Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
File: 4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa (raw, json)
Hash identifier: 1OXDet4OkCFqoidhyUfjHdPj7FLhEg9X2qx4d3+ag/o=
Subject key identifier: 69:B7:CC:64:60:E7:D9:12:B6:D9:A3:60:15:3A:84:EC:66:3C:F2:36
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F432858485B6AF9ACD21D6A34B8711B20
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 396982
IP address blocks: 162.240.198.0/24 maxlen: 24
162.240.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f9:ac:d2:1d:6a:34:b8:71:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=94e67dfd-e07b-4e1b-bc69-430291bb4dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:aa:25:c6:12:88:79:d2:3e:74:2b:54:e9:
f0:8f:fa:ee:2d:ec:bf:17:71:92:ff:f4:04:2e:d7:
76:8a:53:cd:23:e5:9d:4c:94:52:fa:c4:3d:5d:b0:
b9:99:2a:18:bb:56:6a:3f:be:95:a8:ef:23:25:c1:
a1:fd:19:8f:0a:9f:17:2f:e4:ac:db:a1:16:13:aa:
79:37:67:be:72:51:73:3f:0e:36:2f:9c:a3:52:ed:
62:52:ab:7b:87:0e:ec:17:d6:30:8d:6b:4e:11:4f:
b2:62:95:12:65:aa:ce:0e:fd:2f:68:1a:b8:4e:2f:
64:e1:c2:c5:19:de:f5:ef:0c:01:c1:c5:b3:2a:be:
4e:d6:83:bf:a5:e9:3a:ad:2f:ab:5d:7f:08:0f:fe:
7e:78:c9:49:15:3c:52:9c:53:69:34:64:99:f2:fc:
3f:89:08:db:b5:6a:23:6f:b6:ca:e8:fa:82:2e:6f:
aa:b4:32:be:48:89:a8:57:c2:86:ed:64:a6:f4:ac:
eb:ec:44:cf:45:77:17:a8:ef:a2:61:47:b6:38:51:
76:f4:6a:a1:bf:5e:18:7e:08:27:92:f5:15:80:3c:
6f:c4:95:da:9e:4c:74:6d:f1:fe:3e:29:8c:c7:cd:
81:c5:96:d4:d7:5c:eb:91:62:e1:c6:90:c6:73:c5:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:CC:64:60:E7:D9:12:B6:D9:A3:60:15:3A:84:EC:66:3C:F2:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.240.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:8b:3e:6f:4f:51:f4:96:65:03:31:c8:cd:7e:23:02:f5:dd:
79:50:ab:ee:13:e0:0c:43:ca:a3:aa:b4:30:3c:05:9f:1d:47:
b4:36:61:6b:56:af:81:4a:91:9b:f4:5a:c0:5f:48:36:3b:13:
aa:9d:58:b1:ad:99:ef:8e:71:2f:d6:59:d9:d6:4b:74:fb:9b:
3f:82:c0:38:1d:cb:4f:22:53:f5:61:c2:85:53:9f:6c:50:1c:
78:b8:64:28:5b:6f:9c:73:29:4e:09:c7:d1:d4:0d:7f:a1:e9:
58:5c:8d:3f:9b:c6:5f:64:45:ed:80:52:70:81:ed:c3:97:ee:
fe:c0:e8:41:76:08:95:c0:ef:a5:23:29:dc:cb:bc:b4:06:49:
f7:6e:62:5c:6d:9a:2b:99:18:99:df:1c:c3:2e:70:c2:b5:b6:
b5:07:3f:41:d8:10:bf:f4:90:0c:30:4b:66:58:ae:c5:a0:c0:
22:9f:bf:3a:4b:c5:e1:5c:6a:e6:e4:cb:13:a3:34:ba:6a:7a:
e8:b2:f4:fd:98:d5:7d:1f:f8:d2:86:1d:22:20:ed:ad:aa:40:
3b:20:d6:8a:c0:30:8b:0e:86:be:1b:97:be:74:81:6d:af:65:
8a:9a:4f:47:2e:f5:0b:14:77:c5:4d:d2:56:72:c6:25:5a:81:
52:86:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:17 2025 by rpki-client