Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa
File: a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa (raw, json)
Hash identifier: RO5Uc27CQlJvn2Oojef/1Bmo+l8gxJxrousMp3eYASU=
Subject key identifier: 82:F6:92:76:12:20:F5:BE:8C:60:82:D4:58:37:2A:6B:91:16:3F:E0
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848C2B64231C04C7A6990731B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 6939
IP address blocks: 172.120.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:42:31:c0:4c:7a:69:90:73:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=42967003-07d0-49c7-992f-c13c40a1b35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:de:43:57:de:63:e6:9b:70:2b:ef:5b:14:
41:a5:98:3f:68:91:e2:c8:c3:fc:fa:4d:d9:c6:5e:
d0:9d:ed:b0:49:49:df:2a:1a:f0:28:f3:e3:61:02:
7d:10:e8:24:ba:c7:5a:9d:ea:a5:3e:11:9c:5f:28:
76:55:3f:4c:1d:b2:d2:49:8b:85:7c:2c:26:9a:d8:
35:d7:f6:cc:c3:a9:47:ed:d3:be:1a:be:57:5b:a8:
20:ce:a4:23:03:c3:dd:eb:30:d2:55:07:ac:82:c4:
e3:db:39:33:09:9e:87:68:09:05:c0:d9:cd:e2:d9:
7b:1a:64:d7:a3:52:fe:b9:92:b8:32:b2:95:f5:7d:
a6:a2:32:f1:a8:1e:13:3b:75:ab:33:50:48:b6:33:
1b:33:14:4b:7f:74:69:5a:3c:91:98:76:a5:62:74:
f5:d6:96:0b:1e:a4:f6:cd:16:3d:ec:28:fe:7b:07:
08:81:7f:a1:b6:24:38:28:45:b8:c1:74:7e:1b:97:
5c:fd:ac:88:93:b0:be:d0:e5:bb:f1:d6:de:97:4a:
43:8c:8f:8f:e4:aa:ec:2a:2e:7c:8b:22:37:59:ff:
ee:0a:8f:9e:4b:93:6f:61:de:57:8d:c3:f1:35:31:
f7:fd:46:ba:b9:be:01:97:ea:0a:15:42:f5:b2:59:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:92:76:12:20:F5:BE:8C:60:82:D4:58:37:2A:6B:91:16:3F:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f1:f7:38:94:fd:ef:79:3d:2c:dd:68:ca:f6:f0:97:ae:b2:
f2:76:91:19:2c:e0:19:33:71:8d:0e:af:c8:6a:71:b4:d3:e9:
64:d2:63:69:38:9d:ec:55:70:b2:03:48:35:73:d1:34:16:c6:
31:5d:74:23:1a:5a:6f:05:4a:5b:7b:cd:ec:c6:5d:71:9a:60:
db:3e:96:7f:af:f0:b8:cc:a9:bd:c7:f8:db:db:e3:f1:d9:2b:
17:06:a5:c6:5b:e4:66:70:60:f2:75:b1:a5:9c:f6:8d:19:1d:
23:06:5e:38:a6:5b:bf:ca:7a:29:9c:ed:79:0c:be:2b:0e:d0:
53:81:10:90:b9:1a:c3:a1:6d:62:21:c2:ec:0a:98:89:0d:41:
76:67:f6:fe:22:7d:82:58:0d:04:9e:2b:00:e0:60:36:a5:6b:
cf:72:da:61:b6:95:0a:23:d5:4d:5f:64:46:ff:56:10:79:55:
a4:73:bd:0e:4e:c6:c4:20:86:4c:8f:e0:2f:78:d0:d3:e9:28:
32:f9:26:bb:ac:9d:5e:7f:13:13:b5:32:ef:05:f0:3e:87:c0:
95:b0:33:93:ce:d5:77:0f:00:e2:b8:b4:42:a4:43:c9:e5:ac:
32:55:ab:d0:e8:3c:f0:f6:52:cc:a2:90:5f:3d:ca:02:be:13:
bf:11:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:33 2025 by rpki-client