Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ff38a192-a04b-3311-a3ef-6d8797292e18.roa
File: ff38a192-a04b-3311-a3ef-6d8797292e18.roa (raw, json)
Hash identifier: hllA5dmXKRJwYRXXPSfTDFod9nDaCidiH8aNcBp0KgY=
Subject key identifier: 81:9C:D8:E6:A4:B2:3B:29:DA:50:64:F9:4A:7C:3D:5A:6B:44:F8:18
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F432858482F3C7EAD6D12D3D62918A340
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ff38a192-a04b-3311-a3ef-6d8797292e18.roa
Signing time: Thu 12 Dec 2024 18:11:46 +0000
ROA not before: Thu 12 Dec 2024 18:11:46 +0000
ROA not after: Wed 12 Mar 2025 17:11:46 +0000
asID: 834
IP address blocks: 146.71.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2f:3c:7e:ad:6d:12:d3:d6:29:18:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Dec 12 18:11:46 2024 GMT
Not After : Mar 12 17:11:46 2025 GMT
Subject: CN=848db0a9-e23e-4e56-945d-e0738d374678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:b6:06:1c:82:18:20:bf:68:ab:74:a2:d0:
1c:5f:39:c3:e1:1c:c6:43:57:34:30:7f:98:5b:ed:
25:a3:98:59:f4:02:a0:08:ce:a1:b4:5b:6c:6a:d0:
0c:a0:3d:31:b4:e9:96:39:a9:3e:f2:4e:d8:5d:64:
91:e5:d2:4c:fe:07:6b:df:16:10:11:e1:d9:34:08:
19:3a:08:52:a1:7b:68:3a:27:1a:8b:fd:90:2c:90:
f0:e5:70:58:28:98:46:73:12:36:eb:74:ce:6f:e2:
2c:6e:5f:d9:d5:c8:83:ab:b4:de:7a:6f:15:08:23:
90:ec:ca:d0:5f:c2:04:d6:64:94:bf:6e:18:0e:49:
04:bb:cb:2e:d8:8c:d2:00:6f:ee:00:79:d0:5f:c7:
3a:7d:6f:24:4a:2c:44:11:38:7d:cd:ef:7c:4c:0c:
8d:7a:5b:64:6f:67:2c:71:10:ee:f9:91:90:c0:78:
db:0c:e9:14:28:f6:d2:a4:ec:33:74:22:bb:62:24:
19:13:f2:ed:27:e1:f5:f3:0c:6d:34:d0:f3:ea:2f:
bc:89:d2:d1:41:11:2b:19:2b:37:23:c5:11:50:52:
0c:7c:41:36:ec:d5:e7:eb:da:05:10:22:d4:b6:33:
dd:c9:c1:25:b0:e5:79:43:3c:b2:3a:28:00:6d:4e:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:D8:E6:A4:B2:3B:29:DA:50:64:F9:4A:7C:3D:5A:6B:44:F8:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ff38a192-a04b-3311-a3ef-6d8797292e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
146.71.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:79:dd:b4:bf:56:67:77:b4:f6:2e:87:15:3e:a5:c8:4e:29:
fa:46:d7:10:91:59:5c:eb:a3:14:d5:78:84:49:32:b9:71:0b:
b9:15:1b:55:58:ac:49:6b:e0:8a:34:a0:39:a6:d8:cb:8e:0d:
74:93:a0:f0:b3:02:1e:c9:92:75:e0:63:e7:06:72:c2:37:bf:
94:af:85:e3:b4:87:e0:a0:69:dc:8a:5a:e5:21:8f:b2:3e:6c:
bd:23:bc:2c:3f:f7:85:c1:bd:1c:c4:6f:b5:21:e0:a9:33:9c:
c3:0b:cf:a4:df:bb:68:63:66:cd:80:fa:36:d7:27:09:b5:89:
29:21:07:1b:94:4f:ed:ac:12:d1:9b:d6:b5:3d:46:e5:4c:cf:
42:16:bc:3d:a0:4d:be:a7:a3:db:38:ec:13:d1:eb:20:cf:ff:
92:42:6a:d2:e9:74:08:00:e3:5c:59:8f:6c:f4:a8:dc:3b:a0:
be:e2:3a:30:09:a5:53:5b:73:b6:c7:1b:e9:53:12:df:ae:86:
26:db:01:93:86:12:18:71:12:f7:68:0f:19:1e:f5:e0:90:76:
5b:17:5e:0f:46:8f:43:ec:79:53:28:9c:fe:79:e7:ce:2e:66:
f5:30:82:02:67:9e:f6:36:4a:0c:be:71:48:ad:5f:c7:d0:cc:
81:f6:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:04 2025 by rpki-client