Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
File: c1f707e3-581b-3a11-8a60-245b52060e4b.roa (raw, json)
Hash identifier: xIzYvaRZHlRysF+080WoFxgAOl+ege7xq5+XCDTEj/4=
Subject key identifier: D3:0B:66:12:07:66:A0:F0:66:71:E1:86:C3:BA:A3:7B:18:C6:3F:94
Certificate issuer: /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial: 010D0C9F43285848222FE566EF952D1C9D4B1D00
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 399989
IP address blocks: 128.254.164.0/22 maxlen: 22
128.254.164.0/24 maxlen: 24
128.254.165.0/24 maxlen: 24
128.254.166.0/24 maxlen: 24
128.254.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e5:66:ef:95:2d:1c:9d:4b:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=40edb7a7-94b3-48b6-b852-301c00bf1adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:a0:29:c7:4b:83:08:7c:80:c2:38:3a:3c:
70:38:67:ef:0d:5f:96:72:09:18:02:64:8f:ef:50:
a9:15:b5:57:4a:68:5c:52:04:a1:e4:24:9a:02:e7:
ce:9b:0b:e6:b2:de:4c:f5:ca:2f:aa:d9:d7:ef:31:
8d:5a:cf:2c:c8:1e:f4:8e:93:04:db:c4:86:26:51:
96:c6:d4:1b:fd:f1:bc:8b:e2:40:f5:ac:0f:2b:13:
63:bd:45:72:5b:1f:c2:8a:28:28:0c:69:a7:66:85:
c8:56:09:1a:55:0f:bb:26:29:69:70:9f:b4:b6:d4:
27:84:46:39:64:3f:74:ea:ec:06:e3:63:74:58:d2:
c6:95:42:d4:8e:c3:4f:5a:68:1c:5c:f8:aa:31:fa:
51:4f:c1:c5:38:13:50:0f:b4:25:47:aa:14:18:4b:
4e:f0:f2:ef:30:66:27:70:35:91:87:95:a3:73:bd:
e0:9d:9c:5a:3c:bd:38:83:6f:a1:aa:24:1c:54:f9:
30:72:0a:91:b9:98:6c:0e:8d:9e:80:ff:9f:2d:37:
cc:ea:b2:d9:1a:90:50:d9:8b:be:fb:0f:0d:92:ae:
08:6f:91:dd:80:14:ff:0e:dc:91:17:bb:5e:eb:6f:
b0:2a:83:e4:af:81:34:77:9c:c3:0a:7a:c1:f9:60:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0B:66:12:07:66:A0:F0:66:71:E1:86:C3:BA:A3:7B:18:C6:3F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
X509v3 Authority Key Identifier:
keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:9b:69:db:b2:2b:8d:00:54:af:a9:78:88:ad:2e:53:22:45:
24:32:e1:06:d3:ed:de:c1:c4:42:4f:f1:3b:9d:38:4b:1f:6e:
9f:5d:4a:f3:55:8d:01:1f:10:9f:f0:b5:be:4b:e4:1f:14:91:
61:fd:1a:36:c8:31:f0:27:fb:b8:ce:e0:e3:83:fd:21:4e:49:
d1:99:45:75:dd:6f:7a:ff:d3:4b:3b:5b:71:06:02:a3:6f:c9:
be:1e:6f:15:74:62:e3:52:49:b4:95:9d:47:c7:4c:73:27:ed:
a7:e2:87:a2:9f:a8:75:76:f5:94:fa:15:d4:e4:5b:17:aa:3a:
ca:4d:9f:01:0b:73:67:58:85:27:1d:5f:00:b0:03:f9:a3:4b:
b4:76:ff:eb:b9:93:d6:95:2a:01:5e:13:15:ad:a7:5f:1f:0b:
d0:ef:d9:5f:f2:78:e7:c2:d8:38:2e:79:b7:1d:b5:ff:8f:39:
90:2c:34:ce:f5:ae:c5:a1:d7:5c:44:96:6d:92:9b:45:d2:fc:
71:69:b1:b6:65:e8:f6:cb:39:d0:e0:c4:c7:ee:94:83:56:a0:
c9:72:36:8f:41:8d:a3:bc:74:e6:a8:cc:33:35:26:d1:ec:09:
23:8e:58:65:33:fb:9e:9e:43:3d:9d:2b:6f:9d:df:bf:d1:b0:
86:24:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:58 2025 by rpki-client