Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa
File: 2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa (raw, json)
Hash identifier: DyTKk/IVemhg814iPDbfy7OSP4cUwGMnNBZC5j3OLlE=
Subject key identifier: 0B:EB:30:C4:46:65:85:2C:3E:52:C5:25:78:AD:C2:35:1F:19:E2:3C
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848A565F686DB179FF7BBEBE980
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 43260
IP address blocks: 173.239.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f6:86:db:17:9f:f7:bb:eb:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=a4e6068c-aeb7-4c1c-a2ff-372391dc9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:38:5a:53:c2:92:d1:81:5f:e7:3f:6d:cf:
31:fa:e5:47:ed:a1:5c:ce:e4:ea:d0:09:c5:9e:5f:
b6:b6:7d:6c:ea:a9:0f:1c:90:6b:ee:54:48:72:2d:
03:22:ff:df:f6:4d:7a:67:92:c0:ef:86:e8:79:3a:
0e:9e:cd:c7:4c:32:22:f7:09:4b:55:ce:2c:43:de:
79:7f:9a:86:c2:bd:a6:c5:32:1a:64:b3:8f:9a:98:
60:be:3c:14:fa:e7:33:38:d4:7e:cf:cf:05:85:60:
f8:6c:51:4a:67:8d:67:64:a1:fa:cd:ff:ba:08:6d:
1c:da:55:b1:e2:c1:db:88:2e:d5:f6:69:25:75:7e:
c0:a2:f0:60:44:ad:94:7b:af:91:01:47:79:94:d5:
de:3b:b4:22:78:4e:42:3d:6e:59:98:17:11:4e:7a:
96:ac:33:ba:8d:2b:bd:a1:ec:d1:21:46:b7:3d:8d:
a0:75:c0:2e:0f:a9:f3:92:ea:33:ec:8b:6e:30:8e:
89:57:4a:7f:16:e4:97:a7:18:30:8b:86:23:18:09:
1f:48:17:ce:92:a0:60:1e:60:61:95:1b:59:89:74:
64:e0:79:bf:f1:88:6b:76:67:c9:1a:f0:70:3c:11:
fa:3e:b7:a2:76:7e:d6:70:a4:3e:5e:1b:13:dd:e5:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:30:C4:46:65:85:2C:3E:52:C5:25:78:AD:C2:35:1F:19:E2:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2bb88e31-456e-32f2-b96d-f5aa61488cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:e2:e4:3d:df:19:76:b0:4d:65:6b:3c:44:87:4f:f5:f0:e9:
95:11:7a:51:ca:89:23:b2:33:81:ff:39:9e:58:b4:0d:b7:ba:
5e:e0:28:de:2f:01:45:08:25:39:4f:79:60:60:92:4a:06:53:
28:ce:b1:76:72:62:bd:27:46:63:fe:d2:05:98:81:04:3f:89:
52:6c:fb:94:b3:62:90:16:71:68:03:ae:5c:80:ee:9e:bd:4d:
6f:aa:35:24:a5:d2:07:f3:be:f5:33:21:65:1c:a9:72:cc:d1:
39:f1:fc:7e:49:b6:d0:01:d0:9a:de:fb:90:6f:5a:cf:f9:5d:
24:68:33:eb:0f:66:f3:a6:57:6c:bf:11:39:ef:ed:93:ab:83:
2b:bd:0a:75:64:ca:46:53:7f:78:02:66:62:2d:88:4f:aa:a7:
07:57:e0:99:e8:b9:ad:3e:5e:19:1b:55:50:d5:8e:0e:90:ed:
1f:14:08:8c:1b:b6:a0:cb:e3:0a:95:59:0c:2d:34:2f:aa:b1:
3c:3c:83:26:11:ff:56:23:e5:1d:cd:11:62:30:6c:af:64:82:
ff:b6:ed:b6:37:11:8d:e3:59:d7:3b:8b:fc:62:5e:20:0b:be:
3a:39:fd:51:84:3b:0e:ba:49:f4:d7:ac:dd:3f:1a:59:e4:d9:
b5:7a:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:40 2025 by rpki-client