Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa
File: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json)
Hash identifier: pWWF/rO2ZTmOoaaSNYK57RlPDj8CCyab5cLnSBU/vpk=
Subject key identifier: 27:99:AA:A0:1A:89:E0:13:FB:C8:48:48:10:67:F7:E4:6C:D6:1B:50
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F43285848573ACE677AF18FCB6217E800
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398210
IP address blocks: 168.220.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:ce:67:7a:f1:8f:cb:62:17:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=f100d2c9-59b9-4da1-98ff-3448b273481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:fd:ba:f9:f8:df:45:27:52:34:12:35:3e:
ba:b5:9c:ad:89:64:72:35:9a:5b:67:ab:a2:db:03:
e0:0a:c5:80:70:d4:d5:06:ab:d9:a5:47:b2:2a:ab:
87:6f:40:67:e8:34:87:e3:4d:9b:6f:d5:a5:a7:06:
e3:bd:31:bc:fc:91:9a:12:50:9b:9f:b4:e1:d0:b4:
ba:2c:d4:b2:f1:d7:bc:9e:34:63:81:4b:58:41:b4:
df:d7:76:ae:57:13:81:7b:83:42:61:ec:02:d4:80:
7b:d0:65:a2:b7:70:98:67:09:26:7b:6e:ca:f0:11:
92:2d:0b:20:1d:08:8d:33:d3:54:0f:75:8c:dd:63:
fa:6e:5e:07:d3:60:d0:c5:f8:22:d1:9b:56:d8:34:
b4:c4:32:d8:ca:8f:c3:76:35:c3:9c:06:60:6e:df:
a4:31:d2:80:3d:32:8c:0d:c2:cc:a7:4a:ac:d0:cf:
69:b9:15:05:d3:dd:2b:3a:32:f0:de:e3:20:75:60:
5d:e1:e5:84:f9:21:d3:45:d0:80:e3:83:8c:9b:39:
45:70:a6:5e:b2:6d:b7:97:70:0c:d8:26:c6:28:a5:
2e:2a:5a:3f:ef:c3:73:36:48:51:f1:f6:09:b6:70:
a4:e3:de:27:c7:21:f5:e9:2a:16:9c:76:ae:1c:f2:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:AA:A0:1A:89:E0:13:FB:C8:48:48:10:67:F7:E4:6C:D6:1B:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d8:d4:ff:83:f3:69:d8:fe:10:01:f7:16:71:86:2f:37:ea:
ec:dc:df:57:22:de:4b:99:15:01:89:ef:35:6b:d4:13:23:34:
46:c7:c5:47:08:45:bc:30:0a:a3:7c:f7:ac:4a:20:94:74:25:
87:98:62:4a:8d:b6:59:d4:86:b4:04:de:ae:ae:c5:3c:6e:17:
19:8c:d1:2a:28:09:6f:52:c6:82:4f:bb:3b:be:f7:ab:14:76:
52:4b:a1:12:b7:05:ff:f3:de:88:82:dc:bd:90:78:66:2a:70:
b3:fc:b1:48:2e:93:8f:05:5f:5d:3b:6c:5f:5c:b9:e5:6d:e2:
2d:ee:84:9d:cc:a8:64:58:e7:60:9f:35:6b:d9:85:10:53:d3:
c7:4d:5c:09:ca:4a:d9:a4:2d:3c:a2:62:17:4d:da:61:e6:79:
d3:e7:0e:e5:c3:35:74:0f:53:58:c9:84:29:f6:e2:0c:18:ca:
85:4e:63:73:27:ee:3d:df:48:b1:ab:d2:5e:05:c2:e1:5a:cf:
35:08:fa:94:cf:f2:19:74:92:b1:37:19:e6:ad:84:44:45:8b:
fc:f6:d3:6a:ec:bf:86:5d:be:29:5c:96:35:be:ee:44:78:0d:
2e:fa:98:60:09:72:d4:ca:36:47:15:a2:63:73:e3:24:aa:46:
cb:02:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:53 2025 by rpki-client