Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4e2888f3-f725-3042-817f-be520fe5844f.roa
File: 4e2888f3-f725-3042-817f-be520fe5844f.roa (raw, json)
Hash identifier: iRzz22EvbTwbfRZhcdkVwrZVx0YJG+aqANyk7Y+0/+U=
Subject key identifier: 0F:0E:73:0B:89:08:C9:7B:B6:3D:9D:F2:9A:14:8B:28:EB:63:B8:F2
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F43285844246940D2472B891591932700
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4e2888f3-f725-3042-817f-be520fe5844f.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 20278
IP address blocks: 172.245.121.0/24 maxlen: 24
172.245.69.0/24 maxlen: 24
172.245.65.0/24 maxlen: 24
172.245.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:40:d2:47:2b:89:15:91:93:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=2f7db1db-a4d5-4684-a798-d2ee8948cbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:7d:b6:d7:48:6b:bb:0a:ae:04:a7:f8:45:
e6:68:34:dd:c1:42:af:ec:6f:a6:68:ed:5a:bc:f8:
51:30:29:1c:7f:65:70:40:81:2c:8e:f0:d3:8d:fe:
47:58:62:1d:41:11:64:47:f7:06:ec:36:a0:ca:b5:
d0:b2:ea:ca:b3:d7:de:1b:99:36:dd:fb:7d:b4:6a:
b2:bf:6c:4d:49:13:e4:28:91:30:e8:10:c3:d6:2d:
3e:17:2e:9c:c1:42:fd:79:60:5b:b5:71:c0:63:d7:
85:09:2f:af:28:de:5e:92:8a:e7:51:5c:2a:31:bc:
d6:55:cd:6b:bb:ef:4c:0c:0e:0d:c6:de:18:f0:c6:
f1:8f:48:08:20:43:d6:0c:b0:13:2a:79:55:a0:e9:
e7:78:f4:3c:86:91:67:86:9c:f6:24:b2:e3:18:04:
50:71:21:b3:df:88:b2:ac:04:bf:a1:44:80:45:22:
fd:a8:e6:8b:81:f0:36:ee:43:c1:02:79:94:0d:9c:
13:7f:d4:f1:af:88:5e:e7:cd:93:9b:3f:3e:35:46:
a8:26:45:fc:e4:7e:56:2e:78:d7:9f:2d:fe:cc:8b:
76:cf:ee:c3:c0:f0:13:ae:3e:0d:db:a7:3a:6a:89:
c8:18:b9:99:2e:09:d4:da:40:de:78:d9:bc:e9:75:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:73:0B:89:08:C9:7B:B6:3D:9D:F2:9A:14:8B:28:EB:63:B8:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4e2888f3-f725-3042-817f-be520fe5844f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
172.245.65.0/24
172.245.69.0/24
172.245.121.0/24
172.245.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:45:32:75:20:3c:70:05:e2:1d:cf:c5:9d:29:f3:48:07:3c:
70:4a:97:be:6f:c9:ee:39:5c:56:0e:45:d9:db:4e:3e:b1:be:
0e:86:40:82:33:70:12:2f:36:9f:63:5f:88:0c:7c:03:34:73:
d7:f6:45:80:22:f7:61:1c:91:46:c5:c1:ac:16:09:2f:4f:4a:
75:33:90:14:cb:ca:a8:a2:56:96:3c:b5:73:52:ef:d9:89:b1:
de:50:bc:2d:48:e7:cb:de:0e:2b:90:d7:f0:17:7e:d7:a3:4a:
13:d2:2a:26:11:01:dd:62:25:c4:e7:ec:3c:5c:a7:c3:db:b8:
0d:fc:c8:29:18:4f:94:55:41:8d:69:10:76:86:f0:88:be:cd:
53:bf:55:d8:cd:8b:f7:63:46:8b:1e:ca:af:d2:ed:11:dc:21:
05:b2:64:5b:02:72:12:e5:66:eb:4f:81:db:e6:69:03:11:84:
b0:fa:ae:6e:d6:84:fd:1c:65:5a:f0:2f:6e:e8:fb:a1:2a:c0:
14:70:b0:f4:b4:07:60:97:19:82:99:48:bd:48:a5:aa:2c:eb:
a2:bf:72:22:4e:3d:9c:69:d9:e4:14:8b:1c:6d:30:4a:2a:52:
ec:d8:59:78:1b:43:45:2f:dc:1a:d8:ad:f9:a2:05:ce:8c:96:
c1:0e:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:38 2025 by rpki-client