Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
File: 8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json)
Hash identifier: tDBitdbnVQfI3BP06l6cvWLmpDerfWDgEShY29w/Lcw=
Subject key identifier: 64:E4:A1:06:B1:25:99:D7:86:A5:67:36:91:90:3B:5B:56:8E:13:81
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584834555ED1C9A41FC85AC748E0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 3356
IP address blocks: 161.129.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:5e:d1:c9:a4:1f:c8:5a:c7:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=324d8e65-49ca-4a31-8d92-aa1c6f61cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:be:81:9a:ef:52:69:be:cb:b2:cb:24:07:
33:d8:d3:12:ad:81:e3:0d:78:3b:a9:6a:e7:02:41:
7c:6d:37:2c:72:9a:7c:02:70:ca:5c:d5:4a:66:88:
df:4f:12:0e:b7:22:ac:64:eb:55:8f:52:88:74:4d:
44:45:ff:d0:1e:46:3f:70:e6:06:25:c1:83:0c:46:
71:00:b5:44:20:fa:fa:59:3e:2d:8d:3b:24:77:d5:
55:08:17:c0:47:87:e0:61:fd:1b:14:ba:51:4d:a8:
c2:b0:00:bd:7f:93:8b:86:ee:f4:5e:2d:3b:90:1c:
ad:8f:49:be:49:7e:36:ab:cf:f8:06:d1:9a:1f:0d:
64:4d:6c:8d:0c:80:af:86:34:38:f1:d9:5e:d7:c8:
0b:5b:a9:bb:f3:2e:58:84:48:e6:4d:ce:d3:c6:15:
c0:c1:63:5d:e7:7e:af:0a:f7:7b:f2:43:fc:7e:70:
6d:af:4f:b6:20:47:86:ab:d1:cb:7a:af:b7:8f:bd:
0b:7a:d8:5d:8f:77:f5:19:81:83:e4:26:e0:bc:a2:
c3:dc:22:d5:fc:1f:e1:9f:c4:24:4e:4e:40:9e:68:
d1:fc:7a:a8:36:f7:56:44:26:5c:61:d6:81:37:92:
c2:e9:e9:98:dd:26:98:f3:02:0b:3f:37:4e:12:23:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:A1:06:B1:25:99:D7:86:A5:67:36:91:90:3B:5B:56:8E:13:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:44:44:74:8c:73:41:93:5c:de:d1:50:52:de:8d:dc:be:f1:
40:6b:45:e1:0d:bd:a3:0c:7f:d3:11:50:43:79:60:4d:89:3f:
62:69:c6:c8:cc:e4:da:e7:22:e8:87:db:23:6b:dd:d9:32:da:
c9:6b:51:ca:87:8f:7d:80:bb:25:92:69:71:72:95:c1:f2:f4:
34:58:b7:e1:52:b3:0b:c4:bf:77:54:8d:bd:41:e1:ee:c7:23:
65:11:af:59:f8:2c:1b:f7:62:8a:e6:95:c9:f1:96:fe:76:14:
56:5f:33:9f:ff:d0:4d:49:dd:2e:e1:aa:3e:35:aa:e8:ac:38:
e5:46:2e:48:55:0a:37:d0:fd:a5:06:5b:99:a9:a5:d5:45:04:
0c:99:d7:f7:49:35:99:1f:0e:17:80:db:77:6f:73:cc:64:2e:
d9:49:d4:2d:cc:ec:ba:bf:20:e4:32:ba:ed:68:a2:e1:ed:f2:
72:86:12:97:ea:17:83:41:1e:c4:3d:24:6c:ba:06:54:d3:98:
c9:f8:71:e4:14:11:aa:c1:4d:b8:59:b6:44:6c:8e:18:00:39:
26:85:3e:d5:05:f7:f5:68:52:ae:42:43:b4:ef:2d:88:d2:37:
47:c5:a5:ba:3c:b3:9a:78:af:e3:89:81:03:2b:b4:bb:a9:28:
e4:24:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:43 2025 by rpki-client