Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
File: fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa (raw, json)
Hash identifier: BchOp74ZXWzBYJDdEc9DESF2VjXU5J3gtwKjYeo4mgA=
Subject key identifier: 65:24:C8:38:67:11:86:B9:97:55:99:5B:64:36:37:CA:FE:B0:38:F8
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F43285849568EB5285EB80C7004CA4000
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
Signing time: Fri 28 Mar 2025 13:00:51 +0000
ROA not before: Fri 28 Mar 2025 13:00:51 +0000
ROA not after: Thu 26 Jun 2025 13:00:51 +0000
asID: 9009
IP address blocks: 172.85.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:8e:b5:28:5e:b8:0c:70:04:ca:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Mar 28 13:00:51 2025 GMT
Not After : Jun 26 13:00:51 2025 GMT
Subject: CN=1be73032-8b2d-41df-bec3-fa46066b0b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:d3:26:61:19:6d:12:f5:23:68:60:83:a2:
8f:3b:4e:b9:a8:1b:81:75:fb:c2:02:7f:22:69:39:
13:e9:92:e8:66:0b:26:88:c1:23:de:ba:e0:d8:85:
e8:5b:b6:88:4f:19:13:5a:1a:9b:f6:a3:a0:86:58:
97:d9:2b:20:6a:ac:6a:0b:32:f8:ff:a4:ee:7e:cf:
42:6b:bb:8b:63:ba:99:ed:a3:99:15:23:ec:58:eb:
87:86:24:28:40:17:ab:48:58:86:46:a7:bc:5d:b2:
ea:f3:20:b5:ab:10:15:67:eb:66:d0:44:15:d7:fe:
2f:f6:92:df:13:50:55:18:7d:af:03:b8:25:a1:5b:
34:f7:bd:52:04:f7:22:bf:c4:af:8b:cb:8d:0f:14:
09:fd:5c:c8:f5:c4:80:7c:9e:8a:6c:3e:34:d5:24:
c5:f5:0d:0b:80:37:ef:e1:bf:32:27:6b:9c:02:1b:
3a:0b:0b:24:22:25:5e:7b:1c:96:61:02:87:8b:bc:
21:de:19:9d:ef:57:a5:b1:99:50:51:91:5c:ca:9f:
14:89:7c:16:62:cd:19:d3:cf:be:7a:ad:9c:22:e4:
c0:ef:5e:98:d7:05:82:87:5b:7d:8c:6d:95:b6:68:
10:38:b8:2d:0a:49:19:ce:cf:cc:85:e4:e4:a0:93:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:C8:38:67:11:86:B9:97:55:99:5B:64:36:37:CA:FE:B0:38:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:85:30:01:c1:d3:92:a8:b5:22:0c:d5:af:5f:50:0f:bd:56:
95:0d:ce:d0:22:bd:50:48:49:3a:f2:d4:f1:20:63:ea:d8:96:
3b:d9:24:91:9e:d1:a1:1e:b3:2c:92:55:e1:e1:30:d6:78:2b:
5d:87:ea:a0:bf:a5:4c:17:f7:86:24:8c:f0:41:e5:d8:cc:85:
51:90:a8:02:f4:7d:b3:0a:bf:ea:5e:e6:6a:f0:1b:ff:2c:21:
65:87:41:8c:44:db:d6:37:7b:04:d7:19:86:1e:79:eb:90:e6:
0d:ad:13:df:a3:01:5c:a1:eb:2c:70:f7:76:81:ad:c7:67:26:
4b:83:47:c5:81:cf:d6:33:7b:ae:ae:57:18:28:9e:eb:f4:d1:
f4:00:4d:2f:40:0c:38:0f:51:6a:c3:be:f5:74:d8:db:75:4d:
32:a5:de:1c:8c:bd:21:16:0e:63:26:19:5c:5a:50:03:cf:4d:
55:b4:fb:e5:6b:db:8a:39:8c:48:64:99:0d:14:fb:e8:dc:fa:
91:e6:50:c6:a9:9e:3b:cd:ec:07:47:d8:22:dd:b2:24:70:45:
d8:34:5c:b0:0a:70:82:4e:63:2f:24:cf:5d:b4:64:18:6b:49:
9a:aa:5e:1a:e0:d5:3a:91:90:88:01:88:fb:e3:41:53:a8:91:
5a:9a:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:27 2025 by rpki-client