Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa
File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json)
Hash identifier: zQRKhW66nOyjj8OySjhhu19Tl175vfmbKk7H2o8pwtM=
Subject key identifier: 00:8E:B7:3D:0F:2B:AF:39:99:B4:7E:66:13:CF:25:39:26:49:DA:1C
Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999
Certificate serial: 010D0C9F43285848A9962956A1DA73E7277A13C0
Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 398777
IP address blocks: 24.233.144.0/20 maxlen: 20
149.137.160.0/19 maxlen: 19
192.173.152.0/21 maxlen: 21
2605:ec40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:29:56:a1:da:73:e7:27:7a:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=4d357e87-9f6e-4a77-b3b5-fd32094e566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a2:28:28:44:be:ef:e3:00:58:6c:45:61:ac:
ad:44:94:fe:34:39:93:1e:6d:b7:a3:1a:20:de:97:
6b:af:cb:e5:99:d2:74:62:47:48:bc:2e:78:96:2c:
61:b7:d9:de:ba:85:5e:6c:57:eb:5d:d0:ba:2f:86:
62:31:3f:5a:93:a7:00:ca:c4:f1:4f:f3:5c:82:62:
c3:f5:27:55:55:ff:13:df:85:57:bc:91:fa:e3:09:
fc:1d:4c:48:de:80:24:cd:e2:90:76:df:bf:7a:aa:
6a:c2:9a:4c:04:7d:4f:2d:bd:f0:46:6d:7b:49:7d:
ba:19:b7:8e:21:10:87:97:2a:02:fd:c1:5e:4f:bd:
69:e4:4c:81:df:c7:92:ba:25:0f:e9:02:cb:33:da:
bc:d5:e6:bb:fb:7c:7d:f9:8e:58:63:0f:32:76:f4:
ac:22:e8:83:1a:d2:3a:be:fd:13:a7:a7:58:18:e6:
46:3d:65:65:3e:66:e3:3d:ef:95:88:cb:ca:6c:11:
c7:cb:13:03:3e:db:f1:e0:42:6d:47:36:7e:9c:ee:
8e:41:92:3b:9f:50:b0:19:84:a2:80:9b:68:6e:bb:
17:39:f1:e0:89:55:e4:1c:ff:84:c1:68:43:01:ee:
11:f2:e2:59:37:7a:a2:65:67:63:76:6f:a4:4d:66:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:B7:3D:0F:2B:AF:39:99:B4:7E:66:13:CF:25:39:26:49:DA:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl
X509v3 Authority Key Identifier:
keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer
sbgp-ipAddrBlock: critical
IPv4:
24.233.144.0/20
149.137.160.0/19
192.173.152.0/21
IPv6:
2605:ec40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:49:0a:6c:f9:f5:bc:8a:d3:cb:3c:f7:40:6a:e3:33:af:a9:
f8:4c:98:31:ea:cc:03:3d:f5:d0:44:1e:d8:1f:c6:87:05:e8:
f0:ca:13:65:0e:61:91:02:16:51:ab:1c:6c:c3:3e:d6:20:a7:
04:6f:97:71:28:90:6e:ee:34:e0:3a:e2:b4:79:57:f3:c4:75:
1c:70:a9:10:50:ec:32:36:7f:24:b5:fc:e3:3c:81:ae:a1:5a:
31:0d:30:5f:aa:0d:38:b3:37:1b:be:85:04:06:33:85:56:51:
9f:b4:52:9d:b0:f2:78:44:df:90:c0:73:4e:b6:e6:76:02:e6:
c0:4e:88:f7:f0:2c:28:ab:c5:3a:1d:fb:d4:77:12:f0:3b:0e:
06:93:1f:57:27:db:8f:39:e0:7d:23:5f:d3:51:04:1a:b1:44:
30:f2:61:af:e8:91:51:dd:a8:a3:47:6b:af:06:53:d3:e8:15:
02:0d:e4:93:2c:2b:ff:0a:68:e1:4a:c2:71:5f:ff:ae:8e:c7:
21:32:6e:b7:be:5c:c9:c0:36:6a:30:48:e1:fa:8c:ff:55:48:
d8:08:10:bd:d5:c2:bd:f9:0c:a9:07:01:e1:80:44:1c:69:ae:
30:b6:ae:61:11:5d:1a:9d:92:5b:11:ce:7c:fe:46:95:45:e1:
7b:36:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:07 2025 by rpki-client