Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa
File: 52c23ee1-da43-30b8-884c-97582767c533.roa (raw, json)
Hash identifier: 1OPr5Zyjam0Bl3uSNqiWIcPe0V77PilfqcskllLGRdo=
Subject key identifier: CC:5C:A9:7D:C9:8D:AB:65:A6:55:5A:5F:48:FD:7E:27:51:5D:D9:94
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB447D4EA7AB9C3DC0D700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 141.152.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:44:7d:4e:a7:ab:9c:3d:c0:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=7b1b65a3-4104-4ff1-873d-b6ca70227f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:a1:23:f5:58:45:05:84:0f:f4:62:b6:38:
a1:4d:a9:6c:08:30:52:f9:0b:28:c0:ea:01:07:70:
d2:71:8d:67:4f:6b:04:53:ef:e5:69:bd:bc:8b:0c:
bc:f3:01:d5:ac:d0:2a:ec:aa:97:3c:c1:94:40:6a:
4d:34:87:16:6f:78:71:aa:93:d5:2b:f2:8e:4a:54:
83:89:86:4d:2a:41:09:b2:64:f4:3c:ae:3f:80:3f:
4b:1a:d9:6e:65:c6:f9:67:ad:fb:59:e4:ca:e0:1b:
d6:47:1c:43:16:39:c9:52:23:74:a0:88:23:24:bc:
e8:0e:24:0e:c4:9a:41:97:fc:3a:d5:7c:49:d6:04:
56:72:e9:51:4c:89:6a:6c:16:aa:5d:c7:e6:34:55:
4b:25:f2:72:22:b3:0c:34:f7:04:03:9f:55:f6:e8:
cd:3e:58:68:80:e0:d0:35:de:ca:df:91:dc:2a:1b:
ae:6c:76:bd:4b:90:95:1e:6d:c6:b1:b0:20:fb:43:
c4:21:d6:c1:83:6b:47:9e:cb:98:90:cb:df:11:d6:
bc:1e:eb:7b:a3:70:5f:16:d2:78:aa:b3:19:b4:5d:
90:88:d3:b8:91:d5:ba:f6:1f:4d:5d:88:c9:83:1b:
d1:5b:a6:f3:de:09:67:d1:c5:68:b0:33:a7:41:85:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:A9:7D:C9:8D:AB:65:A6:55:5A:5F:48:FD:7E:27:51:5D:D9:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.152.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:30:f6:30:e2:4b:f6:77:e3:5a:d1:13:48:f5:5d:f4:38:b8:
88:be:42:a5:44:12:e7:fb:ff:ca:39:ca:d3:e2:66:6d:a9:22:
e9:a9:77:18:a4:65:ad:ea:ab:95:3b:38:c8:91:bc:4d:9a:74:
11:c3:47:d2:69:c1:1d:4b:dd:d5:81:de:8f:92:67:0a:96:65:
ed:36:9a:e8:9c:e9:6c:36:7b:2b:0b:24:57:30:4e:0d:12:be:
1a:4f:ac:62:ec:5d:28:7d:22:7c:3e:33:a8:b7:db:15:02:08:
6c:d5:13:35:45:7e:68:91:6b:f8:4b:5d:94:40:0e:ff:cf:f0:
8b:42:04:0e:c2:80:65:54:f4:10:d7:e4:bc:ef:f4:ee:fe:b7:
29:e1:87:62:b8:4e:dc:a3:a9:77:32:2f:50:a3:e6:79:8c:ea:
b8:cc:51:ef:b6:ee:7d:97:df:34:d1:a9:8d:89:39:c8:46:d3:
c8:b0:5e:b3:60:a3:36:74:e5:8a:41:1c:c2:72:e2:9e:cb:85:
e0:ff:e2:ee:1d:48:9a:89:3a:e3:e7:5d:f5:cc:8e:25:37:38:
3e:7d:36:71:9a:ca:a4:56:5e:b0:86:5a:b1:17:e8:be:2a:4d:
95:d3:18:a3:26:ea:5e:40:07:c5:e3:05:2a:73:78:5d:ee:4a:
99:ca:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:44:38 2025 by rpki-client