Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa
File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json)
Hash identifier: FgpqTmCAFubo+dLmZWgEemX+5YkSrhGS+pSo/tDikEE=
Subject key identifier: B0:2C:96:EF:54:A1:CF:83:DC:99:A1:76:F0:0B:CF:F6:E5:AA:25:5A
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F43285848573ACF01F61329358A1C2C40
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398210
IP address blocks: 168.220.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:cf:01:f6:13:29:35:8a:1c:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=6aa39379-d35c-4a88-80a7-1c2f3a7e7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:5e:e3:45:5f:5b:c6:30:7d:49:d2:a1:ab:
f0:a5:37:33:11:2a:dc:d6:ff:f7:59:58:54:f8:05:
fa:dc:9d:0c:c4:32:9b:88:d4:60:e1:49:0f:7d:0d:
a2:53:a0:33:00:bd:a9:18:ca:4d:52:04:28:e4:71:
ed:45:94:fd:62:88:bd:78:43:8d:3d:ee:f4:09:68:
69:c9:f2:b6:b5:6d:b2:7a:40:1d:aa:af:6f:ab:56:
ab:22:54:63:55:3c:5a:97:20:cd:5c:74:b0:2a:52:
a6:23:b1:aa:ae:66:11:53:a1:b5:ef:ea:f5:87:55:
16:e5:11:f7:9e:87:a1:1a:87:8b:62:c6:19:11:1f:
07:bb:a1:09:49:be:75:2c:75:4b:2f:72:5f:72:78:
6a:50:14:6e:0a:88:92:57:c6:f3:cc:a0:fc:f1:ae:
65:82:a2:fd:bf:f0:12:c2:df:02:3d:8c:65:45:3c:
d6:c8:62:8a:8f:c3:9e:98:95:3e:22:a1:97:c0:38:
f0:8d:ab:67:98:9e:98:73:5d:30:3f:6d:4e:1d:00:
42:ef:e3:17:28:99:fe:58:14:2b:10:63:7c:e5:75:
a7:ee:c4:f7:5a:72:bb:7f:06:b9:66:ac:43:64:73:
71:1c:ff:86:73:08:61:6d:7f:27:08:f2:c5:e7:cc:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:96:EF:54:A1:CF:83:DC:99:A1:76:F0:0B:CF:F6:E5:AA:25:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:49:4a:9f:8e:46:85:af:6f:c8:d5:b6:d2:08:7d:79:33:df:
e8:b5:21:3f:fe:68:0e:d1:44:cf:d2:0f:7e:dc:74:d6:1b:02:
f2:5d:ac:36:d5:e9:56:58:2f:17:a4:85:90:eb:09:72:0a:b8:
b2:33:29:c9:c5:0d:10:ec:69:ba:ba:0d:1b:d8:e0:d1:62:21:
07:8f:9f:2e:38:82:02:ed:44:4b:4a:59:f9:1a:37:da:9d:e2:
20:cc:db:c9:86:49:08:b0:db:bf:1a:bd:88:e9:08:3a:9a:65:
6d:4a:83:91:95:64:30:a3:e9:5b:b9:b0:98:46:2c:27:81:ce:
ca:28:dd:b7:84:d7:48:3d:5c:ac:e6:b3:bb:ed:fe:95:15:50:
72:61:68:63:00:24:53:37:56:22:78:72:7d:9f:55:f7:11:6b:
53:d7:12:8b:81:ed:75:72:e2:85:ab:5d:4c:a6:fa:8e:02:17:
61:17:15:2a:1e:10:3b:af:c5:a4:1a:65:e4:6d:ef:b8:5b:4f:
69:c9:47:de:8d:2c:c2:3a:49:b1:7d:42:21:2b:30:6a:b7:82:
52:bc:11:c8:2c:f0:7e:c3:25:45:c8:79:42:b5:bd:a8:2a:75:
58:fa:bd:c2:17:1e:96:57:4b:c3:a1:7d:74:89:b1:49:15:c1:
13:97:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:41:10 2025 by rpki-client