Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
File: 8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa (raw, json)
Hash identifier: yYg+WTDYQ6AlAomiSffaW1YHXRuEWOOYFl84stf9sac=
Subject key identifier: 9F:2A:66:31:28:98:6C:FE:2D:A6:57:2F:4E:11:2C:D3:CE:66:C5:D5
Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial: 010D0C9F432858487325BA81B807D64F9C592420
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 19905
IP address blocks: 157.188.0.0/16 maxlen: 24
161.185.0.0/16 maxlen: 24
167.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ba:81:b8:07:d6:4f:9c:59:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=aee5c3fb-90af-4c76-bcc8-8e7aa747e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:aa:0d:11:3e:4d:c8:cd:0f:97:c0:df:cc:
e1:f1:f5:66:4b:85:d1:de:5b:d6:0b:96:37:a2:8e:
ec:07:0f:d3:ec:e2:bf:c6:89:19:2b:ab:3e:81:6f:
cf:54:8f:95:c5:2a:66:2f:77:95:b0:74:2a:84:d8:
a3:47:fb:f1:e8:0f:ff:be:c4:a3:d0:ad:ad:a1:c8:
5f:94:8f:5d:59:51:97:63:4b:6b:58:ef:91:24:83:
8c:21:8c:16:85:35:ec:eb:ca:7f:10:83:28:c8:5d:
d4:c4:9d:28:92:45:33:43:23:e2:55:e2:ae:8e:47:
e9:05:92:2d:d6:5d:45:b0:65:60:dc:91:a2:26:1f:
23:8d:76:26:b5:fb:31:3d:80:d5:f1:48:f0:ed:80:
2e:51:7f:91:79:ae:22:e8:6b:3e:a2:70:81:1a:1e:
65:d2:66:9c:cc:d9:88:07:64:c3:1d:1f:c7:0d:f6:
cb:c1:3c:f9:bd:c7:8e:05:3a:26:76:b6:b2:82:a5:
a9:ed:cd:0a:4d:02:46:e8:af:8d:6e:2d:32:62:bd:
f7:45:53:55:c6:c7:33:2e:3a:28:fe:e4:63:0e:9d:
09:ae:5f:92:cd:f9:95:85:55:d8:b6:98:23:45:65:
84:a2:26:54:9b:2a:9b:c7:a1:81:84:44:d3:31:e1:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:66:31:28:98:6C:FE:2D:A6:57:2F:4E:11:2C:D3:CE:66:C5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
X509v3 Authority Key Identifier:
keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.188.0.0/16
161.185.0.0/16
167.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:99:e1:d4:47:d1:2a:a5:83:c5:7c:ce:0d:14:dd:b8:90:38:
2b:a5:2f:16:ab:34:6f:e5:dd:f7:e2:8a:ac:61:6d:a7:5a:b3:
a1:cb:d6:90:8a:40:4d:8e:58:63:a6:11:50:76:f9:84:e1:f8:
17:a5:4b:6a:d4:e5:c1:21:4a:ac:fb:72:27:45:47:44:b2:d8:
7b:5f:2f:02:6a:81:05:0f:b2:c3:9a:d6:c0:ca:8d:aa:7c:11:
70:67:43:c2:2a:b9:fa:a6:1c:b1:a2:f6:fe:87:dd:3c:77:cd:
f6:7c:5b:3e:2f:4a:92:cc:1a:63:61:39:8d:93:75:76:da:3e:
35:7a:b2:13:8d:eb:bf:b5:f0:04:19:da:e3:47:b0:75:14:aa:
cd:36:d8:e0:c0:99:8c:2c:92:ea:0c:bc:0a:d9:52:55:a8:2c:
20:c6:e1:7b:a0:2f:f1:58:d5:1d:0a:ce:4e:7e:2d:e9:a8:46:
50:d4:06:ff:8f:73:36:80:cd:aa:ef:eb:bd:13:ea:54:cf:29:
76:4b:9d:3a:1c:7e:e0:21:8d:f6:09:f2:5c:6a:0b:e0:1b:7d:
d9:77:e6:07:63:00:28:e4:4b:a4:24:8f:f0:dd:14:98:e9:40:
ec:b7:53:87:61:f9:c7:dc:97:6a:e8:0c:3f:6d:64:e7:d5:af:
cf:a0:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:45 2025 by rpki-client