Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
File: be09a816-d29f-3e79-9a61-fb2365366592.roa (raw, json)
Hash identifier: XnvYLtuS3GYL217QuPbjvN21UYy9ARB+fp8xqBWSxVU=
Subject key identifier: 3C:44:5D:07:AB:FB:91:E0:1E:C0:9D:F0:1D:59:35:45:F1:20:74:F9
Certificate issuer: /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial: 010D0C9F43285848451572E1FB66E407B4E9E280
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 401048
IP address blocks: 162.252.170.0/23 maxlen: 24
2606:fe80:20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:72:e1:fb:66:e4:07:b4:e9:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fcc77d36-2254-4fcc-b8d3-4e58b3a520dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:12:21:c0:37:a5:02:6e:38:db:ed:ff:0e:
4d:90:70:3c:28:e6:ef:f1:81:68:d7:1e:62:e1:c2:
b9:da:93:8c:9b:86:47:a4:51:c3:b5:19:58:61:95:
29:88:e8:5d:80:4d:aa:9c:39:2a:89:85:e3:be:19:
4f:d2:30:6e:96:d6:f2:4d:16:15:f8:9a:c2:96:5b:
f2:43:3f:ba:3f:1d:e1:a6:4b:80:95:1b:4c:bb:86:
97:5f:da:be:b2:f5:85:b7:86:0b:e8:8f:99:c0:c0:
cf:16:65:70:84:29:fd:bc:1c:6a:dd:1b:ab:07:3d:
71:2c:70:dc:49:20:c0:9f:50:73:5e:49:4d:95:c1:
4f:9b:c8:27:e9:1e:00:ba:05:f4:53:69:7d:73:9e:
7a:8b:9e:cc:17:d2:bc:fd:93:8d:9b:22:da:d1:7c:
51:c3:92:f4:c0:99:c0:5f:e7:85:60:f7:43:7b:5b:
58:d0:97:7f:e7:29:62:11:ea:58:2b:8e:00:8e:f6:
57:47:4e:1e:3b:9d:b1:b5:2a:b8:78:09:10:12:e6:
bd:fd:e7:22:ee:e5:23:cb:a2:00:02:61:96:a6:38:
56:89:8e:61:a9:b5:15:d8:2a:8d:4e:a8:a6:70:51:
c0:7a:53:80:2a:69:b4:8a:38:d4:29:0a:fe:56:26:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:44:5D:07:AB:FB:91:E0:1E:C0:9D:F0:1D:59:35:45:F1:20:74:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
X509v3 Authority Key Identifier:
keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.170.0/23
IPv6:
2606:fe80:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:df:4c:02:5a:2e:5b:2c:45:53:19:67:10:d2:6a:0f:1c:69:
1a:7b:ac:3e:ea:3b:ab:a1:4f:6f:11:ca:75:75:cd:35:7f:11:
49:9a:ba:6e:63:c0:ad:a0:4e:c3:ee:f9:e7:15:24:ce:90:14:
dc:82:2e:0a:0f:42:3a:ce:47:77:b4:f7:01:80:0c:d0:cf:bc:
b2:58:78:dc:d0:72:94:2d:67:7e:61:c2:5c:ae:97:08:35:c8:
3b:b5:69:95:87:bf:55:43:af:bb:8e:d0:d7:f9:ac:8b:87:c7:
85:80:c0:bf:fd:2f:c0:bb:ce:76:68:6d:3f:a2:2c:b0:6c:c7:
a5:34:59:71:42:b0:3e:c0:66:16:aa:bf:8b:c5:9a:2a:9f:d9:
6e:2b:a3:58:84:8c:b6:be:4e:5e:89:0d:15:78:77:82:dc:6c:
6a:ab:e4:59:6b:d3:8a:28:6c:47:6c:96:f1:1e:54:d5:04:47:
9d:3c:79:de:ce:d7:80:41:b0:5e:08:cc:4e:2f:ea:bf:c9:f6:
ad:42:5d:51:de:14:44:a3:f4:1f:61:3a:06:79:66:c4:ed:d8:
cf:94:fe:67:45:d5:e2:7a:59:36:13:a2:4e:54:31:32:85:a8:
42:ec:83:09:66:26:de:9d:0e:cc:e5:e2:66:ce:b4:33:70:98:
4d:b5:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:15 2025 by rpki-client