Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
File: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (raw, json)
Hash identifier: xiqOS1DAfWYrNqfo/MPv0OZzn1Al5yBnJSEHGXTrcUE=
Subject key identifier: FD:95:2B:06:F4:82:6E:00:95:A0:28:77:ED:07:DA:99:4F:82:B5:8E
Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial: 010D0C9F432858481C9A81BDD65FBD4F4812F000
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 162.213.126.0/24 maxlen: 24
162.213.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:81:bd:d6:5f:bd:4f:48:12:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=430caba8-9ef9-4bef-ab56-a0e1a30392bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:6a:ea:ec:4c:bc:54:2a:29:db:0f:76:ba:
ec:ca:26:8f:56:97:0d:e8:0d:ae:20:6f:e6:fa:7e:
0e:1b:d6:9a:f2:f9:b4:31:6d:4f:b9:97:ed:32:8a:
35:3b:60:eb:59:6c:58:97:0d:ee:86:cb:04:4f:53:
6c:3e:c4:c2:70:a7:3d:ff:89:77:68:46:a1:43:f2:
8e:8c:63:36:c2:db:2f:c8:0f:10:c7:81:7b:7b:01:
62:58:d1:8a:1d:64:95:0d:15:4e:32:3e:26:da:bf:
71:ea:18:4b:ca:d5:61:cd:32:ad:9e:4d:11:26:6e:
75:0d:a4:38:26:32:77:e7:25:27:9f:2d:86:70:3f:
40:9e:c5:3f:8e:b8:58:1d:72:f7:fc:8c:16:d7:f7:
3f:b3:ad:cb:be:cb:f1:a3:2b:b6:ca:d2:c5:67:b9:
7a:18:76:72:5f:28:26:fc:81:7a:e8:a6:94:f1:bb:
84:6f:d7:4b:8d:69:80:d2:d6:cc:20:29:02:8e:fc:
33:0d:34:d8:ff:b5:6a:73:b9:03:30:ea:a2:1e:1f:
8a:a0:85:29:eb:d0:ee:28:02:0f:83:86:ba:6e:8e:
b0:ee:7f:26:e4:43:9d:87:64:1b:1e:d7:ea:05:0b:
36:bf:94:06:11:23:70:23:4d:35:ae:e6:8b:23:3f:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:2B:06:F4:82:6E:00:95:A0:28:77:ED:07:DA:99:4F:82:B5:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
X509v3 Authority Key Identifier:
keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.213.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:7f:24:99:c5:68:2b:30:2f:6b:9b:2f:a2:46:d4:45:a1:c1:
08:73:b0:2a:0c:93:a2:39:24:d8:88:ee:e3:ae:50:45:de:f6:
5d:8d:74:7c:5a:f6:70:bc:07:86:3e:e0:a2:3d:e8:25:be:9d:
18:f5:42:c7:75:a2:8a:52:18:3f:b2:23:d4:fc:74:33:10:cd:
44:b1:54:9d:2c:80:fa:1e:f1:ea:a9:7b:5a:26:e4:08:d7:4a:
de:b5:95:73:9f:f1:9c:fd:34:d1:04:70:fd:a4:c3:be:ea:a0:
1a:01:d0:f2:cf:1d:98:1f:c3:ee:a5:20:02:25:f0:c0:5a:cd:
bc:de:e1:11:8d:65:5d:73:ee:4d:99:55:79:80:62:79:c2:14:
20:8a:f8:57:af:d0:a3:dd:11:6f:01:f8:94:48:5e:68:e2:c1:
a8:ba:5b:1b:ca:4d:2f:cc:6a:23:79:dd:2c:cf:fa:b0:d9:8f:
87:85:19:16:72:88:d1:ab:0f:1b:c4:e8:6a:8e:7f:1f:ea:87:
d0:f8:be:9b:21:17:23:90:32:6b:b4:b4:4f:e5:ad:0a:ae:36:
1f:0c:b6:72:6d:32:2b:09:65:bb:5d:30:16:95:ec:06:83:6a:
9c:42:5e:02:ae:f4:fb:2b:fe:c5:e9:d8:0f:c5:72:0f:37:ce:
01:a1:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:13 2025 by rpki-client