Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json)
Hash identifier: O2lZNrAyP2dHc8JTKEg5qHL2QUfoi/0KGkwJF0Sx7ss=
Subject key identifier: 9C:95:E8:66:5A:CA:D3:4A:B9:12:2E:C1:C8:4A:BF:F4:27:CE:AB:3B
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848CC7B8F7FF246EF5320EDADC0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 16433
IP address blocks: 173.240.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:8f:7f:f2:46:ef:53:20:ed:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=d07e2175-c8f5-4c88-9f50-a09e1219a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:c1:2a:91:9e:e8:3a:86:75:9d:c0:29:6a:
bb:39:c2:17:fc:9a:57:8a:8c:5e:65:fe:a3:af:b4:
52:b8:21:5c:54:88:83:73:00:a5:e7:7e:d6:9a:56:
c7:43:ba:e4:48:ae:9d:d5:93:68:11:70:f2:3e:35:
d0:57:9f:e4:25:92:5a:19:09:5f:09:f6:48:58:ae:
15:0b:75:50:91:91:e2:4d:68:b1:fd:e7:25:92:a0:
af:c1:25:cb:26:10:63:87:3e:7b:9b:9a:c1:e2:da:
ad:40:f5:13:91:72:cf:1f:7f:53:76:e7:b8:88:44:
29:66:29:84:04:d7:8b:51:33:96:29:43:5c:11:4c:
05:7d:19:31:2e:80:9f:c4:cd:f0:2f:29:3f:14:92:
7b:9b:2c:a9:f4:a9:5e:7b:8f:98:d9:4e:b9:f5:87:
34:c2:03:97:44:52:d9:ce:f9:86:fa:b2:ce:31:6c:
ac:ba:9a:ab:ab:01:ac:1c:83:20:9e:74:81:00:40:
cf:9c:74:3a:7b:1a:90:b5:5e:ae:9c:8e:e7:5b:7d:
bc:5f:09:a3:93:b0:50:d0:fc:b2:f8:5e:75:9c:57:
4e:3a:32:eb:9c:ea:45:a8:a7:bd:55:1f:ec:78:de:
3e:56:6d:bb:c3:b0:12:0e:4e:2d:82:2c:4e:35:39:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:95:E8:66:5A:CA:D3:4A:B9:12:2E:C1:C8:4A:BF:F4:27:CE:AB:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
173.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cf:f2:45:51:fc:43:4e:ef:4a:37:b8:66:83:93:c6:a6:c1:
e8:04:86:03:13:0d:9a:bd:98:64:b3:6c:d2:cc:9b:40:d0:8f:
dd:26:b7:4a:51:88:00:4e:58:6e:4c:f6:a7:bf:1c:5f:89:ef:
05:df:ec:c1:46:e2:ad:9e:2c:e6:0c:c9:ab:fc:c0:20:55:45:
34:41:62:cb:3a:09:26:4c:87:d2:39:f8:30:12:2c:96:8d:58:
5a:6f:f9:b8:55:65:f2:20:72:d1:95:f4:41:96:c5:19:24:87:
9e:ee:8b:86:99:fa:5a:ed:e8:49:24:4e:6e:a6:73:cb:e2:dd:
19:4e:a9:8a:81:3f:68:5f:15:2a:68:31:05:97:43:8c:09:14:
dc:36:d3:5c:df:b9:4f:5a:ee:10:a7:4b:bb:83:12:13:e0:9e:
84:e6:1c:d8:6f:38:cc:13:e2:2c:0a:9d:86:34:19:19:95:5f:
05:ab:5e:62:a1:b1:42:36:6d:02:fa:8a:77:34:5d:19:49:b6:
11:d6:50:3a:b4:8b:6b:4e:89:58:15:40:7a:93:4e:e0:42:ac:
ef:6e:8f:2a:51:be:92:11:05:c9:3a:c1:11:64:fc:95:78:2e:
01:d1:1f:c8:ff:29:69:53:96:3f:a4:bf:06:59:93:18:b2:ee:
5e:19:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:11 2025 by rpki-client