Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
File: 8c63db66-352b-3131-9200-cd97bf79e86f.roa (raw, json)
Hash identifier: w/KfXPhOidgZGvI/GkNZyWW3ED3tYsrJpwqGHoCPPD8=
Subject key identifier: EE:2C:DB:32:44:A9:57:68:E0:BE:2C:2B:BC:50:9B:7C:20:50:48:4D
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F432858494B6419D333730BFD6454A980
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 15257
IP address blocks: 173.195.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:19:d3:33:73:0b:fd:64:54:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=024fa688-bef1-4a90-91da-aa9bbb796213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:c0:59:81:2e:70:b1:06:30:09:41:ba:c1:
c8:51:a7:b8:df:3f:05:24:3b:6e:cc:25:2f:a8:c8:
c3:87:b8:45:0a:d8:e2:d4:2d:3f:1f:b5:02:23:32:
69:44:3e:ee:96:2c:2e:0b:36:54:16:c0:8c:23:dc:
87:9c:08:7c:47:26:f7:71:0f:4b:9c:5c:de:7e:6e:
ad:67:4a:2f:18:77:61:0c:55:30:8f:51:54:8c:a5:
9b:46:62:08:df:dc:4d:f9:f0:90:6c:b1:aa:00:e3:
ca:07:cc:f9:50:df:a7:8d:da:ab:e0:5c:79:4f:31:
9c:7e:fa:16:8f:d6:80:87:ae:66:b4:94:28:19:8f:
b4:c6:71:68:26:4b:8c:bc:d3:9f:f4:ad:87:60:66:
8b:41:75:10:fb:1d:a0:7b:42:b5:d4:53:e0:b0:a3:
b7:6a:aa:d8:1b:78:e2:1e:f5:12:c7:03:47:c0:5f:
41:09:56:cf:93:d6:9f:37:89:a4:eb:1b:16:0e:03:
41:c8:8b:e5:c1:3e:58:38:08:40:fc:e2:55:90:ff:
ed:dc:6b:80:de:cf:d8:d5:e0:56:cb:e8:7d:5c:8c:
86:f9:a7:3f:36:57:a8:5c:17:8e:75:fc:5a:35:c0:
79:49:7e:ca:7f:7d:6e:ef:4b:19:2c:44:a8:22:f6:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:DB:32:44:A9:57:68:E0:BE:2C:2B:BC:50:9B:7C:20:50:48:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:e8:b1:7f:3d:76:c0:f7:51:64:b3:ae:2e:f1:bd:a9:8a:81:
c1:61:ed:61:99:ba:0d:73:cd:d0:23:5c:ec:c3:83:8f:fd:20:
90:ff:ad:d9:3c:90:fb:f0:0d:16:92:17:42:08:b3:fd:90:77:
ca:08:c0:76:b1:93:fa:ad:01:4b:0e:94:44:22:2f:10:a5:41:
46:4e:69:d5:25:5d:5f:2e:ee:2d:50:9b:73:4b:77:b0:20:d0:
84:8a:00:2e:3e:52:32:53:a7:8b:7f:e2:07:c7:04:16:bc:d9:
27:83:3d:ab:25:9c:ff:1c:36:84:75:6d:be:ca:dd:b5:b2:8d:
96:52:9b:67:d5:67:d2:01:63:8f:8b:a6:8c:8e:e1:ce:d9:5c:
24:4d:df:b7:e5:15:7c:1c:76:de:79:3c:cd:7b:1b:99:27:e1:
4a:cc:49:4a:60:8e:70:40:a7:5c:62:f1:93:df:b7:9b:d0:1c:
82:8e:50:c2:14:84:d3:03:3f:8d:c4:4e:fc:c8:4d:fe:55:f1:
25:eb:92:5b:ee:b2:80:5b:f7:7d:58:ed:7f:bb:45:bb:34:20:
9f:05:09:dd:fb:77:78:9e:8e:e5:86:6b:2f:0f:d5:7c:90:f2:
ed:07:7c:bb:6c:40:99:45:66:d0:35:c4:25:7a:97:3a:44:74:
fe:05:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:59 2025 by rpki-client