Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
File: 2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa (raw, json)
Hash identifier: 179A4w8AtCo0nQcPW8dAuKILqN1d/g2WRl1FC3r2wuc=
Subject key identifier: CB:13:9B:ED:D8:0F:BD:B2:AE:5C:48:21:76:64:02:F0:56:BE:73:5B
Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial: 010D0C9F4328584858A056B3EEB40646C5A2A780
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 11998
IP address blocks: 162.252.134.0/24 maxlen: 24
162.252.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:56:b3:ee:b4:06:46:c5:a2:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=44735b31-0924-48e0-b086-66d919a0d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:34:7a:62:7c:67:7a:b6:f4:7a:45:32:a1:
f6:8f:a4:29:23:15:4b:8c:9a:5c:91:65:c6:4b:cf:
7a:ce:a0:1f:f2:ff:ec:aa:78:5b:2f:74:54:cf:74:
6d:13:b3:34:11:ce:6f:80:dc:be:d7:a7:c9:10:95:
f6:2d:66:60:d9:5b:1c:be:25:ba:6e:2a:e6:08:df:
ea:e8:4e:61:41:14:95:b5:18:83:e1:18:31:78:54:
36:81:1d:49:54:10:bd:07:4e:13:ac:df:c7:15:bc:
d4:7f:d5:ad:4e:13:ef:8a:6a:6f:a3:0d:b6:9b:b9:
c2:08:fb:ef:d4:f8:9d:31:13:ef:d7:f8:1e:f3:58:
98:9a:d9:f9:a7:cb:11:37:6d:75:3f:ef:04:04:ab:
5d:e3:67:58:22:e4:cb:d3:62:01:5e:44:95:4f:f5:
93:52:00:e0:2d:4d:fc:92:62:db:bc:50:79:2a:cc:
0f:d2:35:21:26:ae:8e:ec:37:45:26:2a:80:59:a0:
da:97:93:d0:40:98:27:fa:3a:e7:1a:58:ba:5d:b6:
e7:7c:e4:93:2f:66:0b:5d:ed:16:0a:49:34:ab:53:
f0:6b:af:eb:71:2d:88:56:03:44:c5:a9:19:4a:70:
c1:d2:e7:84:fd:ac:8e:7f:bc:ee:19:d3:95:61:dc:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:9B:ED:D8:0F:BD:B2:AE:5C:48:21:76:64:02:F0:56:BE:73:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
X509v3 Authority Key Identifier:
keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:38:18:2d:35:38:e4:a9:97:d6:23:b2:c4:c4:aa:6c:f2:87:
16:f3:a1:c2:75:fd:fe:64:fb:5a:d2:e5:1b:88:53:5b:5b:7b:
44:39:a1:eb:cf:6e:4b:8c:26:1c:06:dc:f0:af:3a:e7:17:19:
81:c9:3a:cc:09:9b:bd:54:25:a3:a7:f9:32:86:04:81:24:ff:
21:c6:1f:79:01:e0:2e:b6:65:89:a3:d8:19:d3:2d:86:f7:fb:
77:45:f8:1b:e7:77:19:b0:d4:ca:aa:e2:f7:5b:e1:dd:11:0b:
7c:46:59:a2:f7:a2:7c:99:c1:19:d7:79:ba:37:e5:ac:aa:59:
7d:21:4e:50:cc:2f:df:b0:00:bd:16:c4:62:87:06:69:31:5f:
c5:c3:72:01:4b:26:53:28:bd:58:56:e3:35:3c:20:09:fc:12:
95:36:48:4f:29:77:b5:8d:8c:ae:36:ed:65:0c:6a:32:e5:a4:
8f:fe:74:9f:90:84:75:ec:db:63:e4:5f:98:52:56:fa:8c:b7:
a9:1c:2b:2e:46:88:f9:9f:33:62:b2:af:75:75:f1:04:fe:f4:
cd:e4:22:9d:db:04:61:2c:dd:6b:be:69:05:e6:22:d6:80:72:
fb:5d:7c:00:4c:f2:16:8b:5d:af:95:d4:fd:d6:f9:d5:31:c5:
55:d8:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:42:10 2025 by rpki-client