Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa
File: 658cc9c5-39bc-370d-81cd-718d6b671117.roa (raw, json)
Hash identifier: /N/XmWsEsAQEKJwYCmQUyWr5oE8ZZQZn6RJ89wczwjs=
Subject key identifier: 66:42:15:CF:C4:70:54:E3:53:20:C1:BA:35:A9:66:77:AF:EE:44:3C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D6412CB76E2E207C7A769A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 212238
IP address blocks: 172.120.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:2c:b7:6e:2e:20:7c:7a:76:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=d6e3a101-b039-4245-858f-85cf4021145a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:6a:a6:0d:36:7e:f0:8a:30:ff:5d:d5:70:
86:a3:3a:94:ae:8b:30:7c:cf:b3:59:38:9e:b2:2a:
18:0c:b5:8b:5c:6d:a8:87:f2:c6:04:57:5c:04:22:
de:5f:66:a8:ad:b4:8e:3b:73:6d:b5:df:4b:0e:02:
06:3f:e8:aa:e1:95:07:0e:e5:c0:b6:57:ed:8d:1c:
50:5b:68:4a:12:e9:f7:34:5e:4a:ae:a0:ba:44:87:
f1:e5:44:b7:c5:94:2c:50:2b:b0:fd:f1:9a:b1:f4:
33:0a:54:ae:7f:0f:9d:91:06:7a:9f:79:e1:95:4c:
5a:a9:9a:c8:94:60:63:46:15:1f:69:19:b6:43:9e:
fe:f2:e6:dc:6d:6b:d8:34:ff:ec:65:f3:69:28:71:
a2:d0:a2:6d:b7:68:64:3d:c4:cd:ff:07:ee:de:99:
d4:4e:3a:67:14:5c:9f:dd:2b:cf:35:75:73:93:7e:
39:8e:13:c4:6d:24:e0:9a:22:86:61:85:b2:2e:15:
21:e1:b1:81:27:48:a7:98:0f:a3:be:3a:de:f1:74:
99:3a:3f:05:79:46:4d:fc:7e:c5:b0:72:ab:cf:15:
87:a4:63:ed:d1:89:16:73:42:a1:d9:00:a6:56:37:
0b:a9:7c:4a:ae:bc:03:1a:c6:31:fa:ba:08:5f:0a:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:15:CF:C4:70:54:E3:53:20:C1:BA:35:A9:66:77:AF:EE:44:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:1c:fc:73:d7:d5:c2:20:9a:be:9a:6c:e5:ab:4e:ca:7e:c4:
c7:bb:ce:a1:dd:6b:e0:0e:09:1c:b3:7c:36:dd:c4:2f:1b:2f:
51:64:28:f8:1d:36:1e:df:08:45:86:5d:5f:cd:97:ae:98:e3:
56:c1:39:84:17:31:63:76:65:2e:89:91:3d:b8:32:9e:0c:77:
b9:61:11:31:54:2a:f2:85:10:09:b7:d6:06:20:8e:26:85:77:
f1:b4:9f:8d:2e:95:fa:47:97:7d:d0:aa:26:02:f9:bd:b0:f8:
8f:16:e0:90:66:72:31:25:66:1b:ea:61:6b:17:a6:19:e5:30:
f7:46:8d:c5:f2:91:a3:56:bc:07:c2:e8:c2:74:47:8b:e6:1d:
13:3a:15:c8:fb:82:6e:0d:bb:67:8b:30:33:bc:53:c8:91:16:
dd:a9:9f:a6:e3:9e:9f:a6:b0:a8:7f:f0:55:3a:58:99:51:5f:
b1:2d:c7:02:df:cc:fa:0e:9f:5b:96:04:a4:bb:44:bd:53:22:
eb:7b:8a:07:f5:d2:da:63:8e:ea:8a:fd:3b:67:46:b5:e6:83:
55:5b:36:11:b5:9b:7d:2d:75:9d:4b:9d:76:8f:d0:aa:8c:b5:
e7:d3:44:cd:b0:a3:c0:15:fd:e2:bb:6e:f0:ba:94:c0:c0:da:
f6:fc:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:56 2025 by rpki-client