Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
File: f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa (raw, json)
Hash identifier: lGg2zYbWci5KV9OOmrkxoLR6dOEwOIAlHyIf0iRlyik=
Subject key identifier: AE:F3:3D:CA:BA:08:9E:BF:5E:FF:FE:CE:AA:2C:17:CA:FA:6E:C5:B1
Certificate issuer: /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial: 010D0C9F432858482BF554CCF9684334BF9D12C0
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 40328
IP address blocks: 162.249.96.0/21 maxlen: 21
162.249.98.0/23 maxlen: 23
162.249.100.0/23 maxlen: 23
162.249.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:54:cc:f9:68:43:34:bf:9d:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=229e806b-a1de-41e4-8a10-eeb814b6f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:28:44:9a:04:0d:f4:ef:ae:4c:e4:92:6e:
ce:79:4f:f0:7a:9c:91:bf:06:ad:32:ab:49:d5:29:
7e:e4:89:69:8e:ca:82:92:56:7d:47:a8:bb:3d:09:
a9:c2:35:fb:4b:92:7d:70:6d:9d:e2:48:9d:64:a9:
4b:c8:f2:1d:aa:dd:ea:47:c6:29:cf:47:4b:e1:e2:
2f:30:97:c4:35:4a:64:0a:17:f4:2e:94:7b:9b:14:
37:1e:ab:d9:6f:b3:c3:8f:22:0b:9a:ed:6c:7c:f3:
a4:c7:ae:0c:8c:ca:ba:84:42:34:16:3c:53:22:a8:
ec:28:a4:85:24:36:d6:ff:ae:97:2f:07:3e:3e:9b:
d5:74:95:39:89:6f:eb:33:b4:63:5a:fd:b9:f5:10:
f6:3b:ff:53:eb:35:32:d6:f7:55:e2:ea:f5:6b:ab:
29:6b:ba:52:99:03:5f:f0:dd:98:00:02:ef:c3:cf:
a1:7f:59:3e:6b:a0:a9:dd:96:8f:43:2b:6e:33:e9:
d8:1d:fe:94:5c:f3:59:a9:42:75:e5:4c:36:7a:26:
cd:33:4b:99:db:e3:81:13:a8:b9:d7:99:56:84:0b:
e2:5e:f9:20:16:d9:3d:f1:f0:81:e0:15:23:dc:d2:
7a:99:34:0d:46:ca:8d:2d:72:1b:e1:17:01:32:c0:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:3D:CA:BA:08:9E:BF:5E:FF:FE:CE:AA:2C:17:CA:FA:6E:C5:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
X509v3 Authority Key Identifier:
keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:42:21:e4:6b:d6:53:3b:98:41:93:70:29:a0:69:de:13:68:
77:fc:9d:b2:c6:db:34:4a:98:d4:85:7a:ea:62:7a:8b:ae:10:
ac:c3:5c:6b:6c:b5:7c:09:4a:06:25:ce:f3:36:d2:fc:bb:10:
8e:4b:42:a7:24:a9:52:7d:9d:22:52:dd:9d:9b:5e:53:73:7c:
f1:07:2b:d2:73:58:0e:7d:33:c6:f4:bd:c9:24:95:af:16:db:
97:74:bb:67:08:a9:47:e4:f3:c0:5c:5f:a9:f6:b7:c7:74:18:
b7:f0:bb:a0:0e:60:f1:c6:9f:36:b6:b8:16:1e:42:4d:40:ed:
62:3a:b8:31:f3:c4:09:63:f9:84:05:f5:c3:27:ae:8b:6c:f7:
98:d8:3c:0e:7c:7c:35:8f:c1:97:24:b8:0c:cb:c8:9d:19:2f:
59:6c:12:e0:e7:7e:fd:52:c6:5f:73:20:cb:2a:fc:89:ee:72:
70:85:c4:01:a7:dd:31:2c:05:47:a0:6b:8b:c1:f0:0b:fe:83:
c0:32:ae:31:a0:f6:02:39:84:fc:84:1b:9a:0c:9c:fc:9a:2c:
15:cf:ac:a5:c4:44:06:4a:a0:88:6c:7b:2e:71:c2:c1:7b:85:
69:4b:95:06:f8:6d:41:fc:d0:d5:93:50:96:0d:2c:98:90:81:
24:83:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:03 2025 by rpki-client