Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa
File: 1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa (raw, json)
Hash identifier: GxRaaOncfd2TOV7NGp949kWlwTLPdgfWipfgHqV1288=
Subject key identifier: 99:D2:AF:76:3F:CC:54:3E:80:03:95:FE:30:D0:13:09:87:F6:BC:58
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F43285848CDE10E5D5AB3246239B3D3C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7862
IP address blocks: 146.23.208.0/22 maxlen: 24
146.23.212.0/22 maxlen: 24
146.23.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0e:5d:5a:b3:24:62:39:b3:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=a60896d3-9227-43d2-956b-9d0ea2d00b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:fc:e2:f1:7d:4e:38:61:bf:f1:99:36:0e:
fd:f5:b2:47:1c:04:23:64:af:cf:e6:ee:dd:de:09:
d9:12:11:af:7f:f2:2b:26:fc:21:d0:24:10:16:8b:
43:02:e1:ed:5a:72:83:af:9c:7f:86:da:b0:a0:d9:
57:53:50:23:e2:e0:23:70:c5:8a:f1:68:85:f1:c0:
ea:b0:2f:11:57:4f:4e:44:ca:ad:f2:d1:cc:41:1c:
12:c5:2e:7c:24:2a:d7:7b:2b:e6:c4:b7:05:75:42:
62:27:3c:44:5f:dc:e6:8a:b6:49:03:30:82:ac:df:
83:fe:39:6c:29:d0:9c:1f:8a:f1:d5:26:00:7b:0e:
bf:06:e4:20:08:17:65:95:90:47:36:c1:5a:15:9a:
9e:3c:5d:78:97:91:81:01:59:c2:b3:79:78:e2:d7:
39:a2:6e:23:c4:1e:80:93:2e:33:9c:38:b4:41:52:
ed:e2:6f:87:7d:23:25:c9:c5:b7:29:66:5b:20:90:
d3:da:0a:bb:70:d6:37:1f:8e:2d:98:f9:64:8d:9d:
0f:1e:1c:bd:47:da:33:a4:45:f3:11:d1:91:f6:13:
85:0f:7c:6c:ba:bf:ac:9e:a4:a1:13:a4:af:c3:ae:
f0:df:ae:36:79:cf:c2:86:4e:74:77:a1:73:8e:19:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:AF:76:3F:CC:54:3E:80:03:95:FE:30:D0:13:09:87:F6:BC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.208.0-146.23.219.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:d0:d0:8b:f2:04:34:5e:08:97:03:93:0b:86:f7:ac:34:79:
c6:38:a7:1d:97:39:a8:96:0d:0c:26:2c:ab:3a:fc:16:16:a6:
37:0b:e9:be:19:7b:19:68:19:d1:67:84:2d:78:4b:ec:05:49:
f5:17:f6:e6:1a:3d:f1:7d:2b:49:cd:72:d9:af:dd:39:b7:39:
c2:2c:db:b6:23:9e:70:ab:6b:d5:0b:05:22:37:ad:33:12:30:
82:87:00:bb:0e:28:4c:6e:b3:1d:a3:16:db:81:27:ca:45:d7:
6e:01:e1:56:ea:39:19:7e:a0:29:9f:af:6f:cf:e1:af:25:76:
ae:c6:9f:8e:e0:00:20:1b:ca:62:69:bb:5e:30:a3:08:cf:79:
3b:93:65:5a:fe:74:e6:e0:9e:7a:15:69:6b:d8:69:a1:c0:2d:
66:e2:08:39:90:c6:46:94:20:93:04:68:6c:5d:76:f0:c7:26:
c9:a6:fa:72:54:44:4f:d5:3f:5e:67:01:b0:85:85:e6:35:ae:
e9:23:da:8a:ac:af:c1:88:6e:7a:28:bb:3b:b5:bb:65:27:43:
a7:d5:18:12:54:6e:fd:24:31:03:5b:32:e5:c9:5b:58:91:d6:
4f:a3:03:14:55:cb:e0:d4:77:0d:dd:f5:27:cb:1b:91:84:ae:
ad:38:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:31 2025 by rpki-client