Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa
File: df21d110-4970-3241-a169-7ac7cce64a91.roa (raw, json)
Hash identifier: we4Wr7phxgU9kJG5PgYmAp2CgwzBVLUBPk4/LsNTHwo=
Subject key identifier: C7:69:4F:90:DC:81:E1:94:9F:67:E6:CA:38:A1:15:87:0C:4F:0B:1C
Certificate issuer: /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial: 010D0C9F43285848D060F59AE2DFD8B1703FC300
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa
Signing time: Sat 08 Feb 2025 11:30:23 +0000
ROA not before: Sat 08 Feb 2025 11:30:23 +0000
ROA not after: Fri 09 May 2025 10:30:23 +0000
asID: 36734
IP address blocks: 173.195.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:60:f5:9a:e2:df:d8:b1:70:3f:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Validity
Not Before: Feb 8 11:30:23 2025 GMT
Not After : May 9 10:30:23 2025 GMT
Subject: CN=cf25e574-bd9c-4a17-944b-61f7c6649f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:f5:da:40:a6:fb:98:e1:50:d4:5c:d2:f4:
13:e5:25:7c:64:38:34:74:53:82:25:b0:b7:0c:bf:
8d:5b:4e:15:75:5e:0d:26:2e:a0:bc:44:9f:3f:92:
24:09:62:92:88:3e:f7:6c:0e:de:69:17:ce:2b:dc:
e5:af:63:13:49:50:be:88:a0:1b:a9:31:bb:bc:57:
35:ee:7f:12:3c:fb:21:b7:ea:8c:83:0a:7d:5c:18:
c1:d7:fe:fd:31:3d:85:c6:c1:df:6c:67:fc:7f:df:
9b:f5:2c:2c:1e:02:a4:a0:f0:93:30:29:0a:e8:30:
fd:ec:40:67:ab:0f:3c:25:d5:01:f8:4f:b6:e1:16:
e8:3e:34:be:94:78:d6:bf:3b:2a:ad:04:9b:74:dd:
4a:fc:a1:40:a5:ef:fd:19:80:3a:7f:68:a1:98:f4:
98:71:7d:ab:b4:a5:6c:38:4a:ac:51:cb:5a:a9:e8:
55:76:55:4c:4c:a9:f1:80:aa:68:af:76:ad:1d:5b:
3c:cf:4c:b0:59:ae:3d:9e:d7:cf:31:5b:eb:04:8a:
f7:90:a1:b3:65:e1:47:9e:e3:a9:c9:97:03:c0:f5:
27:4d:73:7a:74:de:20:4a:54:70:51:e9:e0:31:50:
dd:e9:2f:57:b6:5f:83:29:3a:1f:c6:e0:da:5d:4b:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:4F:90:DC:81:E1:94:9F:67:E6:CA:38:A1:15:87:0C:4F:0B:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
X509v3 Authority Key Identifier:
keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4c:53:7a:ec:e3:06:40:b0:ed:2e:04:34:2b:ad:a0:5f:d5:
dd:7e:d8:1b:cc:5f:6e:2c:ed:b3:e0:0b:ba:34:85:71:bd:6b:
10:22:67:cb:0b:9a:18:bb:0a:05:a7:ce:40:01:ea:75:0e:56:
d2:28:2c:e2:f2:0a:ef:41:bb:67:2b:b0:22:50:79:83:3a:56:
53:22:7d:98:c4:9f:1a:68:5d:bd:31:9b:76:ac:0e:40:db:78:
ce:2c:b4:f3:fa:20:bc:1a:b3:b8:c8:38:61:a6:5c:8f:07:33:
a8:3b:d0:fb:46:30:07:a6:77:e9:6b:23:82:62:25:d5:56:19:
07:d7:7d:68:f0:11:ff:bc:c5:a9:17:34:10:f0:1f:21:c6:db:
bf:2f:15:44:80:f1:13:93:15:38:68:ac:e4:c0:ee:92:4e:81:
61:f2:49:a5:b9:93:85:5e:83:c4:3d:53:78:c1:5c:0d:00:0c:
7a:38:50:9d:0d:02:ef:76:3f:b8:35:93:c5:b6:84:67:50:eb:
bb:f7:37:f3:d7:7d:40:8e:16:5b:4a:83:ab:d5:88:e3:0f:73:
78:46:a9:cc:e8:5c:f6:20:a1:74:12:16:79:2c:02:95:97:c2:
3e:fb:7c:eb:dc:48:40:83:4f:f8:4e:86:a8:ce:75:a4:2c:3c:
96:54:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:09 2025 by rpki-client