Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
File: fc8a04a9-488c-3924-8f7b-3da391e956ef.roa (raw, json)
Hash identifier: BhjFd9E51j0qI0oswt+GSlzrbIAyfv1wyE+tG6KT2Sc=
Subject key identifier: DB:9D:6E:67:78:F4:2A:21:96:1F:09:07:42:54:FD:38:10:E7:EC:15
Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial: 010D0C9F4328584832F02AD25CBD0E09E5066170
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 20454
IP address blocks: 69.160.44.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2a:d2:5c:bd:0e:09:e5:06:61:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=38defccd-35fb-4daf-a116-76e5c28681fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:1b:90:8b:17:a5:9f:09:08:db:74:49:21:
23:b2:65:bb:81:d2:79:cd:76:40:61:34:b8:b3:35:
4f:96:d8:ec:6b:70:57:46:63:9a:9c:ba:e6:5e:66:
18:f3:94:a9:0e:8b:24:67:e4:b8:a1:56:d3:8d:ce:
9b:a0:2b:e0:d5:85:a4:a7:3e:a1:de:23:47:2d:41:
45:66:63:b5:ba:fe:ea:5b:e3:ec:c0:43:ba:34:96:
e4:38:6a:49:28:c3:9a:4c:da:f4:96:5b:20:a4:00:
d1:3e:7c:d9:b1:1c:a4:0a:26:0e:94:c0:34:59:68:
ea:48:8d:04:8b:b7:a3:70:4b:c5:72:c5:64:64:b6:
63:5e:ff:18:cb:0b:64:1a:14:dc:81:76:87:a8:85:
e5:f3:48:b1:50:4d:ca:f7:7c:4a:4a:aa:91:3b:6f:
29:68:b0:fa:e9:dd:b5:7f:2f:cb:45:f3:41:16:fc:
3a:f4:d4:77:c9:30:7d:2a:33:a2:d3:f5:9f:9c:48:
70:1c:5a:52:29:16:4f:08:41:3c:84:dc:93:28:eb:
9d:48:ac:78:38:43:1f:e0:06:e3:65:73:ed:da:53:
e0:1e:5a:65:fe:3d:d1:97:ae:89:c2:1f:d2:9a:45:
44:4a:5b:09:d1:1c:57:70:cb:49:f4:d3:b3:81:f4:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:6E:67:78:F4:2A:21:96:1F:09:07:42:54:FD:38:10:E7:EC:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
X509v3 Authority Key Identifier:
keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
sbgp-ipAddrBlock: critical
IPv4:
69.160.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b0:fc:b5:98:3f:ec:6b:f4:ee:8c:5b:99:2b:fd:61:53:9d:
a6:f8:27:9c:03:10:ab:1b:26:3e:c4:d1:44:f1:62:6a:57:f2:
69:72:98:5e:82:0c:0f:ec:55:de:e4:9b:96:7b:09:24:43:37:
b3:73:96:db:27:23:df:1b:78:e1:f7:14:61:b1:52:72:e1:5e:
2c:57:04:d1:f4:a2:21:31:b4:58:88:31:bc:9e:5c:aa:ba:0e:
e9:ad:c9:99:96:c2:a1:88:42:3d:dd:72:3c:de:23:75:57:2c:
22:fc:df:f3:50:d5:ad:f9:8f:c7:28:6b:0b:fd:4a:10:f0:eb:
43:7d:41:c0:c8:c9:22:62:0d:b3:15:2a:89:72:98:42:0d:cd:
a2:75:06:63:0d:34:38:ff:2d:88:d9:34:9e:2f:c9:65:82:52:
ea:a0:34:d1:a5:ca:00:0d:1e:cf:78:57:ad:cf:10:2d:c8:52:
e1:b6:24:3d:e7:31:df:0c:40:ab:ef:a7:05:a4:b4:6e:7b:ba:
55:dd:90:af:35:84:59:bc:54:0f:12:34:3b:b3:bc:9e:e8:35:
e3:c9:1e:b7:a5:6e:cb:82:46:f6:c6:1f:f9:28:0b:e2:90:d8:
88:42:86:4c:19:8a:58:fb:e8:89:14:b3:90:1a:55:b7:9e:2c:
bb:0b:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:54:41 2025 by rpki-client