Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa
File: 8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa (raw, json)
Hash identifier: 0ekOmVEqIu+8OXpXc0bDrZodCo+cC7LKRpdWOdKPbPs=
Subject key identifier: 5D:68:4D:6A:B8:CA:EE:1C:86:F5:7E:20:3D:6E:78:3F:FF:53:37:8B
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F43285848222FCE29E7E5C0736B162000
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 161.38.192.0/22 maxlen: 22
161.38.196.0/22 maxlen: 22
161.38.200.0/22 maxlen: 22
161.38.204.0/23 maxlen: 23
161.38.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:ce:29:e7:e5:c0:73:6b:16:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=487dffc0-3c93-4018-b613-cc1d7bf528fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:e5:f1:65:65:36:cd:f0:50:8f:3a:7c:3e:
2f:29:62:30:d9:cf:e5:4c:44:0e:7b:fe:77:b3:5f:
c7:7b:e9:76:a1:7d:3d:40:55:fa:ce:a9:87:e2:27:
2a:a0:61:24:f6:11:27:56:91:de:77:3b:66:23:41:
66:4c:ff:91:42:84:dc:8b:34:61:d9:a8:eb:40:74:
41:ff:88:23:73:05:b0:6f:f2:64:ac:36:0f:db:00:
9f:fb:43:bb:20:97:e5:db:8b:c8:31:34:1d:96:3a:
1f:04:3f:38:8a:f1:55:a5:9c:6d:05:82:dd:40:2a:
97:d0:8c:0e:69:7d:fe:e7:24:93:19:3e:9b:44:42:
d2:87:14:ed:9d:a0:75:a6:44:86:72:29:8a:06:23:
61:ab:28:9e:b4:a4:4e:58:ae:a4:f1:a0:46:53:b5:
15:f6:21:42:3f:0f:e1:14:aa:ca:3c:5c:6a:a9:88:
0e:af:25:92:79:32:6a:66:cb:2b:5b:df:55:bb:b1:
d1:ba:4d:b5:7f:a8:a5:a2:8b:1d:d6:cf:6b:2a:98:
d3:5a:16:d4:29:2f:f1:7f:67:4c:f2:4c:de:86:f9:
22:4f:02:c4:77:0d:de:bc:84:0d:24:19:6f:32:c5:
cc:82:26:b2:e0:7a:ec:01:43:f3:85:f6:22:b6:88:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:4D:6A:B8:CA:EE:1C:86:F5:7E:20:3D:6E:78:3F:FF:53:37:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:9c:6d:90:66:d1:c7:ae:14:cb:0d:a8:31:e4:aa:23:0e:d7:
df:17:09:c4:8c:e1:03:de:88:e6:f2:4f:35:d2:dc:67:f9:60:
c7:b9:bf:3d:b7:fd:17:f8:4c:0c:09:93:3f:21:88:96:cd:28:
9a:8b:72:cb:0b:cb:df:94:f4:6b:2a:73:bd:d1:9c:6d:ac:fa:
e2:72:cf:88:fd:45:38:38:25:6f:a6:cd:2b:2a:8c:33:01:e6:
3a:58:8a:de:24:24:e1:38:c1:c2:8e:2f:e1:8a:b2:ac:82:e2:
f4:62:15:ae:cc:5c:cf:42:ec:ca:53:c3:a3:5c:64:df:f7:ce:
34:b8:19:96:1f:3b:bd:2d:74:03:7f:de:4f:7c:92:a8:b5:29:
7c:da:09:e8:1f:f0:95:7c:82:1b:aa:ae:ea:17:31:5a:14:f1:
90:3d:6a:8e:0d:61:8f:bb:af:b5:21:3e:04:74:26:7c:2e:ba:
e9:b9:95:b0:51:0c:2d:ab:51:01:b6:a0:6a:03:2a:6c:c7:c3:
3c:dd:8b:51:49:1e:4a:ae:36:f6:23:e3:39:ac:b2:c8:bd:61:
39:a0:7d:37:28:f9:61:00:6c:e0:1c:0b:67:fe:67:d2:01:aa:
99:e9:9a:18:f8:c0:24:97:d0:78:5d:04:d7:b9:11:b2:eb:54:
75:a7:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:08 2025 by rpki-client