Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa
File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json)
Hash identifier: JofyU0OlygU5qQLJ8bBUOn6FymPZ+zS1EyMpJJ2CwvY=
Subject key identifier: 70:30:A0:D5:28:09:BE:B5:57:6C:4C:51:7B:C5:3F:9E:3D:DA:C0:22
Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial: 010D0C9F432858489A3B4357FFD2B62E80489D80
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 7018
IP address blocks: 167.253.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:43:57:ff:d2:b6:2e:80:48:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=f2452e7c-1f72-434b-ae58-98566e647396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:9a:45:35:79:61:55:2d:7e:d1:24:0a:0d:
c3:6d:af:89:56:ba:fa:c4:8d:6f:c0:0d:30:b0:0a:
5b:ba:35:7f:31:d0:7c:56:61:7c:de:31:fb:a2:bd:
36:00:72:12:6b:35:54:f0:b8:dd:05:b1:75:c5:64:
0f:6b:97:7f:d8:8f:76:77:70:00:12:64:1e:40:40:
bf:18:d1:86:b2:f6:e8:7d:82:1c:2d:ba:e5:01:2d:
06:7b:50:90:4a:59:9c:d1:75:5a:13:60:d9:3e:aa:
16:05:3c:71:89:30:38:6e:09:e3:17:0e:47:f9:be:
c7:b1:75:8a:a7:d2:cb:5d:07:bc:ba:ff:bf:97:17:
64:d2:7f:4f:2b:5a:2e:6f:11:8c:72:63:99:80:8b:
98:5f:e1:2f:0a:f0:e6:a1:43:c0:e5:4c:77:d1:67:
f5:99:a1:c0:b8:4c:ae:ad:5b:3d:b5:06:a0:88:ee:
29:66:6c:98:c1:70:4a:81:d9:b6:65:01:e4:15:fb:
8f:96:ca:c6:dc:c7:1d:10:76:08:a9:e6:dc:bc:c5:
66:52:fa:b9:7f:74:81:6c:4b:bc:d2:d7:97:11:d8:
01:ca:c0:82:77:d8:ba:42:98:a0:8b:70:f1:0e:a3:
f0:93:73:d0:9c:95:3e:de:4c:ee:45:9c:83:8c:b7:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:A0:D5:28:09:BE:B5:57:6C:4C:51:7B:C5:3F:9E:3D:DA:C0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
X509v3 Authority Key Identifier:
keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:a0:c6:1d:6d:b9:f5:1c:36:26:47:f6:28:7c:7b:18:ca:6a:
08:1c:5e:f3:ab:63:88:2c:dd:87:33:dd:69:db:86:89:4b:04:
d7:5c:59:c4:80:ad:46:90:bd:00:a6:17:01:b6:18:78:6c:2c:
67:bd:50:17:18:94:c1:0b:fd:45:dd:8c:c4:ff:eb:c3:3c:1d:
f1:41:1a:2e:be:48:bb:e8:62:cb:dc:b0:d4:4c:42:c2:01:02:
e4:0c:7d:41:ae:f4:45:8f:dc:e5:62:bc:fc:2f:c3:ba:15:5a:
d2:6c:5a:38:25:c4:df:b4:44:74:bb:d9:90:64:05:26:c7:a3:
c7:df:a0:59:91:f7:c7:f1:0c:b0:0b:67:8a:33:a7:40:49:a4:
b4:a5:86:26:33:f9:80:40:62:d4:f4:c1:60:16:9b:86:8a:13:
0d:57:9f:33:74:5b:fc:68:61:f7:16:25:63:10:fa:52:42:d9:
3a:a7:47:74:2f:29:06:17:d7:64:1a:bf:a6:57:0c:9c:2a:9c:
af:76:ee:19:ba:0b:79:9a:dc:1b:23:7c:c2:68:f9:d3:d8:c4:
72:f3:f3:a9:ae:aa:91:c3:10:03:c7:ad:35:15:99:01:ef:1c:
64:db:a6:00:2d:f7:8d:c1:36:df:0d:1d:cc:6a:c9:dc:cf:72:
3d:5f:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:24 2025 by rpki-client