Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa
File: 38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa (raw, json)
Hash identifier: oab/fVqHlqWDBithyfi4TKbHArzw1cbcUYwkM45JfJc=
Subject key identifier: EC:3A:8D:31:00:FA:ED:49:25:7C:E2:D1:53:89:4D:DC:BB:D5:FB:C7
Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial: 010D0C9F432858486D904BCB65656C4FA0B08B00
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 4181
IP address blocks: 40.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4b:cb:65:65:6c:4f:a0:b0:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=89031e12-b477-4eb6-9ade-610ad12b1a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:12:28:cc:0e:ae:0f:a7:a5:57:57:aa:ae:
dd:1c:a4:9b:bc:e2:de:fd:8d:cf:15:f9:c6:b8:c2:
04:98:d0:c5:39:4a:e3:ef:7c:44:90:ac:3c:05:8b:
16:5e:e6:74:9d:a1:9d:6e:db:ed:ba:f1:84:49:77:
b5:5e:0c:c2:20:9e:32:03:60:31:a3:40:51:fe:c2:
98:04:c9:5d:ab:17:f7:e2:04:4e:be:2e:42:f8:f9:
55:33:af:3b:2c:f6:08:24:ab:23:46:94:02:ca:44:
5f:9d:9a:bc:c1:6c:d1:be:1a:58:7a:45:35:20:8f:
2c:f9:dd:b9:5c:fc:a8:a6:6d:4c:01:9a:e8:c0:f9:
39:27:40:87:4c:0b:ed:3a:47:4f:c7:11:25:37:6c:
3f:e8:b5:e4:98:90:e1:52:ba:14:67:42:98:ac:e8:
6c:6e:f4:c9:ce:e2:ad:72:4f:58:cd:9a:bc:43:a1:
60:80:2a:a3:60:ad:aa:ed:81:4e:60:30:62:86:f8:
9d:bd:24:17:c5:fd:f5:f5:13:9e:13:08:ca:2e:44:
a1:86:49:ab:01:8e:00:da:4d:29:c9:cd:f9:4d:05:
d9:28:9f:b1:2d:5f:b0:02:02:77:e4:b1:06:c3:19:
0f:fd:f3:96:ea:ea:0d:f6:a9:e4:ff:9c:12:55:d1:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:8D:31:00:FA:ED:49:25:7C:E2:D1:53:89:4D:DC:BB:D5:FB:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/38c7b3a9-7fc8-3ce0-a523-d7642af3003f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
X509v3 Authority Key Identifier:
keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
sbgp-ipAddrBlock: critical
IPv4:
40.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b1:b3:50:bb:fc:b0:ae:d4:56:d3:5e:e5:a9:bc:f4:e6:38:
e4:c6:88:a2:6b:01:40:05:20:e2:d9:1d:ea:47:21:2c:4d:3a:
49:8d:a8:5c:50:cf:7a:66:37:22:9a:8a:dc:42:27:02:1e:29:
43:1c:f9:a7:f7:34:5e:38:66:29:ab:a2:9d:b3:4b:0f:13:77:
21:cd:5f:47:8b:0f:85:f9:9e:3e:96:4a:69:98:17:17:22:6a:
77:3c:7f:06:12:99:9f:d2:1f:84:46:ad:02:2f:98:e3:a2:a9:
03:37:7e:ab:42:23:c3:58:d8:74:93:89:9f:cf:30:ce:07:56:
3e:48:39:80:de:ff:fc:83:e5:5b:4f:aa:d2:cc:8b:3b:1e:00:
f9:cd:65:4b:c7:f4:17:a5:07:0b:06:4a:b8:12:e4:56:91:91:
03:74:68:44:02:27:60:a9:a0:c1:f2:6e:b4:bc:01:01:cb:12:
54:e2:11:fe:83:c9:2b:1c:86:e8:66:0b:ad:c1:55:fc:ee:eb:
4c:93:48:17:a8:a2:c3:60:e4:4a:62:24:48:a9:de:3b:be:9b:
26:d2:58:97:51:e4:b7:70:7c:e6:f0:bd:22:cb:16:4d:a1:44:
e8:e7:eb:a0:41:fd:c5:ae:62:f1:23:6c:fd:aa:cf:fc:cb:67:
6a:80:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:04 2025 by rpki-client