Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b3390bb7-4d1e-3dd9-8e4c-aa1c33a50cd9.roa
File: b3390bb7-4d1e-3dd9-8e4c-aa1c33a50cd9.roa (raw, json)
Hash identifier: uRulsFlnSYhb9CpFUMh5qFadp4UzY2nsXDNJ+w5QpX0=
Subject key identifier: E3:AC:AA:6D:40:1A:F7:8D:AB:F6:F6:55:AA:24:33:19:EE:D5:C6:97
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F43285848B35B6F4F0915735B07493880
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b3390bb7-4d1e-3dd9-8e4c-aa1c33a50cd9.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 19886
IP address blocks: 171.162.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6f:4f:09:15:73:5b:07:49:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=f415c674-8ae9-46ab-b5bd-334e270069d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:95:26:23:50:dc:44:31:e0:9b:3e:07:e6:
13:a9:68:ef:4c:71:d0:73:6f:b8:0c:89:d3:df:2a:
bd:05:41:5d:cf:60:d5:66:8d:9b:1f:cd:2e:08:1a:
32:f6:9d:4d:55:61:4f:e8:91:89:62:ce:81:9f:5e:
bc:93:5e:4c:5c:e6:74:48:ec:45:ec:f8:62:07:48:
a3:98:5f:78:66:23:cc:36:03:cd:1d:96:7a:71:05:
db:f4:d9:88:28:d3:1a:63:b1:1b:37:20:dc:0f:24:
fb:a3:ee:46:b1:e9:32:58:21:f3:82:70:29:c6:d2:
49:26:75:50:a4:eb:5e:03:42:9c:92:33:64:75:ec:
5f:d0:dc:be:f0:96:e9:16:e8:bd:f3:ba:f1:2e:54:
6d:41:8b:8c:00:db:3d:d0:e3:36:b9:ef:8d:ac:99:
e4:2b:ee:75:3b:40:17:de:fa:ab:f4:ea:76:ec:1b:
f1:18:72:ab:e6:ac:17:21:9c:d7:e1:61:6a:19:c6:
3e:bb:19:93:ee:69:d5:e9:a6:55:67:2a:73:5d:50:
52:7e:c6:22:99:26:af:78:4d:91:7c:bd:58:d5:74:
aa:11:3a:38:74:fa:42:e0:83:d6:bd:99:a1:fd:55:
2d:22:61:3c:f4:d9:60:ba:89:e0:70:8c:b5:45:d3:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:AA:6D:40:1A:F7:8D:AB:F6:F6:55:AA:24:33:19:EE:D5:C6:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b3390bb7-4d1e-3dd9-8e4c-aa1c33a50cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.162.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:51:c6:0e:36:32:45:fc:97:f4:a9:0b:18:1b:6d:57:6d:4d:
ab:45:5e:56:7b:53:41:cf:4c:93:a1:84:60:84:21:d2:47:8d:
4d:a3:76:b7:f0:7a:5e:c1:19:55:0f:99:eb:6e:ca:e0:a3:e9:
84:2b:fe:cd:10:f9:55:2c:b1:31:3d:8b:4f:36:0a:22:1a:de:
2c:44:b2:f9:3b:bc:05:b5:a5:bd:25:ea:b4:80:02:bb:07:5f:
cc:ac:9d:22:34:ef:5e:4d:e5:dd:b9:df:62:e3:cd:ef:b7:44:
d7:52:71:88:4c:62:b5:8e:59:54:a4:16:52:fe:e9:21:55:97:
49:d3:2e:f2:26:e8:d2:ae:df:6f:62:b4:ef:98:00:61:32:c0:
d7:39:04:59:af:05:8c:9e:04:3f:26:7a:75:e5:44:a2:29:34:
6f:6d:67:dc:08:84:9e:2d:09:bb:a6:59:c1:cb:f0:1e:bd:6c:
1f:31:0a:76:be:83:19:93:fb:a7:17:40:7d:cc:42:bf:e6:88:
7d:33:83:b5:a1:0f:f3:32:17:22:93:26:03:c7:40:ec:25:27:
7e:e5:60:0b:ec:09:f0:f9:c3:a0:37:be:a4:aa:d8:99:97:e6:
cf:08:54:7a:bd:35:0e:34:d3:75:9c:55:f6:fe:67:8e:02:88:
a5:8c:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:33:43 2025 by rpki-client