Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bea90fbb-cba7-3a23-9713-c51969f3db75.roa
File: bea90fbb-cba7-3a23-9713-c51969f3db75.roa (raw, json)
Hash identifier: Ueh/H8n//8ZHcWHKKmf7zWwrG6NlYe4d1a7u/0GU4xI=
Subject key identifier: 52:84:9C:7A:55:07:FF:80:62:4B:70:B5:6E:38:6C:34:09:FD:69:2C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848A9962036BB9A94A4C155CF40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bea90fbb-cba7-3a23-9713-c51969f3db75.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 25668
IP address blocks: 205.250.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:20:36:bb:9a:94:a4:c1:55:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=0dd2e380-933e-4b5d-9613-74aea6f96f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:61:63:d1:3e:43:33:5c:55:fb:d3:6c:1c:5e:
b4:3a:2a:85:25:7c:72:65:97:21:72:b5:68:0c:82:
1b:40:1c:84:28:34:e3:72:f8:31:0d:4f:d7:20:de:
a6:2e:33:f5:97:ff:c8:2e:2a:6f:2e:33:ba:ee:9a:
b1:b1:4c:62:58:5b:ec:16:93:8c:e3:35:42:82:2a:
98:60:8d:6b:61:86:d8:88:15:dd:ff:cb:5c:8e:ca:
0e:cc:bf:24:f0:be:4a:fa:a8:3e:74:d4:cc:45:b0:
f5:58:10:e1:b8:b8:b5:c4:c0:99:29:aa:20:36:34:
98:88:10:c6:97:db:83:08:13:34:b8:3e:99:c3:01:
bb:94:4c:39:8c:c4:9f:2c:6b:78:db:64:44:ac:20:
c1:25:14:a3:85:c7:29:95:04:83:fa:ce:c0:57:10:
db:80:de:88:00:62:be:0c:39:5a:2e:d9:dc:34:f2:
11:99:a9:a5:cc:ca:e5:db:e4:21:13:9d:c5:e2:87:
fe:36:5c:b0:2e:70:68:23:11:65:2e:59:e5:62:00:
07:9e:f4:e6:89:fb:2e:ce:5c:e4:99:44:8a:fb:29:
2f:8d:90:03:78:bd:29:35:81:85:78:dd:f5:4a:d2:
87:7c:b8:48:9a:22:9d:ec:bf:7f:65:0d:9a:52:58:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:9C:7A:55:07:FF:80:62:4B:70:B5:6E:38:6C:34:09:FD:69:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bea90fbb-cba7-3a23-9713-c51969f3db75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
205.250.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:48:6d:ea:b8:79:cd:f1:86:d4:f7:67:9b:e0:fd:8c:2b:02:
2a:d3:61:1e:3d:8b:a9:b9:f1:c2:6a:99:91:f8:ab:d2:fd:a4:
4c:93:ea:43:8c:bb:88:a6:0c:0d:fb:c8:77:66:83:8f:fa:c1:
3e:27:a4:e1:a8:01:94:3c:95:c5:3e:9d:0f:b2:2c:0c:1b:08:
f5:32:39:3c:2e:96:41:db:43:1b:8c:40:5a:d2:21:38:82:89:
7e:50:17:9c:74:6d:b7:f0:d0:5c:76:8f:76:55:06:b8:20:bc:
5b:f1:1b:5f:e1:e2:74:7b:0e:73:60:f1:ba:b6:79:43:ed:50:
06:c8:4f:35:08:ca:6c:c2:ac:28:0b:55:83:30:30:30:48:f1:
d4:f4:cf:fd:3c:23:b9:aa:59:5a:01:32:d4:9b:3e:98:c4:b5:
e7:f4:ed:dc:7e:38:ed:a1:6d:80:b8:07:00:fc:05:97:3e:84:
78:84:95:0a:31:1c:91:9d:42:fd:88:24:5b:3d:20:b5:52:de:
a5:60:54:0a:6d:26:bc:e4:af:bc:1b:f1:d8:54:93:07:85:1d:
d0:7f:f7:e9:13:b0:eb:98:35:26:19:b6:0c:43:71:81:01:ef:
1c:f7:a8:bc:b6:e2:c3:d0:23:09:c3:c8:8d:ea:ca:5f:4f:fb:
eb:e0:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:21 2025 by rpki-client