Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
File: 2bd54a4b-cf66-3ad7-b279-8094b32af154.roa (raw, json)
Hash identifier: teAqaZAL1IwgTz/TbSBeAPAGuX7ZYV+fq36ad8Hi36Y=
Subject key identifier: 80:52:22:FC:BA:23:FF:30:77:D4:A4:3B:40:36:25:04:05:BE:6A:08
Certificate issuer: /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial: 010D0C9F4328584953C40E79B88A38DA23B60000
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 47050
IP address blocks: 173.224.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:0e:79:b8:8a:38:da:23:b6:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=d62457ed-c275-4e20-b2f0-dba4d1804725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:00:f8:5c:fe:72:71:6b:ce:0a:4b:d8:a4:
2d:ee:29:c4:35:cf:b7:5e:db:71:b0:6f:1f:bb:c4:
a9:f9:ec:50:e1:b5:22:15:e5:ba:f7:16:56:55:c2:
e8:f9:cd:26:69:f2:80:94:05:43:0f:86:86:88:dc:
7c:0c:ee:d6:e3:47:45:12:2f:6c:e8:20:a7:2d:17:
9f:b2:bf:0f:e9:dc:88:4b:4b:02:fc:3b:6a:3a:71:
5f:f1:31:fb:f9:6e:48:14:0c:1d:82:82:e2:e7:27:
f0:36:32:3e:85:42:d7:01:d6:9f:9c:f3:8d:bb:8e:
84:92:fe:70:3d:c0:d9:a5:d6:76:14:87:e9:df:91:
ea:d3:64:6e:38:7a:84:2a:e4:89:c3:91:4c:ed:04:
ce:b9:71:7f:8b:67:c9:99:53:9b:f5:f7:a5:0d:c3:
2d:3b:61:5c:92:f9:4e:3c:7c:1f:08:6a:85:d4:1d:
b4:14:e6:c3:29:01:d2:fd:a1:d4:34:91:17:56:1f:
b4:94:26:5a:e4:d1:39:54:49:7d:8f:4a:d3:9d:42:
0a:cc:fe:10:3b:55:a4:c9:a4:3f:c1:eb:1d:da:9f:
d6:b7:06:79:aa:c3:84:6b:e6:a2:28:bb:11:4d:28:
b5:15:52:b0:45:9f:73:1c:37:d2:f8:d2:d9:f7:c5:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:22:FC:BA:23:FF:30:77:D4:A4:3B:40:36:25:04:05:BE:6A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
X509v3 Authority Key Identifier:
keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
sbgp-ipAddrBlock: critical
IPv4:
173.224.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:85:99:0a:a4:42:47:87:c1:aa:4d:a2:ef:f3:d5:a0:ce:77:
3d:3e:10:a2:0a:d6:66:7c:ba:88:77:92:2e:84:10:57:b0:0a:
58:ce:98:fb:11:e4:2e:b7:ec:99:0c:6a:5b:96:bc:b9:4c:ef:
bb:13:05:29:a2:8a:b1:92:99:09:49:ea:08:23:45:19:84:e7:
4d:61:a1:56:05:ac:11:49:a6:bd:3c:66:b2:85:63:01:b7:f8:
2d:f7:29:65:a9:c4:d9:01:c1:1d:8b:ec:01:9e:18:f4:34:19:
5f:2c:01:0b:60:67:9b:b7:4d:af:b4:11:25:99:d7:ef:53:84:
c7:89:26:62:c6:d9:7d:f7:c3:93:5c:2f:b7:b8:76:9f:82:ff:
45:89:59:ee:f2:ae:bb:a0:61:56:3d:f8:44:b0:aa:ce:66:71:
34:6c:f4:90:f1:a7:b6:cb:2c:ae:11:dc:35:36:6f:59:1a:b4:
da:ed:79:81:c4:83:0a:0a:e5:b5:53:53:cd:86:96:e1:39:9e:
10:ba:8f:c4:4e:d8:fd:29:81:9f:5d:a8:3e:ed:4c:b1:09:a2:
26:29:13:fa:6b:1b:d6:d7:64:73:6c:31:94:f7:29:ce:23:23:
93:56:04:f5:a1:c3:4f:0d:fb:2a:32:62:66:9e:bb:29:be:9e:
53:f6:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:29 2025 by rpki-client