Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa
File: 26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa (raw, json)
Hash identifier: DcIK6pa1XFgTjISH28Ah/6bhHpT8htf59GH7eEDUbrA=
Subject key identifier: 14:F5:58:F7:BD:70:B6:DD:50:08:D8:F7:BB:F4:7B:BF:B9:28:7F:1B
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848A9963288F8D13B4B2E3EEC00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 396971
IP address blocks: 173.242.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:32:88:f8:d1:3b:4b:2e:3e:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2bb1fe6e-c56b-4253-9db1-cc9855145dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:52:98:f2:ba:00:86:47:56:d6:ad:3a:38:
6c:68:d5:18:09:6a:35:00:95:4d:ce:9a:90:07:87:
29:19:c4:62:36:ff:f9:2e:4b:3a:c8:ee:bf:18:29:
17:50:32:2d:01:9d:bb:e7:f3:32:1b:63:e9:d3:40:
26:32:50:ac:e4:10:6e:df:97:c4:c2:60:f0:f9:8b:
60:81:ea:d5:52:33:3b:b2:f8:7c:6f:bd:ec:8c:54:
6e:fb:4d:f9:b2:1b:32:03:00:8f:31:15:a9:4d:de:
47:ab:3c:ad:60:89:79:f9:aa:ff:88:a9:2d:a9:80:
15:18:fe:59:df:3b:ec:9b:38:75:12:15:e5:07:c1:
25:9e:b5:9b:2a:f9:15:73:34:5b:bd:c8:2d:a9:a2:
8c:41:07:6d:ae:11:12:d1:55:de:10:9f:af:bb:99:
17:08:fd:c4:a5:39:ef:0f:30:61:94:5a:c2:1c:7e:
15:22:4f:c4:26:6d:86:12:8a:3d:d8:43:d7:ef:40:
7e:d6:1c:57:cc:6e:b5:03:7a:75:ae:90:81:9b:c4:
b5:e9:d6:cb:81:91:e3:78:72:b2:29:14:f8:bd:cc:
22:63:5d:85:b1:4d:73:af:19:d5:21:a4:77:a7:e4:
59:2c:ac:95:48:ea:37:bd:23:78:56:9d:3a:a1:dd:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:58:F7:BD:70:B6:DD:50:08:D8:F7:BB:F4:7B:BF:B9:28:7F:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d1:cd:aa:94:e3:98:6e:0e:d9:d6:7c:34:bf:b8:f4:fa:92:
1a:91:0d:cb:73:29:d2:39:da:09:11:de:dc:27:8e:15:4f:9c:
8f:f8:bc:2b:e0:9c:3c:9b:0e:c7:01:5e:db:fa:11:6d:33:e1:
c7:49:a5:5c:c7:33:28:3e:20:b5:f5:38:0b:7e:36:b9:fa:d5:
9a:12:07:06:44:1e:75:09:24:69:34:d9:8a:75:f5:0d:90:9d:
63:2d:75:ad:33:19:82:0b:3d:16:7b:ed:bc:40:25:4f:63:ec:
0b:c5:7e:fd:b3:73:49:cd:10:7c:b7:1b:02:e5:5f:7b:d4:38:
31:07:6f:1c:32:b7:13:5d:b5:3d:a6:c5:ed:8b:d1:47:42:0b:
43:b1:0f:2e:6e:02:8f:68:7e:22:0e:1d:10:88:bb:3e:9c:ab:
d6:9e:4d:8e:02:a0:19:66:1a:7f:9c:75:62:3b:f2:3f:67:a9:
6d:41:96:56:25:01:68:42:58:40:92:7f:41:98:77:b7:f1:2e:
3f:d5:19:ef:00:e7:86:61:2a:0d:79:1f:c2:fd:dc:f8:8f:3a:
97:53:39:a3:31:71:72:a9:58:98:cb:66:b4:39:f2:06:9f:2d:
f6:36:7c:45:91:59:6f:b6:91:c7:0c:f9:7a:13:fa:89:22:72:
66:05:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:56 2025 by rpki-client