Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
File: be3a5e47-d281-347d-b95d-87a8fb4d657b.roa (raw, json)
Hash identifier: WZQFG3btWUXnDrq5OrTeCUe6qfGPlhaRj7WbH5ktHfA=
Subject key identifier: DB:33:FD:B7:7B:3C:54:B0:E2:C3:31:D9:9C:14:16:EA:8F:3D:34:CD
Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial: 010D0C9F43285849568EB4BB66C0A62B59B47F00
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
Signing time: Fri 28 Mar 2025 13:00:51 +0000
ROA not before: Fri 28 Mar 2025 13:00:51 +0000
ROA not after: Thu 26 Jun 2025 13:00:51 +0000
asID: 14315
IP address blocks: 173.0.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:8e:b4:bb:66:c0:a6:2b:59:b4:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Validity
Not Before: Mar 28 13:00:51 2025 GMT
Not After : Jun 26 13:00:51 2025 GMT
Subject: CN=5e082c55-37ae-412c-9470-80940bdda7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:31:57:cc:c9:33:22:29:3a:ef:45:4e:8c:
8c:cb:25:86:f4:97:c3:2f:d5:19:92:68:6b:91:d1:
ce:c3:6c:fc:3b:bc:0f:ff:d3:b6:50:58:76:c4:ce:
c3:9b:51:f5:d6:7c:85:e6:3d:cd:64:01:95:bf:d1:
10:44:c8:c0:53:86:e9:f6:d1:40:32:e9:4e:4b:e1:
ce:20:7f:20:97:4b:5c:bd:45:a3:e3:78:65:ba:7d:
c6:84:2b:f3:90:b4:81:e1:8e:b6:38:f1:f8:23:82:
43:51:f7:77:74:44:dd:5b:d8:de:c5:c4:3a:e4:4f:
cc:0d:ae:2a:e0:c4:64:d4:3c:66:4f:20:34:4f:ab:
c9:a1:ba:1f:66:03:e0:ac:7d:42:44:aa:75:a9:6d:
aa:b9:d6:fc:11:8d:3a:64:ba:0e:dd:04:a3:ef:c3:
fd:3a:a7:95:cc:14:e2:c6:1e:61:f9:0d:75:d9:76:
d0:33:e3:46:c8:aa:1e:e2:1b:b0:91:55:bc:0d:82:
48:16:45:f9:0b:e6:6c:e9:d1:98:ef:b9:f0:72:22:
37:7a:3a:8c:ee:a4:42:e2:54:76:f9:0f:c0:44:a5:
d8:a8:eb:8f:85:3a:78:4d:dc:da:a5:29:b9:de:7c:
9a:10:76:3f:3d:c9:41:6a:be:fb:14:e3:a5:73:10:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:FD:B7:7B:3C:54:B0:E2:C3:31:D9:9C:14:16:EA:8F:3D:34:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
X509v3 Authority Key Identifier:
keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.0.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7f:89:8b:07:66:59:3a:d0:1a:43:45:4e:dc:21:1a:7d:39:
1d:1f:a8:b7:40:8c:fd:c5:73:7a:ff:be:c5:a7:bf:bb:83:ea:
4b:d9:56:1f:6c:77:61:97:b0:e6:ad:f0:3f:4f:ea:fd:d0:3d:
57:3c:c9:3a:9d:b8:e4:68:31:9d:d0:7e:eb:39:24:29:d6:b3:
0a:e9:eb:78:4c:d3:44:9f:93:eb:ab:89:26:48:26:1d:31:5f:
87:1a:17:73:aa:1a:3c:e4:bd:23:ea:ee:d1:8c:3c:22:7d:a7:
de:fc:3d:7a:53:f4:9b:72:1d:9c:2d:20:3d:7f:12:2e:c8:36:
be:72:ff:5c:b2:36:6f:0d:17:16:96:f2:c5:b3:28:f7:27:d2:
e5:bd:b1:1b:87:45:e5:7f:1d:23:e4:db:25:32:b1:08:7c:df:
cb:68:1a:9b:8d:67:94:ce:9a:09:e9:53:f2:29:08:89:8e:65:
be:75:c4:e2:49:4b:12:f1:5f:91:10:3e:94:ed:98:e0:04:f8:
19:be:f8:1f:de:6e:07:86:ab:a0:5d:7a:73:5c:50:99:b1:65:
3a:20:4d:be:b6:f6:72:11:44:ac:75:84:30:d2:83:e0:c0:f1:
f7:aa:0a:57:c0:22:e3:45:d4:b5:6d:9d:2e:37:e8:d6:65:73:
6f:c4:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:51 2025 by rpki-client