Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
File: 79814cba-34dc-3c46-bba8-f2748c8cf241.roa (raw, json)
Hash identifier: DXIg11+4f3ItaRYTY8tEtMK0HZ+0qybgo9xi9LMsrGw=
Subject key identifier: AD:6F:36:76:F9:99:A0:37:D5:0D:20:CD:1E:A0:14:EA:08:7D:87:C2
Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial: 010D0C9F4328584930DE750CA247675853E975E6
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 26842
IP address blocks: 12.171.137.0/24 maxlen: 24
12.189.192.0/24 maxlen: 24
12.189.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:75:0c:a2:47:67:58:53:e9:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=40df7968-341b-4f95-8a9f-a281881f3440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:df:54:70:46:4d:92:e3:10:62:e7:71:4c:
62:3b:f1:69:af:9f:aa:af:18:79:b1:0d:58:b5:b7:
f1:e4:39:4e:51:6b:59:f8:cc:2b:3e:8e:f3:84:73:
be:1e:60:be:07:e2:4a:12:7d:08:35:82:d0:5c:20:
45:de:4c:4d:7d:60:f3:12:54:19:49:09:9d:33:b5:
6f:84:e5:e1:0e:fd:d1:84:96:49:f7:31:07:58:5a:
02:80:3f:6b:29:ba:33:22:6f:5b:1d:3e:bc:40:46:
64:5e:b0:1f:4f:1b:a0:2b:16:dc:d7:5c:46:ec:90:
5b:a1:1e:4d:76:41:c1:ec:78:1e:5d:f4:82:56:f0:
0e:f1:df:ac:62:ea:0d:0b:64:cb:4c:bb:83:48:65:
b0:2b:b0:ac:3a:c3:7e:c5:5a:8e:4f:fd:5e:a7:e7:
2d:c9:ba:51:1e:df:b6:de:83:d7:94:d2:76:4f:78:
57:6b:b5:c2:93:a6:1c:04:0a:14:76:19:51:6a:15:
0a:55:9e:f0:f3:35:a9:27:c1:f3:a8:80:bd:0d:6e:
7c:54:3d:0e:a6:9e:37:01:c0:1c:d7:e7:fc:61:1b:
16:67:43:49:ee:d3:01:cf:c0:20:9f:88:6e:ce:2e:
6e:8a:2c:28:2d:6a:5a:b8:9b:b8:b5:5e:49:bc:19:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:36:76:F9:99:A0:37:D5:0D:20:CD:1E:A0:14:EA:08:7D:87:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
X509v3 Authority Key Identifier:
keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
sbgp-ipAddrBlock: critical
IPv4:
12.171.137.0/24
12.189.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:68:e5:56:42:93:55:7d:86:fa:13:fa:7c:da:59:3b:0c:4e:
77:da:6a:e3:9e:ad:ad:0d:48:ad:13:90:b1:00:dc:e1:21:d9:
98:31:8b:4c:9c:b0:49:df:39:95:3a:ea:09:92:80:38:62:f6:
ce:96:cf:c3:c9:ab:dc:9b:a2:c2:b1:59:f1:d7:fb:88:b1:32:
94:d4:45:ba:d6:c8:bf:4e:b9:2c:25:03:43:87:24:b0:65:a0:
c6:6e:85:68:90:d4:56:64:f7:c3:4a:01:8c:fc:00:54:d1:e7:
ac:af:87:47:f7:cd:9f:c2:f1:cb:de:25:ad:ff:bb:bf:ce:94:
ca:f7:ad:a0:2d:d5:90:f8:9e:c9:e6:55:c5:35:75:a9:39:08:
97:41:cd:c9:67:ea:2e:30:48:a1:ca:dc:ff:3b:87:70:7a:c2:
f5:74:52:12:27:75:66:8c:a0:91:33:a4:63:32:83:6c:2f:ac:
d5:2b:a8:83:e6:c0:2a:25:56:1a:3b:93:f5:8e:89:9d:bb:1b:
2c:21:c3:3e:c9:17:7f:02:b2:86:67:e4:49:57:b1:fc:18:28:
17:fe:ee:3d:9f:16:a0:82:b4:56:26:77:00:02:49:2f:ed:1f:
6d:44:82:07:98:33:4e:83:37:8d:d7:a6:34:17:8c:17:49:02:
8b:aa:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:13 2025 by rpki-client