Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa
File: f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa (raw, json)
Hash identifier: hzmDpJDPAwS5JScVfoL0hRAUoe75Pzu6X/IRzSehPyA=
Subject key identifier: 39:3A:44:53:83:50:62:DA:C5:84:74:63:99:37:8D:DF:88:1A:EC:DC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848AA08B3232465162626380B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa
Signing time: Sat 25 Jan 2025 17:51:50 +0000
ROA not before: Sat 25 Jan 2025 17:51:50 +0000
ROA not after: Fri 25 Apr 2025 16:51:50 +0000
asID: 18779
IP address blocks: 172.121.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:08:b3:23:24:65:16:26:26:38:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 25 17:51:50 2025 GMT
Not After : Apr 25 16:51:50 2025 GMT
Subject: CN=1768838e-8db2-41c9-82e9-e9f44739bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:88:ba:c4:9e:33:ab:6e:f9:f4:6b:8a:86:
27:25:9f:da:9e:55:17:fb:de:40:eb:99:02:49:3a:
97:92:7c:18:a2:01:38:8b:fc:30:71:0a:1b:a9:9b:
be:af:bc:56:f9:61:c1:14:00:ac:4b:44:b4:d4:da:
fc:ce:6d:5b:03:38:6c:c8:7b:d8:b0:6d:3e:c1:6e:
d3:9b:a7:bf:98:db:97:5d:46:56:ed:88:8f:cd:bb:
aa:1e:19:d9:49:f3:6f:7b:cd:0b:9b:27:72:48:ec:
8a:bf:83:72:e7:e4:5e:f1:ea:02:40:2b:9e:08:94:
72:2d:04:fb:4b:b5:48:bd:a2:17:a8:36:8f:b4:45:
9e:74:d9:be:ab:38:67:ec:fd:bc:89:ed:9e:94:39:
e4:a5:f2:1d:f3:0c:d2:d9:ce:2e:62:5d:77:e8:43:
8e:db:0c:41:a4:67:a6:32:db:c8:6f:6f:20:57:51:
7b:c7:6d:66:3e:ef:a0:b3:81:cf:3c:ba:ee:51:c1:
f2:bf:9d:55:c5:c4:02:08:34:6d:f2:65:1f:67:31:
45:1c:c0:78:dd:8a:28:66:8d:97:a3:e9:f4:4d:5e:
14:1f:13:04:0c:97:c7:3a:ca:2d:87:86:31:7f:f6:
68:0e:25:97:8b:f5:69:b9:9a:4d:af:cb:4f:e5:8b:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:44:53:83:50:62:DA:C5:84:74:63:99:37:8D:DF:88:1A:EC:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.121.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a0:2b:84:c8:a1:16:95:5c:40:4c:2e:62:e7:2d:2d:bd:53:
dd:1b:f8:f8:51:1c:8d:fe:75:44:0a:01:d3:5d:33:26:ff:ba:
30:21:40:9e:2d:32:06:36:4c:67:51:31:7a:d2:67:e3:72:54:
ea:63:9a:ff:76:e2:16:0d:31:56:f4:cc:db:8e:e5:49:a6:35:
00:e2:f8:ca:d9:c5:c7:ef:a1:4f:a7:1e:84:31:d7:14:f8:53:
71:1b:af:23:00:21:d9:45:65:e7:95:05:d8:38:58:4c:b6:31:
e4:55:07:55:79:78:dd:c1:77:7b:3d:99:0f:39:3b:fa:af:df:
d3:1b:a9:f5:4c:0b:d7:62:de:ad:80:79:f0:1d:ce:69:6e:5f:
bc:5c:e2:d3:9f:b6:e9:c6:75:61:03:7a:8c:93:84:a7:c9:ec:
c6:8a:d6:e3:9b:b6:9e:5e:59:07:b6:1e:55:9f:a5:af:67:1a:
5c:94:11:af:ed:9f:a9:9d:31:b4:57:8d:1b:52:64:39:61:ce:
3c:a4:cb:bb:e7:58:5a:13:d6:c8:76:87:be:31:0f:f0:2f:f8:
5f:61:b2:91:76:82:53:00:7e:4a:81:d5:7c:ab:dc:dc:15:8c:
9a:db:73:fe:d5:4c:7c:2f:f6:ca:3f:c3:8d:22:90:91:3a:4a:
cf:20:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:26 2025 by rpki-client