Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
File: cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa (raw, json)
Hash identifier: Hjs24mdaSEncF13FdMtTwARSFpOR1v8PS8fzzsbIXpc=
Subject key identifier: C9:47:30:BA:39:5D:2F:AC:E0:BD:B2:0B:06:49:D0:78:16:9B:99:7E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858492E13C642515F599A27B81200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 6079
IP address blocks: 142.173.48.0/20 maxlen: 20
142.173.96.0/20 maxlen: 20
142.173.176.0/20 maxlen: 20
142.173.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c6:42:51:5f:59:9a:27:b8:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=e3294364-60d5-4ed9-ab51-89f76d8ea84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:7b:67:2d:1b:61:77:f4:01:95:ff:30:dd:
ac:ee:4d:56:c9:77:f4:6a:bd:9d:e4:58:19:0f:0e:
82:6d:ca:ac:24:e1:de:c4:37:f0:c8:2d:db:71:0d:
c5:84:78:94:1c:19:c2:7e:6d:97:3f:f6:ac:5c:d9:
c2:e7:c2:c6:e9:85:b5:00:a8:d6:7f:fa:c8:2e:f4:
c5:53:9d:17:c6:41:9a:29:cb:ae:8d:4a:ff:df:dc:
9c:0b:d0:73:4d:16:81:c0:b7:a5:aa:76:6c:ad:dd:
66:ed:17:83:fb:b6:0e:83:b8:a1:1f:a0:2b:03:38:
7c:9f:d2:87:e3:3e:0b:71:86:d5:5a:a7:39:4a:d6:
55:09:81:f8:6c:28:e8:08:06:ec:2c:84:d3:26:88:
ff:82:1c:5d:b7:65:a5:ff:83:aa:be:fb:1b:e1:13:
21:6d:05:1c:84:7e:2b:a8:e1:df:08:95:9e:4f:4e:
e2:82:9b:22:8b:cf:9d:03:b2:bc:90:5d:ed:72:70:
0a:7f:96:a5:74:8d:45:f5:57:98:47:bc:76:3a:b0:
7a:ec:98:1f:2f:3f:29:95:b4:6c:a6:97:fe:4d:1e:
3b:1c:6a:8d:ef:25:e1:1b:a7:61:92:b8:b1:ac:7d:
ea:c2:2f:95:5c:05:50:56:3c:3c:42:a3:01:c3:01:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:30:BA:39:5D:2F:AC:E0:BD:B2:0B:06:49:D0:78:16:9B:99:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
142.173.48.0/20
142.173.96.0/20
142.173.176.0/20
142.173.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a9:84:c2:5e:97:f7:e9:77:c2:46:a6:03:1d:a8:00:12:d6:
c8:eb:cf:a7:09:ba:0d:58:8f:1a:58:b1:9c:1b:15:13:e5:16:
3d:a0:49:b2:2c:50:af:0c:04:d7:bb:23:34:c0:07:99:a2:00:
db:e4:0b:b3:5a:10:87:1e:35:f3:47:3a:fb:23:0d:dc:e4:a9:
ef:34:97:02:fc:e6:1c:b3:51:32:d4:4f:f0:f1:fe:18:13:a4:
b3:20:16:8d:ad:fb:7d:0c:6e:87:13:2c:83:b7:7f:0a:1c:4c:
96:5c:d6:39:fb:ee:70:1d:d3:4a:3e:3c:3a:dd:76:05:a5:59:
71:a3:c9:57:2d:78:30:50:27:52:dd:7c:49:ed:fc:99:d3:2d:
af:a8:9b:e8:b9:b9:5e:af:ee:de:02:f3:07:32:ae:15:8d:bc:
c0:de:80:14:73:a9:4a:ad:c8:da:54:90:c4:6e:91:54:8a:20:
d7:cb:29:c8:b4:01:04:c3:29:ef:e1:c1:64:3a:cb:04:34:c1:
8c:ca:31:32:d0:47:7a:8f:b1:c2:70:12:df:30:7f:9e:33:17:
a2:d6:0d:42:f1:0b:e7:b6:0f:75:48:47:a9:3d:db:86:bf:e1:
03:e8:78:2e:d2:bb:cf:f4:fe:76:94:d3:25:60:03:4e:6d:5d:
8e:8e:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:37:36 2025 by rpki-client