Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c24889ba-3ef1-32d0-a5a8-1f03a6267b01.roa
File: c24889ba-3ef1-32d0-a5a8-1f03a6267b01.roa (raw, json)
Hash identifier: eFVOh+81bOXKFfCR8nPiqfz+y56Hnoe6oUxQEOLW+M4=
Subject key identifier: 8E:1E:D5:E6:DF:AE:7D:0C:E7:90:FD:01:0A:6B:50:46:32:BF:16:2D
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858481F653597415C0EC827C52200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c24889ba-3ef1-32d0-a5a8-1f03a6267b01.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 393886
IP address blocks: 173.211.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:35:97:41:5c:0e:c8:27:c5:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=d5a201d6-d8f7-45fa-b5ba-62002816a3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:14:b0:f8:33:0e:e6:c5:9d:06:1d:d7:62:
81:ba:63:92:d1:67:c4:af:68:3f:f4:b9:a3:ce:75:
bd:57:4b:4a:f1:5f:f7:fa:c6:ca:ef:3b:d9:31:9f:
62:57:66:c7:2e:ac:02:bf:41:a4:a9:74:ca:f9:10:
1f:94:b1:db:a6:5c:10:67:74:80:38:d6:2e:f6:f5:
2b:2c:e1:2e:e4:f4:df:9f:1f:82:2f:a1:a5:fc:20:
18:ae:4b:74:5f:19:4b:9d:88:15:f7:bd:78:54:f9:
dd:7f:a5:40:08:af:25:bd:e8:c3:fe:cc:f3:cd:b9:
d1:ec:20:39:f7:2e:a7:14:cb:53:7d:6c:9e:c0:72:
d1:78:5c:cf:ec:7f:33:49:c1:21:69:8e:46:3b:c1:
22:fd:32:4a:40:02:93:57:18:66:6a:13:b1:4a:a9:
65:f1:73:4f:87:d8:65:de:de:78:10:20:48:fd:f5:
9c:a8:17:5c:8d:e9:d2:c0:7d:9e:4c:02:c6:c6:33:
0a:57:40:52:33:45:c1:6b:8a:e9:1b:13:5c:db:e6:
df:b0:2a:6c:52:a2:84:34:bd:37:75:4a:d0:e6:7d:
b6:9c:de:92:8a:c2:ec:b0:12:ba:9f:68:00:ba:84:
60:df:7d:17:69:ad:eb:ff:54:46:c2:da:1d:6d:ca:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:D5:E6:DF:AE:7D:0C:E7:90:FD:01:0A:6B:50:46:32:BF:16:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c24889ba-3ef1-32d0-a5a8-1f03a6267b01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a0:b2:5b:3c:99:83:0a:23:67:b3:46:c2:40:8b:b8:26:76:
91:9d:1a:6b:98:1b:8f:c7:47:28:6a:08:bc:0c:d6:a3:bd:c6:
2e:21:3d:52:e5:c9:b5:dc:80:26:f9:86:e5:4d:25:e7:a1:8f:
16:22:83:f6:aa:c2:67:af:f4:66:3e:96:02:b6:92:ca:f6:26:
a9:6e:e2:79:e1:f2:bc:fa:cb:2d:40:74:fa:24:c8:91:6f:d7:
03:05:44:8b:73:3b:1a:2d:15:4f:46:0e:95:46:97:97:00:6f:
68:e8:d9:0f:d3:05:67:2c:1a:72:27:d3:fd:30:44:93:59:a4:
d4:92:2f:90:8e:b4:30:b0:e6:c3:0c:95:a1:16:e7:9a:6d:0e:
3e:08:d4:f4:51:03:15:74:b5:6d:a3:2b:ac:ef:d4:62:10:5a:
5c:36:5b:16:3b:09:10:6b:12:3e:c7:95:3d:1d:4d:4c:3d:61:
ec:3e:02:54:38:c7:59:97:0d:a6:13:28:1a:25:4c:f8:cb:e6:
ac:de:8b:1f:74:86:c3:9d:30:cf:d7:a0:e5:8c:4f:63:54:b4:
f5:14:a0:0f:2a:cc:29:d2:f4:af:65:dc:12:07:16:8f:48:e0:
67:23:72:5d:a0:8c:37:3f:cd:9b:d3:df:9d:15:54:b9:cb:ae:
de:0f:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 10:36:56 2025 by rpki-client