Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa
File: 376815db-2a35-3f76-bafa-0b1653000f0b.roa (raw, json)
Hash identifier: vcxE7sAwmZppylJvBjetFFU99SQMGCIohdLHgEw2Hmw=
Subject key identifier: 8D:72:37:70:57:22:63:91:DB:40:8E:E3:E5:E8:FA:26:0C:C0:6E:B9
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848DEA10FF9AABE548D2FA8BC80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 50304
IP address blocks: 172.102.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:0f:f9:aa:be:54:8d:2f:a8:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=a32a3bf3-39aa-4a17-8033-34dbe2541e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:77:ec:c5:55:f8:75:b8:32:75:e7:48:76:
6d:f5:0e:2e:d1:0d:ee:1a:0e:c1:7c:7f:00:74:23:
04:97:89:3c:00:d5:33:10:f7:67:69:91:92:1c:c3:
d3:75:ab:11:6c:35:cd:a1:ca:76:43:2b:0e:f4:b3:
4f:a2:50:23:b6:78:75:17:71:8f:72:1c:48:7c:41:
03:1c:05:91:53:4f:a0:aa:33:a2:0b:f7:5e:5e:35:
43:ef:e8:cf:e7:ca:b3:f6:0f:aa:54:cd:b6:a9:db:
ea:78:54:a5:5c:fc:20:df:3e:53:33:e9:28:35:35:
cc:48:a3:1e:57:23:66:f1:ae:70:1e:7a:69:0c:0f:
69:c5:8b:b7:c1:e9:5d:f9:1a:57:30:5f:8d:a8:06:
78:9f:ab:68:80:c8:9f:8e:c0:93:3f:e2:b4:87:2c:
6d:28:da:30:f9:89:7c:d0:f7:b5:57:8b:c4:a3:c0:
32:0b:c9:15:af:6f:7f:68:16:bb:e3:13:c7:50:3c:
a6:11:8a:aa:17:84:4f:a3:0b:0f:8e:8d:54:c7:d5:
b0:a3:5d:9d:dc:28:42:c2:24:0b:1b:cb:f9:d4:17:
fd:cf:78:34:ae:14:a5:04:72:c7:eb:d6:45:f2:6f:
b0:0d:a5:a3:8a:87:45:61:bd:f3:1c:90:3d:b1:9f:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:37:70:57:22:63:91:DB:40:8E:E3:E5:E8:FA:26:0C:C0:6E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:09:0f:cb:8e:55:74:2e:1a:7b:87:0f:fc:f5:8a:bb:9d:3c:
fb:85:d5:f3:95:64:07:a8:8d:9e:f2:61:9a:8e:f0:d8:b1:0c:
ec:8b:e1:0b:b4:69:6e:e1:d6:7f:f1:84:5b:99:8e:2c:51:d6:
d5:a6:8e:7c:cc:71:e8:f0:49:d9:c6:71:d6:b3:3a:c5:20:ba:
f9:fd:b6:ef:30:69:38:79:38:89:f1:e9:e3:85:bf:e6:b3:ce:
72:bb:7f:64:9a:d7:ce:78:01:07:08:51:82:0a:1a:7e:9c:f8:
35:57:3e:54:83:d7:5b:53:eb:99:89:d6:77:69:56:4e:51:b9:
56:b6:a6:1f:5e:05:ce:af:4e:5a:75:40:ab:e4:5d:03:67:7b:
5b:5e:8a:57:1e:ff:f1:ac:37:4d:58:33:ef:0e:17:b6:e8:1d:
00:0d:94:1a:76:ad:97:3a:98:a5:65:04:a6:3a:69:77:79:85:
e3:88:f3:f7:b7:df:72:ca:ea:15:72:e3:d9:46:75:11:56:e3:
3d:1a:4c:7d:40:06:e0:f8:c0:dc:e7:a9:f6:09:a6:7e:bd:8d:
97:9c:ba:4a:e3:6c:54:52:f8:da:c3:ab:d4:70:4d:24:1b:f7:
5f:b4:7a:79:f3:50:ee:88:e4:3a:c8:29:46:9a:58:54:68:e0:
cd:f7:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:25 2025 by rpki-client