Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
File: 114f24a1-f70a-3028-a291-a67f177d0717.roa (raw, json)
Hash identifier: iZQqhY31ucwvYrPWcHsiUb+GfvhtjI/ygS/dfH2xVv8=
Subject key identifier: C3:DD:12:23:6F:65:A4:87:33:75:6E:B1:CB:34:5E:00:D3:D1:CA:57
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F432858484C101B578A988481D65BB500
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 138195
IP address blocks: 161.129.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1b:57:8a:98:84:81:d6:5b:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ff5ce986-c68e-412f-a57d-37f3db672a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:7e:bc:9e:ea:03:58:b3:80:96:ee:0f:ee:
50:96:11:9f:85:ce:7b:7c:a0:15:68:cc:92:90:95:
23:63:a0:ec:12:51:83:a5:76:8b:dc:50:fe:82:21:
f2:2f:49:3c:7e:d5:a4:06:a5:7e:a3:cb:c1:00:e0:
5d:ad:a9:b6:78:ed:a8:16:35:47:54:0f:ed:25:a5:
2d:c9:49:06:06:b6:68:d3:60:b9:0d:06:75:bf:d9:
04:b8:54:6d:10:e4:10:e6:02:24:3a:ed:e8:a6:2f:
f7:ec:8d:ae:13:3b:d3:76:d5:9b:34:c3:fd:3a:07:
a2:f8:d3:d0:97:75:b7:c3:4a:55:fd:e2:2d:6c:3f:
e7:84:42:b8:0e:a1:a4:b6:18:53:d7:a8:c6:f8:ac:
d1:f4:ba:ea:2a:95:8f:3a:73:f4:c4:42:2c:f9:6a:
76:b9:4e:aa:6f:d4:73:b5:b8:30:6b:10:ff:80:23:
75:80:71:e1:b1:27:0c:d1:c4:a1:54:40:a4:5e:79:
60:1b:0f:2e:a3:7c:66:d4:67:e7:60:d0:9f:7b:bb:
77:80:7c:50:3a:35:a6:b3:fd:5a:d9:84:89:32:5f:
43:58:92:5f:59:34:9d:ba:f2:3c:13:a4:82:00:1a:
d7:1e:28:1a:23:55:2c:82:b1:30:93:9a:1b:ef:b7:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DD:12:23:6F:65:A4:87:33:75:6E:B1:CB:34:5E:00:D3:D1:CA:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c6:75:9c:83:3c:00:cd:af:4d:6b:1a:51:97:28:98:06:af:
6b:80:91:5b:7c:c3:8a:d3:ae:3f:8b:56:c4:57:8c:04:08:d6:
0c:88:4f:ca:5a:e2:5a:03:f6:a1:0e:2b:54:8e:d9:39:bf:3a:
63:48:93:3f:94:d4:dd:37:ac:70:c8:20:17:a7:eb:5d:df:c1:
e4:91:17:e6:84:f3:36:56:52:df:09:4d:b6:35:06:ae:60:ce:
12:6d:d8:37:fc:53:55:ef:f5:76:ff:e7:70:5b:17:92:78:a5:
89:31:f9:34:b4:b2:43:76:6b:68:8a:b4:4c:d4:01:51:42:7e:
6c:e0:e9:e3:be:40:4c:41:0e:e9:cc:f8:20:4a:3e:1d:2d:c5:
b6:53:f6:03:7c:36:dc:50:01:2c:98:73:d4:2e:29:99:30:76:
ac:57:af:db:b1:51:2c:3d:26:47:81:24:91:4b:cf:80:bc:80:
de:a0:75:88:fa:63:47:10:12:f9:45:6c:5c:cc:ef:d8:ba:56:
9d:82:dd:e0:21:c7:aa:c6:87:2a:27:4f:cc:0b:45:5c:c9:ef:
5b:90:f6:cf:68:a3:3c:d4:be:2a:4d:61:bd:8e:d6:37:64:15:
f0:17:e4:af:ff:dd:aa:a5:0a:83:01:2b:ea:77:98:5b:f1:e5:
7a:79:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:44 2025 by rpki-client