Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff/8e5133af-fd82-3649-8f63-1b01946524f8.roa
File: 8e5133af-fd82-3649-8f63-1b01946524f8.roa (raw, json)
Hash identifier: f9hUFbYC7bARB8Yu3sMQJTEnZz0jbKLOTDxFQcykrUE=
Subject key identifier: EE:A3:93:27:67:6F:89:EC:A3:92:EC:03:F1:D7:3E:E0:9F:3F:4F:23
Certificate issuer: /CN=937ecd03-6e3a-4a14-8b07-77ed63155bff
Certificate serial: 010D0C9F432858487B85B201537F13BD893F2E40
Authority key identifier: 45:8B:C9:8A:F7:26:29:DD:DC:C7:BD:18:99:91:20:3E:88:87:37:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff/8e5133af-fd82-3649-8f63-1b01946524f8.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 217.11.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b2:01:53:7f:13:bd:89:3f:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937ecd03-6e3a-4a14-8b07-77ed63155bff
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=21fc72ef-b54c-4a78-a3a4-cb064ba55d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:33:08:cb:70:a7:cb:a3:77:dc:f1:6c:e5:
1a:60:4c:48:b6:d2:e3:31:ab:0e:96:05:f4:5e:45:
5c:f1:91:eb:8c:b6:97:cd:83:c9:1b:02:0e:61:01:
f8:67:0e:05:2b:22:a4:be:0f:d5:c1:84:8f:be:88:
3a:40:e1:30:1b:a2:95:78:78:bf:31:1d:aa:6d:d2:
9f:0a:26:32:2a:d8:fe:ef:f2:af:01:24:6a:f0:8f:
da:52:a6:21:33:e3:c7:fa:31:2a:bc:b8:41:08:07:
4d:29:50:67:38:05:1c:c9:9f:6d:81:3a:a8:79:d6:
5f:38:ef:c8:f4:b5:f4:96:25:0f:50:58:66:88:27:
42:50:a7:e8:5f:3d:d3:8f:fc:6a:32:87:a5:08:91:
1e:4a:3c:92:36:7c:fa:a4:c3:91:90:97:1a:cd:b0:
ec:c3:e2:47:6e:31:54:ee:f3:ed:9c:40:bb:7b:07:
92:0f:11:ef:4f:e1:67:bd:d0:1e:0d:c2:43:c0:73:
d4:d4:90:c0:8b:0d:da:e8:0d:59:9a:ce:4a:91:18:
80:ad:bb:57:05:2f:e3:a5:ba:f0:6b:14:84:3d:e8:
70:8c:64:ec:61:8c:6c:79:43:01:ed:0d:6d:9a:8b:
e9:a3:51:fa:08:14:f4:06:4c:8a:dd:9f:bb:8e:04:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:93:27:67:6F:89:EC:A3:92:EC:03:F1:D7:3E:E0:9F:3F:4F:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff/8e5133af-fd82-3649-8f63-1b01946524f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff/937ecd03-6e3a-4a14-8b07-77ed63155bff.crl
X509v3 Authority Key Identifier:
keyid:45:8B:C9:8A:F7:26:29:DD:DC:C7:BD:18:99:91:20:3E:88:87:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/937ecd03-6e3a-4a14-8b07-77ed63155bff.cer
sbgp-ipAddrBlock: critical
IPv4:
217.11.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ce:68:2a:bc:10:ee:4e:0e:5d:16:1b:e8:b2:26:5c:9b:ac:
b5:57:4d:55:6f:6b:d7:12:4f:d3:e7:40:a5:91:7d:fe:02:3c:
98:80:31:64:e3:38:16:1a:f3:09:fc:67:3b:17:cd:29:5b:fd:
5b:77:2f:72:d7:25:87:18:d5:1f:eb:a8:5e:4f:b3:2f:e9:7b:
81:73:97:0c:ca:4e:9d:d5:f0:47:d0:07:76:6c:a6:9a:44:f7:
27:6a:e3:4c:dd:1f:ee:99:14:f9:c2:77:d9:74:02:d2:fc:e6:
1d:31:4f:2e:00:b4:e2:7c:bd:2a:54:1d:48:d4:65:85:93:99:
7e:6b:e4:71:24:58:0e:e4:21:22:f5:a6:85:67:ce:f9:2b:60:
5b:b8:d9:a0:ed:ea:54:14:01:6a:09:72:de:da:b6:56:e8:6c:
d1:1b:45:2c:64:97:5c:13:c0:eb:a8:b4:44:f3:55:2a:23:5e:
2c:0b:f8:d9:9a:bd:fd:70:1c:e7:6e:ae:e5:92:0f:5c:ad:3f:
59:27:a5:e3:28:40:e3:d2:bd:2e:a8:cc:b5:52:27:8d:48:58:
76:fa:9e:dd:50:c4:d5:26:6d:59:24:e8:9e:cf:80:16:df:d2:
93:ca:e2:29:94:8e:8c:69:c0:92:a0:4f:80:94:e9:01:e2:75:
63:5e:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:31:55 2025 by rpki-client