c0:12:39:e4:f3:f9:8c:
ca:13:ad:48:b4:62:69:ef:f6:51:b3:c1:48:74:4d:4e:a7:b3:
98:49:a2:33:8f:65:0b:48:24:db:0d:b4:e4:4c:c8:c0:ef:35:
c3:b6:80:f6:10:b2:65:fc:82:46:57:fe:e6:16:3a:3e:f7:93:
c5:17:ab:37:40:07:eb:dd:8a:50:d7:36:f3:6b:8c:bb:69:e5:
f8:3f:57:ab:51:3d:bd:e0:bf:cf:9b:64:83:cc:68:a5:0b:a8:
d9:b8:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:38 2025 by rpki-client