Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
File: 8211cbe9-7823-3994-9066-ce68fa110b8f.roa (raw, json)
Hash identifier: XVaUS3BZHGDksB24nwOier2rsprNzYCoxYdX7kZjCwo=
Subject key identifier: 4B:B7:E5:7F:C5:D0:06:01:43:CD:77:6B:4C:11:36:A8:B9:85:53:3F
Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial: 010D0C9F43285848F92698DA025AA2B71B3CD4C0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 30041
IP address blocks: 168.100.184.0/21 maxlen: 24
192.145.64.0/22 maxlen: 24
206.204.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:98:da:02:5a:a2:b7:1b:3c:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=aeb4845c-ba83-4a55-9e08-fffbc8629d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:55:e9:4c:da:65:fc:10:d1:c2:5b:1f:c9:
9c:07:bf:da:fb:5a:f8:9a:18:1a:5e:96:e0:5e:d6:
1b:3e:92:f5:45:b6:e5:33:49:34:51:ea:d2:d3:f3:
0a:e8:a7:a3:a7:60:4a:ba:4f:2e:0f:5e:16:20:b8:
09:a8:89:3d:e6:05:38:22:5d:34:ba:bf:33:ef:da:
f9:d2:bd:fb:41:0f:4c:18:94:2a:a6:b0:1f:49:c2:
63:94:99:7a:1a:43:d9:3c:0c:0b:e0:63:01:ad:75:
36:ae:e9:36:4e:4d:1c:87:a9:62:8b:96:7f:93:d8:
6f:f1:f5:f8:4c:87:8a:fd:3e:23:b9:86:45:76:49:
9d:1b:69:f8:cf:89:44:03:c1:68:80:3c:0f:fa:9d:
ce:9d:46:2c:7c:02:76:e1:08:a3:41:01:22:b2:b5:
33:29:34:66:2d:be:43:54:4a:3c:dc:b5:76:ce:35:
0f:d7:f4:4a:67:78:55:93:c8:d6:f6:cf:ca:d4:43:
63:0f:df:14:57:47:13:ae:1a:ed:1b:4f:98:73:a6:
24:9b:d9:fc:b9:72:7e:44:50:c9:04:ff:98:64:d8:
ac:96:ba:07:82:99:07:bf:b0:13:67:5c:fc:85:bb:
b6:45:9c:5d:3e:6a:be:40:96:08:8d:48:97:1a:32:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:E5:7F:C5:D0:06:01:43:CD:77:6B:4C:11:36:A8:B9:85:53:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
X509v3 Authority Key Identifier:
keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.184.0/21
192.145.64.0/22
206.204.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e5:47:77:a2:b8:ff:b6:34:fe:96:5c:39:99:10:7b:02:3a:
b4:16:0c:90:44:86:5b:2b:0c:fc:2b:00:e9:f4:95:5e:3b:52:
c7:56:f1:ad:95:b0:83:fa:f7:dc:7d:33:49:de:d7:95:9d:ce:
c4:38:53:30:fa:c1:22:94:03:0c:bd:b3:ba:4f:1b:fd:65:a3:
98:37:85:ff:0c:ca:50:c5:dd:ca:7e:09:c9:eb:a0:b7:c7:5b:
80:68:b1:8c:66:63:4e:10:95:93:d2:8b:ff:74:ae:64:a8:88:
4f:76:61:cb:c9:61:5a:11:95:2b:a0:ed:75:b3:52:1e:2b:82:
3f:0b:d3:ca:b5:38:be:54:8e:8e:56:2a:f1:d9:11:0a:91:a5:
c3:23:b2:35:46:54:5e:a9:8f:dd:9c:17:7e:21:95:fe:d4:62:
22:ab:51:13:f4:69:c9:f9:fb:b7:fa:42:e5:0d:00:72:92:4d:
c1:88:fa:1d:25:5b:b9:32:8c:9c:f0:03:85:fd:99:d6:8a:2e:
6f:59:23:45:29:94:06:56:1f:12:29:f2:1b:5c:86:a6:14:f2:
18:7f:15:25:48:f6:4c:c6:f4:a9:f0:97:6e:c9:69:1c:17:b9:
e9:07:da:6e:b4:77:f8:92:ca:85:62:43:85:fb:82:8b:b2:77:
a3:5c:ae:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:03 2025 by rpki-client