Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa
File: 99c1ce01-1f7c-33d7-a936-a9f228586f15.roa (raw, json)
Hash identifier: 09AMLhuKYrbcb9SM/qSgYYDFgXVab/05eMWe8aS9V4Q=
Subject key identifier: 18:F2:2B:BA:2A:E6:39:E3:47:B5:07:7D:E4:F3:F3:A7:54:DB:1F:A9
Certificate issuer: /CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
Certificate serial: 010D0C9F432858485E35B809CA9C44B1BE0EB190
Authority key identifier: 69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 4785
IP address blocks: 167.88.182.0/24 maxlen: 24
167.88.183.0/24 maxlen: 24
167.88.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b8:09:ca:9c:44:b1:be:0e:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=1a2f55ff-9250-42fa-8e11-e0275e09ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:87:be:6a:9e:55:12:5e:15:9d:74:dd:a0:
88:a5:76:db:30:b4:c6:4a:ec:b8:5d:64:38:53:51:
e7:11:99:c0:24:b4:4a:f0:a0:20:ac:c1:33:c9:65:
36:f0:f4:dd:64:ad:fd:b7:68:34:f6:79:2b:5f:86:
bd:f4:4b:32:8e:ba:ab:3d:f4:f8:be:77:0b:5f:7d:
e4:2c:9e:a3:01:ae:70:66:19:0a:45:6f:8c:01:0d:
cb:83:49:75:96:7d:1e:88:81:98:a1:a7:f8:00:a6:
15:54:ad:26:72:5b:9d:13:52:6d:5c:68:c4:ac:34:
77:47:a8:40:59:4b:39:05:1c:60:3e:41:57:b3:b4:
71:cc:ac:77:33:89:49:9c:79:81:7a:8e:b2:d6:6c:
64:c1:bf:24:81:f1:8b:0e:47:26:56:5a:63:2c:c8:
90:d4:f8:3f:ca:07:d8:56:1d:dd:f9:4d:d3:54:a4:
23:1a:16:5a:ee:20:7f:8d:24:fe:4d:ad:ed:3a:e4:
22:9d:0c:1f:0d:3a:cd:84:dc:0a:50:02:c1:ec:d0:
5d:b1:16:fb:0f:6f:a9:43:bd:d8:d0:f1:a8:24:d2:
1c:f1:02:7f:4e:ff:3c:be:7f:df:32:05:c6:8a:23:
63:80:dd:16:8f:0f:0e:6e:64:05:d6:b1:7d:6f:b1:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:2B:BA:2A:E6:39:E3:47:B5:07:7D:E4:F3:F3:A7:54:DB:1F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl
X509v3 Authority Key Identifier:
keyid:69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.182.0-167.88.184.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e1:6d:a4:54:ad:ab:9d:1a:97:23:c2:4c:fd:c5:29:8e:5d:
16:b1:80:99:93:6b:7e:92:24:ad:bc:b5:be:d5:b7:13:d1:c3:
1e:a4:07:68:45:c8:9f:00:3c:f3:fb:de:1b:bb:e6:f0:b0:86:
00:69:81:5f:a4:5e:01:f2:e5:21:ef:59:c2:a5:d8:af:2d:4c:
40:1e:19:ea:1a:e9:42:d8:d6:cb:1a:64:82:d6:67:d6:06:7c:
2b:80:52:cd:d0:9d:61:85:8e:de:72:d9:e7:63:2d:6e:e3:8f:
bc:74:e9:71:41:51:6a:38:cc:be:c5:b3:fd:ad:e0:38:42:fc:
49:c7:c7:d4:6d:af:29:44:a2:04:15:be:dc:cd:24:07:ab:76:
a1:29:ab:54:a0:42:ce:b4:7a:b2:26:e7:a4:c3:a5:e2:93:8e:
8e:3c:ae:4a:1e:0e:f3:15:d7:5a:68:13:4a:eb:d0:9d:4c:c6:
74:51:1f:4c:73:27:6d:d7:45:67:e6:1f:5f:3a:ed:cb:ff:8d:
3f:29:06:44:17:6f:86:28:ab:00:1c:97:d5:46:d7:ad:75:02:
ac:9d:1a:89:c2:84:31:35:32:13:37:c6:d1:d8:f1:c0:58:d0:
2d:18:f7:a0:e3:fa:5c:ec:f9:36:bf:b9:e0:49:36:5c:1f:c2:
15:63:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:42 2025 by rpki-client