Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa
File: 1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa (raw, json)
Hash identifier: vJL/D8ftNtGyER+6KBWTE0IgN4R7O4ELBtfxRcGAWaA=
Subject key identifier: F2:B8:93:AB:53:02:C5:02:7C:76:9D:67:D0:A0:D3:8C:7A:33:8E:05
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F43285848A44D49560499E94599746700
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa
Signing time: Thu 23 Jan 2025 16:35:11 +0000
ROA not before: Thu 23 Jan 2025 16:35:11 +0000
ROA not after: Wed 23 Apr 2025 15:35:11 +0000
asID: 400597
IP address blocks: 217.149.96.0/24 maxlen: 24
2602:fb1b:60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:4d:49:56:04:99:e9:45:99:74:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 23 16:35:11 2025 GMT
Not After : Apr 23 15:35:11 2025 GMT
Subject: CN=6dd78ac5-d8bf-4e2f-b792-be440b03bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:7a:90:3a:b8:3b:7f:66:74:88:5f:ee:f3:
c1:4d:3c:b9:00:e7:8b:db:45:24:70:7e:22:0b:6f:
4c:f1:f9:f5:b2:ff:4d:34:c3:e2:c8:0c:75:19:2f:
a7:75:9b:7d:8b:41:8d:90:96:cd:a9:40:86:ad:4e:
9b:b6:2a:60:48:3e:51:04:3b:58:d9:18:f3:96:e8:
6b:be:d2:c1:11:b8:9e:dc:47:73:60:cc:ae:47:81:
f7:58:1d:48:f0:b2:ab:bd:3f:de:f4:d3:61:d8:94:
f6:61:ad:fc:97:65:e2:03:5c:65:7e:9e:9e:0c:80:
4e:2d:8c:e6:92:5c:cb:30:ae:18:1b:c7:9c:77:fd:
9a:de:37:59:5e:e2:a6:da:a0:37:25:20:48:6a:6d:
44:cd:45:01:bc:75:3c:99:64:c9:fe:bd:29:60:14:
81:7c:52:b5:d7:f1:4b:b2:b8:52:33:ff:87:fe:bc:
45:4f:a5:b6:4a:d1:bc:1c:02:db:0d:e7:af:73:f4:
63:6b:58:b8:27:cd:d8:3c:8f:9c:a8:b7:21:f9:ff:
77:aa:25:25:93:5a:ef:69:47:f3:63:37:2a:81:78:
0c:cb:c8:fc:ec:89:ec:f4:c4:80:c4:e0:68:8e:cd:
97:43:67:9c:a9:bd:3f:73:5c:2a:3b:ce:11:61:e5:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:93:AB:53:02:C5:02:7C:76:9D:67:D0:A0:D3:8C:7A:33:8E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1ca259cf-4951-3a1d-8f0f-07070ad8f25b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/24
IPv6:
2602:fb1b:60::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1e:c4:dc:b1:bb:5a:59:96:3c:05:2e:ef:a3:48:ea:f8:c4:
75:40:8a:62:30:e5:52:7b:2c:e1:39:6f:cd:fd:e2:55:75:e1:
39:4b:bb:35:e0:ea:93:46:35:b6:f9:60:04:7b:a0:6c:6e:60:
87:d8:94:80:15:1f:7a:d4:af:da:5a:7e:5f:56:42:f3:98:e8:
ff:95:48:20:5b:cd:13:d3:d7:45:da:c8:12:76:fd:85:fa:1b:
8a:af:e4:e1:57:1c:cc:65:5b:4f:71:d2:bc:87:0a:e9:c7:ab:
73:06:65:b3:f1:fa:fc:02:cd:e9:d7:f3:b2:a5:6f:a5:26:73:
92:1d:6e:5e:19:af:26:96:74:47:28:86:5c:71:14:76:b5:34:
64:01:27:11:38:95:ca:b4:14:39:5d:89:25:2e:3d:51:ff:fe:
19:f7:b0:b1:3b:6d:97:5e:79:3c:a7:bf:a9:65:8c:b0:25:17:
ff:86:a5:1b:e6:0d:6f:45:4f:8d:6e:4d:90:87:aa:7d:6c:7d:
0b:d2:2f:ec:14:d7:5e:89:62:58:07:b2:61:3b:a5:d7:e2:1e:
e5:84:58:83:1e:e8:31:cd:c8:f5:79:e7:d2:8a:3f:26:49:b5:
c1:b9:07:da:1a:a5:09:31:23:b4:1a:43:93:b1:ac:be:16:ca:
39:b5:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:07 2025 by rpki-client