Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
File: ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa (raw, json)
Hash identifier: 2FYrKPImsI/9AerzNRBSm7YcNZQBPrMP0G4KNYRBpEE=
Subject key identifier: AF:08:8D:1D:72:E1:E9:76:BD:43:3E:C3:34:C0:FE:85:C6:EC:EC:00
Certificate issuer: /CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
Certificate serial: 010D0C9F4328584913AC3AC20304F6E00F526000
Authority key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 25948
IP address blocks: 23.172.208.0/24 maxlen: 24
172.110.129.0/24 maxlen: 24
198.135.236.0/24 maxlen: 24
199.212.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3a:c2:03:04:f6:e0:0f:52:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=bcc068bd-7500-4000-bfc2-98aa76bddccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:a9:92:79:f6:b6:0a:50:86:5c:8b:d0:46:
88:83:c3:80:c0:e1:c8:eb:7c:17:36:98:6c:4e:19:
dc:1c:ab:55:cc:cf:81:df:66:fb:41:61:01:e1:f9:
c5:2c:32:88:a7:25:83:2e:ab:b3:0a:68:f3:c9:0b:
f4:0b:8e:c0:c7:72:f4:84:d9:44:96:a6:6b:d9:07:
e8:bc:30:be:a4:2c:c4:49:e1:a5:70:38:e3:08:b0:
1f:ea:33:d5:17:86:1e:1b:80:89:92:cb:bb:3f:d9:
26:07:87:46:d6:e4:e6:b3:08:a9:7e:c7:0a:58:0a:
a6:e3:56:e1:55:b7:f6:b4:c4:7f:94:04:1c:ce:47:
7c:97:fc:75:4f:29:ab:82:a3:58:f2:41:05:cd:12:
f6:5c:93:fa:34:cb:96:d1:3d:84:2d:d4:a1:07:c7:
c3:7b:8a:07:1f:14:d5:ae:3c:65:8d:07:96:97:56:
a8:38:a7:91:5b:9f:cd:60:5e:ed:1c:c8:23:ce:6c:
35:38:56:c3:2a:7a:be:0e:e2:b1:36:2f:d8:3b:0f:
6b:a8:69:46:61:d3:e7:0d:f8:17:00:39:cf:17:44:
0b:1d:c5:7d:76:4b:59:0f:90:88:96:4c:4c:a5:af:
13:98:8c:75:30:85:dd:95:77:47:2d:66:be:d6:0f:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:8D:1D:72:E1:E9:76:BD:43:3E:C3:34:C0:FE:85:C6:EC:EC:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl
X509v3 Authority Key Identifier:
keyid:AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.208.0/24
172.110.129.0/24
198.135.236.0/24
199.212.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:96:40:a0:17:7d:98:47:50:f2:8f:6f:db:05:39:ce:5b:9c:
b2:54:22:bf:f6:36:5b:64:53:0f:08:5d:8b:cd:ba:c0:e0:9d:
c4:96:3a:38:7c:a0:a3:2e:15:6c:34:bd:46:64:7f:49:c0:e4:
ad:cd:5e:13:c9:3a:64:d1:1e:4c:f3:ff:9a:ab:6c:f8:d0:43:
fb:18:38:a5:22:2e:9a:89:72:46:41:78:44:a5:2d:05:90:bf:
58:d9:f1:2e:20:94:d1:ea:a7:d7:02:f0:73:72:fc:ca:4b:bc:
29:97:2d:75:6c:0b:9a:aa:06:d8:04:47:fd:0c:44:ac:bf:aa:
9a:82:ef:9e:34:89:89:71:d6:8c:7d:39:a8:b3:ba:be:c4:23:
36:15:44:4e:54:39:86:c5:92:57:ba:11:74:8b:01:ee:5e:a2:
ac:ab:9b:db:6b:aa:c8:fd:d5:37:35:11:90:b6:15:bd:0a:48:
f4:1e:bf:52:1c:38:69:a1:41:55:20:64:8e:70:40:ec:ef:93:
2a:33:d2:4e:e2:cc:7b:2e:1d:08:ed:27:a5:f4:94:f9:d5:f4:
50:5e:c7:11:0a:21:69:86:cd:c7:e8:15:e4:13:5d:7f:02:98:
09:23:bf:05:27:7d:df:d7:3b:01:c1:fb:fc:11:85:24:3a:9e:
fe:b5:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:15 2025 by rpki-client