Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/963366fc-f9e6-3ffc-9639-2e47e3075851.roa
File: 963366fc-f9e6-3ffc-9639-2e47e3075851.roa (raw, json)
Hash identifier: WEN46MKpmkFBj/0feYxsKaBhW7xW7mXnBwGOv2sQS+4=
Subject key identifier: 60:7F:39:A3:95:BA:CA:08:AA:08:E3:20:D7:97:78:6A:08:82:F3:FA
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285849244E859B2199A62991192280
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/963366fc-f9e6-3ffc-9639-2e47e3075851.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 137409
IP address blocks: 173.239.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:85:9b:21:99:a6:29:91:19:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=188fcdc3-0efe-4910-8a38-c498d5b55865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:b9:41:77:e9:06:39:81:b2:68:6f:84:9c:
85:55:6c:08:d7:ce:fd:b5:fa:ad:35:81:03:df:38:
d1:86:e1:fd:77:bd:bb:93:df:c2:d0:d8:30:18:95:
74:9a:c0:b1:05:c0:1d:61:ec:68:ac:6f:b1:9c:a0:
bc:31:d8:18:d3:43:61:2c:f8:d8:2b:ec:40:5d:fc:
6a:a8:0a:c1:e3:de:09:89:5b:28:01:8b:28:52:79:
f0:8b:71:a3:63:8d:68:4b:26:99:6a:b1:9a:a1:0e:
88:96:ec:93:68:73:60:18:4f:85:3c:54:bd:d5:a5:
dd:50:ac:8e:19:de:7f:3e:c9:27:10:92:63:b5:4c:
f6:50:5d:33:36:90:ff:b6:dd:1b:d7:30:34:23:49:
f5:5d:ac:b0:c9:f5:57:76:53:f9:4b:40:4c:30:ef:
4b:dc:82:72:00:7e:90:66:0a:79:62:5f:75:d3:fe:
d2:0a:59:26:00:73:66:85:a8:c1:b0:aa:dc:0a:4a:
08:66:74:18:4b:d5:90:a6:51:13:b5:5b:a2:8e:4c:
bc:23:03:46:9e:a0:81:9f:84:35:18:17:4c:86:12:
af:5f:b4:68:b0:8a:42:83:68:9c:3f:61:de:5b:da:
4d:db:84:22:a4:70:43:82:9d:91:06:7f:e7:b6:e1:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:39:A3:95:BA:CA:08:AA:08:E3:20:D7:97:78:6A:08:82:F3:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/963366fc-f9e6-3ffc-9639-2e47e3075851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:da:64:61:16:59:45:cd:89:86:33:e3:7e:1f:9a:33:9a:0b:
c1:47:2e:56:69:e6:0b:2e:cb:74:ed:bc:d4:59:db:0e:73:b1:
17:a8:d3:a4:97:cc:53:f8:94:45:2e:15:a9:ef:0c:36:d0:e1:
9e:27:1d:6e:62:a5:ee:01:48:69:4a:af:e0:eb:12:d4:88:ad:
0a:c7:eb:3b:d7:5f:d6:5f:3a:16:df:d4:5e:ec:6d:93:cc:ba:
b7:3c:48:aa:13:4f:21:a2:19:6d:56:ea:ee:11:46:f9:31:96:
b8:8b:a0:63:f0:c3:26:77:9a:60:ff:f1:77:36:57:86:f6:58:
1d:f4:d7:f4:e0:47:5a:a7:bb:f9:00:70:85:2e:70:b1:a3:80:
e0:ff:09:90:db:b3:a1:04:91:f8:4b:3f:ce:2f:82:52:59:77:
1a:e5:b3:e2:fe:2b:9b:30:86:01:82:ef:a2:15:d6:aa:b2:2f:
8a:83:98:ab:a6:9f:b2:3e:e7:9c:e2:ef:ae:3a:b4:6e:ac:ca:
8a:73:3c:42:0f:4f:31:33:90:df:1e:97:e2:95:2d:b6:62:8b:
14:9a:ab:77:e9:1e:d2:37:18:26:ce:4f:e2:69:79:6d:03:ac:
79:6f:9c:0a:9e:65:f2:73:2e:66:6e:90:a7:e6:e3:f3:f3:24:
6d:29:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:12 2025 by rpki-client