Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa
File: 9427c3ba-366c-3030-b0b2-82dec0245ef9.roa (raw, json)
Hash identifier: a3rRYre0+OORllGwwwffMs3+4DdEIyLs/M8ce7owk+o=
Subject key identifier: D2:57:2E:CB:C8:D0:9A:EE:36:06:64:BE:DD:2C:63:C2:5F:39:5D:04
Certificate issuer: /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial: 010D0C9F43285848A6CB65DD966BAA8427557A00
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 393591
IP address blocks: 65.254.172.0/24 maxlen: 24
65.254.173.0/24 maxlen: 24
65.254.177.0/24 maxlen: 24
65.254.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:65:dd:96:6b:aa:84:27:55:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=168e22fe-3d0e-4737-9254-8b7857b9b8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:b2:f9:4a:56:03:13:09:49:fe:f9:52:13:
a4:cb:9b:5a:03:05:38:a0:fe:2b:aa:55:4e:a2:58:
7f:ea:9a:b5:0a:ae:2c:d6:f7:95:fd:b5:1c:a1:85:
27:d6:3a:42:c9:29:ef:35:50:a4:0e:27:05:d7:6b:
6c:e2:f5:57:8e:8e:09:16:5b:36:d0:43:a9:75:dd:
f2:cd:e5:c6:d3:f2:d9:be:80:43:e0:25:34:b6:12:
99:23:11:11:2d:9f:46:9b:87:45:88:ed:ae:99:78:
0c:d7:e8:28:23:1a:42:17:1a:19:f4:dc:e4:d3:7a:
67:e0:a8:45:5b:81:f2:be:e9:15:78:26:86:e4:19:
6d:ca:18:4c:fa:f5:78:85:f2:a5:fa:21:8e:3c:d8:
31:3f:8f:9d:92:8f:f5:4a:57:b1:22:e2:8b:00:f7:
29:e0:aa:a7:fc:85:a9:c9:6a:df:66:42:90:9b:8d:
6a:be:eb:12:5a:cb:47:a1:de:cd:a3:7f:e0:5d:1c:
8c:01:0d:ec:0a:06:0f:2f:68:f3:eb:d7:cf:08:0d:
8e:48:02:67:72:c9:7e:b8:3c:ee:5d:5e:26:0f:7b:
1c:9d:bc:89:f8:d6:0d:f0:a3:00:31:f7:f5:7d:6d:
65:d1:25:2b:9b:22:93:eb:d2:27:d9:6e:61:f4:1e:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:2E:CB:C8:D0:9A:EE:36:06:64:BE:DD:2C:63:C2:5F:39:5D:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
X509v3 Authority Key Identifier:
keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.254.172.0/23
65.254.177.0-65.254.178.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:38:33:3f:b1:56:d3:96:39:6b:28:83:f1:e5:ae:ff:a4:ac:
6d:59:56:92:66:da:b4:06:4a:01:8e:73:b1:83:1c:31:b9:91:
b5:c7:f8:cd:96:b6:8e:c4:0c:a6:e5:4d:e8:ff:07:b3:4e:3e:
ae:95:84:c2:db:ae:f6:87:b6:04:b5:26:c3:e8:16:47:ae:88:
ab:2b:e2:f0:f9:17:00:75:9a:8a:27:d4:0f:4a:71:fe:08:b8:
99:c2:98:0d:27:09:03:d5:5e:8e:22:4c:50:3b:4a:a9:e5:53:
ea:7f:ac:b6:55:77:a7:00:ec:6b:e5:7d:ab:ed:fc:b5:57:40:
91:94:7d:14:6e:7e:b0:59:93:b9:48:d4:8c:16:66:6a:4d:82:
eb:29:79:a7:0f:71:7b:30:2b:21:9e:e9:95:2b:4e:09:e5:62:
c3:c4:5c:6d:62:d3:73:b4:25:33:b1:16:de:52:44:3b:05:66:
fc:b8:87:ea:dc:e7:b0:55:fa:ef:cf:96:0a:14:06:5d:70:bb:
b6:e0:20:83:26:01:7e:de:57:e1:0b:56:69:56:7d:56:b4:f7:
17:f1:9b:e1:38:e5:e9:ca:83:43:03:04:12:f4:e6:62:72:b7:
8f:50:4c:b6:22:1e:8f:78:37:c8:e8:48:8e:ee:b8:b9:41:36:
2b:40:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:47 2025 by rpki-client