Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d367eb59-10cf-3247-aa90-7cba6b6a0283.roa
File: d367eb59-10cf-3247-aa90-7cba6b6a0283.roa (raw, json)
Hash identifier: zQ9pUDOy+rKMREWjovqjRtIukwvJ9EloFg0f2RCKM08=
Subject key identifier: 5A:EF:07:8B:9F:25:84:E9:FD:28:CD:D5:CE:05:56:58:72:48:B0:47
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584940394B498301B6AA03637040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d367eb59-10cf-3247-aa90-7cba6b6a0283.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 2914
IP address blocks: 172.252.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4b:49:83:01:b6:aa:03:63:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=4771498d-bd8f-473e-900e-1e9fa8cf41bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:b9:a6:3f:d3:43:4f:88:bb:61:75:41:5b:
ae:96:d2:52:c5:7c:c5:72:79:4c:1d:01:c1:16:e0:
4d:20:d2:5d:6e:67:4f:b3:68:be:6f:53:b9:ce:b7:
be:65:c0:94:56:f2:33:cb:a7:30:77:e3:0a:d0:bc:
90:be:0d:f0:c1:00:13:0b:07:9b:87:3b:19:3b:fa:
9a:d7:30:a0:2a:a2:58:2f:77:c3:eb:3b:52:6b:95:
92:6f:26:12:fc:65:37:83:06:de:7d:45:a6:8e:e6:
9c:b1:a0:72:6a:59:80:36:c6:74:e8:12:3c:fc:87:
c1:49:c4:7c:c9:a5:30:03:4a:af:0f:ce:37:28:82:
27:56:4b:a1:82:f9:7a:5a:bc:64:51:b7:c0:69:20:
60:e4:60:5f:94:8a:99:dc:64:0a:00:f3:64:be:b4:
99:2e:0e:fe:74:6b:fa:54:c1:f6:b0:2c:31:05:5a:
f8:54:b3:dc:8a:89:70:8a:97:49:d1:66:c2:60:5f:
11:6e:e2:4b:02:e7:85:0a:5d:e6:90:c7:50:41:9c:
9c:d8:ad:6f:77:2c:cd:2a:c6:12:4c:61:ad:73:cc:
68:4d:ef:16:c2:a6:b3:f2:b3:f0:72:6b:1e:49:48:
08:33:7e:aa:d0:e9:fa:d8:12:55:8e:ca:a4:d3:bc:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:07:8B:9F:25:84:E9:FD:28:CD:D5:CE:05:56:58:72:48:B0:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d367eb59-10cf-3247-aa90-7cba6b6a0283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:7b:08:d6:c9:ae:4e:3f:18:fa:f3:9b:ea:f1:14:66:64:cf:
07:6b:e5:89:cf:93:af:60:0b:1a:95:ee:c0:35:67:0c:9b:bd:
fc:e1:ca:7b:25:bb:2e:1e:de:c7:df:27:7c:b4:ab:18:5e:51:
c6:53:a9:33:8e:d4:09:4c:d1:61:3c:43:28:ef:fe:9d:37:c0:
1c:79:87:09:a9:77:cb:06:87:b2:70:e5:05:53:80:ea:c8:1d:
48:0c:24:12:a7:91:0b:8a:1b:4e:eb:70:f6:2e:c2:8b:ee:26:
21:06:97:52:bf:68:0c:2e:fd:08:90:95:c0:98:63:fe:a9:8d:
2e:8d:a7:78:f5:cd:f1:90:3c:90:97:0f:ef:3f:79:eb:90:2f:
c8:55:b5:9f:1f:c7:cd:c8:e3:58:fc:6d:c2:e5:1c:fb:b3:d3:
74:82:72:8a:6b:7d:f3:79:a6:6b:42:0c:43:11:b1:b3:8d:b8:
f2:ed:f2:9a:dc:ad:01:87:36:b7:9e:d5:13:bc:d0:05:95:1b:
42:46:e9:f0:a6:91:af:93:5d:4b:f1:c2:f9:69:6b:bc:35:66:
31:9f:46:c0:dc:38:0f:79:8b:25:32:de:5c:25:01:5c:2d:cc:
b8:18:da:26:72:06:1f:20:bb:2d:ab:90:66:9f:a5:66:f1:34:
e7:72:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:19 2025 by rpki-client