Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa
File: a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa (raw, json)
Hash identifier: 0mr0/HaSVflYf4i7pUTQBTJ3/lyHzf/LnPkkd6bbc1g=
Subject key identifier: F3:A0:38:55:6F:7B:E7:F8:85:C2:88:53:4A:89:77:49:41:06:0F:20
Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial: 010D0C9F4328584832F02630D07AE6C389994480
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 20454
IP address blocks: 69.160.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:26:30:d0:7a:e6:c3:89:99:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4f1503b8-c8ff-4602-be09-f3355eae0a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:fa:c5:75:66:37:de:44:13:c2:93:7c:94:
f0:c7:7d:d9:ad:47:41:3a:6f:96:3e:b6:c9:51:b9:
99:2c:db:27:d1:85:0b:ab:e4:59:9f:35:97:17:8b:
a2:74:d5:a3:48:b0:b2:a4:2b:bf:d5:84:45:3d:5f:
60:82:61:af:cf:ed:b9:36:88:e7:2a:12:44:34:4a:
95:ca:a9:26:a5:f0:64:db:b9:9f:d7:3b:a7:76:c1:
76:fd:e0:08:57:6b:90:df:c3:a7:9a:16:52:6f:ee:
28:3e:59:cf:0f:cd:da:98:e4:a7:b0:e7:ed:bf:b1:
95:97:94:86:cb:58:6f:6e:c3:dd:98:f5:90:d0:8d:
52:f2:ee:a6:36:ff:23:78:55:c5:f8:d0:8e:9b:64:
36:b6:88:1f:43:30:f0:e6:87:92:bd:1a:f8:46:46:
36:f4:a2:b4:64:ef:bb:f9:6b:a7:c1:0f:74:5b:43:
81:c5:aa:ed:b5:af:00:4a:2b:f4:ec:e3:ed:3d:b2:
13:03:03:69:27:16:6c:8e:02:f2:bb:55:3f:98:f8:
b3:75:60:7b:13:65:2c:dd:86:c2:8c:20:59:39:44:
00:b4:69:ca:b7:ce:a9:fe:c3:62:d1:42:94:ac:10:
4d:ef:a1:41:47:8f:b2:da:47:02:af:97:d7:af:11:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:38:55:6F:7B:E7:F8:85:C2:88:53:4A:89:77:49:41:06:0F:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
X509v3 Authority Key Identifier:
keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
sbgp-ipAddrBlock: critical
IPv4:
69.160.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:53:21:2a:90:24:1d:af:d5:39:fb:5b:49:d8:f7:c1:70:90:
e6:52:aa:05:26:63:27:44:8d:34:4f:d7:3d:05:99:a3:6a:5a:
c2:0a:7a:aa:23:93:e5:ce:cb:ad:83:43:ef:69:ac:f5:bc:a1:
e6:aa:39:92:f9:da:b1:81:b8:69:94:9f:38:15:3c:34:4a:15:
b4:df:dd:ad:0e:54:14:7c:0f:b7:ff:0c:83:23:67:84:4c:8d:
bd:e1:2c:cd:bd:a5:56:81:ba:d5:81:36:01:93:34:fd:30:a7:
34:78:32:ff:3b:02:b9:8d:4b:4a:33:ed:7b:cc:e7:f4:b7:10:
f3:d2:a0:f7:6d:74:26:9a:10:70:92:f4:58:ba:34:d3:54:e4:
a2:0b:bd:f3:74:2a:62:0a:16:7d:93:69:4d:bb:51:87:f1:76:
60:6f:ef:34:4d:38:2e:93:8a:39:7e:94:3a:33:9a:07:97:35:
32:45:28:0a:31:db:a6:2b:20:00:84:31:f5:de:a8:8e:9f:09:
c7:5f:13:1b:86:4d:0b:16:81:30:e8:e5:1c:3c:f5:c6:2e:e9:
72:b8:13:8a:b5:71:cb:99:a8:23:0f:bf:28:40:fc:47:92:50:
a8:23:f2:6d:d2:1e:fb:97:d7:e8:1f:3c:05:47:5f:24:d6:32:
f4:ad:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:18 2025 by rpki-client