Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
File: 410c2aa7-bb4f-3e49-bacb-d414b9074359.roa (raw, json)
Hash identifier: zNFhcOe9ACa9nVXxdKdt2u/s+3JC+bwV9O0cI+Y4UyA=
Subject key identifier: B4:0A:C4:C8:3D:9E:9A:F3:C6:EB:D4:42:97:1F:3D:75:85:16:48:C8
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285848A4A381650061E1C6884D7840
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
Signing time: Thu 23 Jan 2025 19:28:54 +0000
ROA not before: Thu 23 Jan 2025 19:28:54 +0000
ROA not after: Wed 23 Apr 2025 18:28:54 +0000
asID: 10737
IP address blocks: 172.96.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:a3:81:65:00:61:e1:c6:88:4d:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 23 19:28:54 2025 GMT
Not After : Apr 23 18:28:54 2025 GMT
Subject: CN=3a575ee9-009d-4dca-96d7-2c71473ce03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:a8:bb:16:f9:64:43:97:3e:90:ea:f9:95:
90:89:ac:10:cf:55:1b:21:65:c7:9d:bc:85:96:7e:
cb:64:d7:38:cf:59:7e:64:b3:c0:f3:88:53:bd:82:
f4:86:2d:13:e9:78:f4:17:ef:76:f3:14:9a:14:ea:
0d:c6:36:b9:ff:86:0c:41:4d:6c:ef:5d:7c:15:4b:
31:00:5e:34:c2:57:f3:46:6e:f2:64:23:6d:62:0e:
7e:b5:00:03:51:7b:2d:02:d2:de:84:18:09:04:4f:
eb:b8:84:6b:c2:ea:c1:b3:e4:ec:7b:f4:35:b1:36:
ce:da:fc:86:bb:5f:51:21:19:84:27:72:08:ed:a0:
70:a1:9b:57:64:d3:04:48:d5:ab:ca:a5:cf:b7:b9:
3e:37:41:dc:84:db:75:d2:0e:ff:c4:d0:7a:a6:cc:
f6:3d:60:05:38:6e:4b:99:43:d0:32:e7:94:b3:ff:
37:a3:dd:f0:5d:4f:17:80:fa:74:52:a9:ba:c3:b8:
cb:34:f4:e6:b1:ad:09:e6:96:14:7f:fd:bc:86:f0:
4d:17:ad:1f:c1:c9:db:66:8d:3d:5c:ff:6f:72:21:
b1:15:7e:8f:3e:55:a8:6e:9d:3f:a8:c5:e6:ab:2c:
e6:aa:75:c4:3c:21:80:2e:bc:d1:61:64:5f:4c:ee:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:C4:C8:3D:9E:9A:F3:C6:EB:D4:42:97:1F:3D:75:85:16:48:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c4:42:a0:f5:72:81:14:a9:cf:1e:91:f4:c5:d0:b6:d2:21:
2a:42:82:4e:d5:0b:59:7d:6f:92:b0:eb:aa:1e:ae:39:2c:f9:
d6:36:74:71:d8:33:f8:b5:8f:48:83:e5:07:cd:b1:e1:9e:9d:
28:3c:53:18:10:01:34:c8:9b:dc:fc:93:cd:3b:02:44:a0:8f:
fd:08:5c:d4:5f:f7:af:a1:9c:69:8e:9b:80:79:fb:14:25:f8:
e2:f3:91:fc:a4:49:a9:8f:90:1f:ba:87:62:8e:85:78:9e:87:
55:42:1f:0f:1e:51:16:e4:27:49:bb:8c:ff:b1:d1:89:6e:42:
f6:81:c1:da:e8:c2:1e:93:27:03:34:40:94:cc:c1:b8:82:aa:
2d:33:1f:a1:bb:38:97:23:10:1c:cc:dc:2f:53:b4:52:15:ee:
be:38:f2:fd:71:3c:ee:1d:a0:81:4b:3e:bd:fe:0b:2b:f6:3e:
0b:fc:90:d7:4c:45:9e:99:1f:f8:01:67:8c:55:79:47:83:d0:
80:dd:8c:d4:32:a8:ad:aa:09:bd:7b:8f:74:7f:2e:6b:d1:96:
0c:22:a5:80:25:e9:eb:a8:9c:69:10:bc:e6:84:b0:c1:5d:b4:
2f:c9:e9:e9:ff:27:f0:fc:a3:d3:be:65:3c:25:bd:51:9d:15:
49:c6:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:16 2025 by rpki-client