Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa
File: effebbf7-ee2d-3137-8b68-780d284e81c1.roa (raw, json)
Hash identifier: 2Ma2k3hWnSyrycwE1A6tDFfkcSexQ0GStn3papT0hys=
Subject key identifier: 11:8F:EB:10:00:BA:0E:6E:4A:7A:B8:EA:4B:BC:D6:1D:88:EB:0F:CC
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F432858491ED6E44CAB1155C286DD8FC0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 10430
IP address blocks: 173.229.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e4:4c:ab:11:55:c2:86:dd:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=49ebda7c-100a-49d0-8f6f-39cef9af9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:d0:ba:6d:69:22:fb:53:df:d3:72:67:3b:
ac:03:98:bc:ad:6a:e7:49:e1:24:11:dc:15:69:ac:
b7:1d:52:01:d9:24:27:78:98:df:40:df:76:83:f1:
f6:59:20:00:d4:f1:f5:06:1e:f3:5f:85:b7:3d:44:
e1:e2:71:3d:28:bf:3d:53:c1:77:6f:9e:24:c3:55:
06:4c:63:4b:f8:2c:7d:f3:51:03:02:5e:8b:91:a9:
d6:59:21:47:66:d8:04:af:23:ab:2c:8d:fc:f4:cc:
cd:ba:e0:8b:a7:01:5f:43:7b:8c:a2:fe:68:39:57:
67:49:ef:fc:36:f9:a5:39:52:31:ad:e0:3c:40:de:
29:0b:fc:5d:ad:30:c0:df:ce:da:5a:34:54:1b:6b:
47:c2:ee:16:bd:21:53:25:21:db:16:4a:35:b4:9d:
c3:68:9a:61:29:1d:f6:b9:d6:33:74:d6:2c:bc:36:
49:74:f7:f0:96:e4:fd:35:b1:db:98:45:96:6b:7d:
08:e9:a2:ee:ef:2c:4b:69:02:bf:c0:fa:15:b3:c6:
34:8a:d2:bf:af:77:af:c8:2a:5b:a8:7e:04:14:db:
ba:e3:d7:03:49:d5:aa:8c:fc:a6:a5:0f:59:3d:49:
ed:9e:1c:c4:e8:12:84:82:c2:65:81:53:87:bf:b5:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:EB:10:00:BA:0E:6E:4A:7A:B8:EA:4B:BC:D6:1D:88:EB:0F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.229.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:eb:8b:97:fe:94:3e:d5:16:b5:dd:bc:7c:4c:93:9b:47:b7:
ed:30:7e:6f:60:27:0c:93:58:be:32:42:7e:55:53:bf:74:5d:
dc:aa:7d:bb:04:31:45:f2:bd:d3:be:25:f5:bc:57:e3:9e:30:
b0:66:f2:1b:32:18:f9:b5:33:d0:31:16:68:b1:f0:0b:c4:d3:
af:ba:e3:63:92:d1:bf:ac:a5:44:72:b6:02:67:6d:ca:d6:fb:
79:80:66:ec:18:5b:84:7f:4e:1a:dd:41:5f:b0:76:34:19:84:
0a:c4:d9:68:0f:6e:68:ea:9c:9d:d9:77:a1:e6:a4:e2:07:7b:
cc:4f:f9:f0:2b:b3:40:0c:18:66:d4:09:01:ec:a8:2a:d0:35:
0e:50:d8:e5:5b:e3:0f:37:f4:2d:f7:b8:f7:36:c2:75:c5:7a:
5e:da:fd:d7:e9:3e:43:df:33:25:b4:3a:21:1c:b1:61:f6:50:
f0:85:fa:23:28:d1:99:30:41:e0:0d:44:4c:18:94:11:bf:f8:
5f:c5:92:e2:14:44:45:10:4a:0a:9e:a3:34:6f:da:1b:00:c4:
ce:34:f2:01:d6:ba:64:95:84:87:37:eb:1a:de:fb:a2:a5:6a:
90:d7:76:c7:3d:4b:1c:60:3c:83:d3:3d:61:c6:f7:f8:2f:18:
fa:75:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:48 2025 by rpki-client