Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e5fb2fdf-0512-39bb-87ed-d02e1250e12b.roa
File: e5fb2fdf-0512-39bb-87ed-d02e1250e12b.roa (raw, json)
Hash identifier: nv2bCvWQKNx4SPFkUI8cZqe0pxeJ/G0h4lQ/aWnQ364=
Subject key identifier: 0A:89:F8:C3:AD:88:70:B3:10:E8:B2:D2:BC:BC:8F:3B:03:96:FC:B2
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848854B52E9BDFFF4CB7492D780
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e5fb2fdf-0512-39bb-87ed-d02e1250e12b.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 14877
IP address blocks: 162.223.16.0/24 maxlen: 24
162.223.17.0/24 maxlen: 24
162.223.18.0/24 maxlen: 24
162.223.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:52:e9:bd:ff:f4:cb:74:92:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=bab39537-61cd-4367-821a-8c941c8fda29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:56:1f:aa:65:d7:28:c9:dd:35:5a:17:f1:
ac:c1:1e:26:e3:05:a4:52:0b:9c:be:e1:2e:50:8a:
1d:3d:ab:45:a7:64:9b:09:d8:a8:57:39:39:9b:f3:
6c:52:6b:a7:88:24:1d:37:a6:e0:a2:a3:b4:f4:87:
68:2e:96:a4:d9:5e:38:8c:9f:0c:f5:37:da:91:aa:
a3:27:f7:2a:1c:75:b2:91:c9:92:a4:e8:8d:c9:53:
1b:13:5a:93:73:e1:84:43:0d:45:d5:63:a9:65:ee:
98:0d:ec:66:3f:f5:4e:f7:d6:e1:cb:09:a0:b3:e4:
36:bd:9f:e4:79:92:c6:7d:35:5e:a9:b1:77:78:fb:
0c:f1:6c:c6:87:58:e5:ba:46:23:f2:dd:f9:17:ce:
92:99:f8:6a:6a:3b:f8:22:07:28:73:69:73:a8:4b:
eb:c5:56:72:37:6b:bd:1b:9c:10:23:f6:df:b9:ac:
3b:ac:81:23:ce:00:ac:8e:8e:35:14:50:d0:bf:d3:
6e:15:8e:ff:d1:67:f3:b5:71:d3:e7:41:da:15:e9:
49:dd:b5:06:d3:26:e5:87:f0:bc:58:a9:76:3a:ee:
02:d9:ea:25:37:91:db:01:8a:94:ca:10:dd:c9:f7:
dd:de:41:79:d4:5a:23:7a:03:87:89:8e:8c:50:ed:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:F8:C3:AD:88:70:B3:10:E8:B2:D2:BC:BC:8F:3B:03:96:FC:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e5fb2fdf-0512-39bb-87ed-d02e1250e12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:b8:6f:04:a1:3a:83:52:37:42:58:34:e4:1b:1a:18:e5:dd:
73:3d:21:78:f3:85:92:67:9e:bf:97:8a:53:ce:b8:3a:fa:18:
0f:8c:f9:2d:11:cc:8d:01:1a:2f:16:e9:1a:5d:5a:8e:e5:b2:
75:3f:9c:02:3b:78:20:1a:3e:47:0c:f5:84:ed:32:71:5e:36:
be:88:b0:64:e8:03:18:b7:7b:f6:1e:17:ee:34:32:67:f1:12:
bf:29:36:2c:93:89:e4:5f:c6:67:09:8a:3c:ab:c2:14:37:79:
cc:74:ce:09:42:b5:88:74:c4:ec:df:5e:71:6a:ea:20:9b:92:
30:a3:1e:ed:d7:82:a1:f2:e2:20:14:fe:1c:fc:eb:8b:e1:70:
b3:eb:61:45:d7:40:c6:c4:42:7b:24:cf:35:b1:af:a5:91:16:
d0:ea:03:70:cd:c5:c7:3c:dd:7a:e8:6b:79:13:39:ae:12:d5:
f4:d3:5a:96:4c:db:cc:22:f3:fc:d3:ff:ae:47:aa:a5:b0:28:
a4:6c:ed:14:fe:63:45:22:c0:c3:ba:39:79:89:d5:dc:f6:e1:
f5:fb:de:1d:40:2c:66:f3:75:4b:5d:aa:21:c8:87:ea:30:bc:
73:1d:5c:b0:be:e2:ba:f6:d0:fa:5f:45:d3:0d:09:50:ce:d0:
b2:ab:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:46 2025 by rpki-client