Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
File: 8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa (raw, json)
Hash identifier: mCYmbwnYXHnXOk/+XkhIJAyqyzoBt3SCJSMOof+x6Fo=
Subject key identifier: 0D:F7:F1:E0:FF:73:46:EF:40:B0:C6:8E:7D:F8:25:C8:F3:46:36:D7
Certificate issuer: /CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Certificate serial: 010D0C9F432858488BDF493CD6AE4CFB84D25980
Authority key identifier: 61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
Signing time: Tue 14 Jan 2025 22:34:08 +0000
ROA not before: Tue 14 Jan 2025 22:34:08 +0000
ROA not after: Mon 14 Apr 2025 21:34:08 +0000
asID: 30182
IP address blocks: 45.59.172.0/22 maxlen: 24
199.87.88.0/21 maxlen: 24
208.69.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:df:49:3c:d6:ae:4c:fb:84:d2:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Validity
Not Before: Jan 14 22:34:08 2025 GMT
Not After : Apr 14 21:34:08 2025 GMT
Subject: CN=88ebda21-7b03-4407-b125-b0a77bfbcb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:fe:48:ba:2e:8a:b5:31:bb:e0:ad:14:5c:
3f:ce:90:97:c6:14:f8:0e:dc:e3:26:c6:e5:ac:94:
09:5c:71:1b:c9:42:8e:0e:07:94:47:a1:f2:c1:49:
77:10:29:91:35:3c:3a:f2:8a:5f:f6:a1:26:c7:fc:
9c:a8:eb:e8:73:65:5f:5d:e6:ae:33:4f:72:9c:91:
44:89:52:48:fc:3e:f5:d1:bd:f4:6e:39:36:86:8d:
0d:42:e1:48:a2:7f:e4:7f:2d:b5:bf:09:90:2b:2e:
e9:4b:0c:42:d7:04:66:c6:13:8c:43:4b:07:83:8f:
8c:24:d8:37:bd:f3:ec:e8:bd:39:90:af:6d:43:2b:
4a:aa:fe:7d:22:bb:e6:db:71:f7:24:39:3e:51:0a:
83:1d:68:b4:35:a5:cd:8d:1e:d0:f9:b0:fb:de:35:
e4:cf:e7:c5:f2:2e:fb:9e:c1:d3:3c:36:14:c5:11:
10:39:88:57:b6:62:ca:79:10:91:74:a4:5a:be:1b:
b2:5a:47:f4:a1:34:e4:af:66:3f:30:cc:94:8a:40:
35:73:c3:f5:28:56:05:6a:52:54:71:0a:4c:fd:ed:
e2:e7:e7:5d:e9:fd:ad:c3:19:0c:c5:07:8e:78:41:
e6:79:89:81:41:17:ff:66:3d:14:86:3b:94:49:d1:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:F1:E0:FF:73:46:EF:40:B0:C6:8E:7D:F8:25:C8:F3:46:36:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl
X509v3 Authority Key Identifier:
keyid:61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.172.0/22
199.87.88.0/21
208.69.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:20:87:eb:3e:ec:4b:67:6a:59:59:94:93:a6:c3:a1:d2:40:
c9:e7:11:b7:a5:48:b6:3e:08:b9:95:67:2c:5e:7e:57:e6:fb:
dc:9d:bd:d9:93:86:d1:84:29:74:92:9f:aa:86:67:5f:f5:f9:
a4:ac:ac:c3:56:47:ae:81:25:c0:68:b2:9a:98:8a:f1:03:c6:
46:9f:e7:bc:22:32:c1:10:50:e2:4e:78:e0:81:ce:46:99:b6:
68:22:3d:d8:70:ad:a0:67:39:4c:47:c6:16:14:2c:d7:5b:c8:
ff:29:ba:ec:21:f6:9b:96:80:3c:8f:3f:93:ed:69:60:94:33:
17:ff:74:b3:16:96:59:19:94:af:74:a6:5e:bc:9a:99:fe:22:
06:7d:12:50:94:59:49:1c:c4:bb:4c:cf:a8:b1:b5:7c:36:66:
5a:3b:5e:b8:c9:18:f1:2a:12:15:06:78:1e:99:1e:6f:db:c7:
8f:4a:5d:e9:51:1e:af:43:d8:e2:4f:bd:82:74:d9:63:3f:f3:
df:dc:15:be:1e:b3:d8:66:7b:76:76:59:9c:1c:9f:56:72:d4:
4b:cb:db:47:37:e5:bb:97:7f:07:22:d5:d5:fe:9a:7b:59:4e:
70:ec:bc:8f:91:6b:96:5d:e4:ca:52:16:cf:ed:7c:9c:45:dd:
2e:a8:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:55 2025 by rpki-client