Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa
File: 0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json)
Hash identifier: z8x5KXlRrClEy2n5zNARYrL28pwpBPURkbUDUclqASs=
Subject key identifier: F0:EA:A5:2B:15:3D:AF:FD:2E:E7:E4:B2:A6:C6:A6:27:E7:D2:99:46
Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial: 010D0C9F4328584845158C1A638A533872042280
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 144.86.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8c:1a:63:8a:53:38:72:04:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=1c59af1e-f67d-4d92-9671-076a8c94a124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:df:6d:ba:fd:6b:43:ff:0b:6d:b8:53:f4:
4a:6c:8a:c5:12:21:ad:7b:5e:47:0d:3f:28:a2:19:
23:c3:1f:81:ad:d0:79:e8:bc:c7:17:3a:87:d4:66:
ae:b0:66:06:13:03:b4:40:b7:0f:2c:a8:d3:2a:a8:
33:d1:58:c8:33:58:20:9b:d9:c1:6d:50:a2:76:04:
a6:69:b1:36:6b:e2:54:31:a7:88:ff:8f:c5:d2:21:
34:4f:29:45:87:6d:9b:40:e0:77:53:75:2b:d7:7e:
b7:2d:77:ca:f8:b0:89:30:3e:2d:d6:aa:9f:f1:b7:
40:e9:98:d0:c4:8c:85:68:d4:3d:2b:fa:cd:29:89:
5f:9d:77:11:12:80:d7:6d:88:af:67:37:8a:c3:34:
6f:32:6a:70:90:7d:7f:5d:9c:fa:d6:78:4b:da:59:
e7:51:8e:53:8c:ae:e4:25:c4:65:2e:93:d2:9f:d6:
be:bd:90:12:96:3e:4e:de:11:ae:83:0b:b5:38:bf:
d6:1e:ef:70:89:31:48:68:fa:7d:5a:84:3d:ca:f8:
49:07:74:d1:28:35:7e:5c:34:34:3f:db:37:57:b4:
de:5c:ad:63:89:da:be:5a:13:4a:ba:ce:db:ee:95:
b0:4b:6d:2e:61:ed:e6:f6:31:18:33:50:42:15:1d:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:A5:2B:15:3D:AF:FD:2E:E7:E4:B2:A6:C6:A6:27:E7:D2:99:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
X509v3 Authority Key Identifier:
keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:4c:c3:61:0a:75:73:60:e4:73:bf:b0:ec:31:6f:57:62:22:
6b:bc:cb:a7:3a:98:95:c7:57:51:9d:cd:a0:2b:39:3f:f9:e2:
40:f7:69:e1:65:9f:ba:49:f4:72:4e:d8:1a:b6:9f:ba:ce:d3:
6b:7f:99:e1:4f:8d:71:52:5f:72:d4:68:3c:f7:d9:8e:7f:e2:
5f:ee:96:4a:2c:e8:60:54:81:3c:e7:ea:df:29:5d:a7:80:42:
8e:e9:b1:f5:09:8e:e4:ac:fe:4f:33:3a:1c:2e:cb:35:85:85:
e4:ea:0a:56:b7:16:9a:f4:2c:fc:08:c5:61:2c:a6:10:3f:49:
d6:dc:4a:da:60:c0:6d:ea:08:a7:ee:5c:6d:d0:c0:80:bf:69:
a0:4c:6c:98:e4:76:e1:9c:c0:30:1c:43:dd:fb:b9:2c:e9:d1:
9d:2b:09:c7:cd:aa:59:4b:a0:82:9c:82:92:69:df:16:c2:90:
d9:f9:e6:56:bd:95:e2:65:c8:39:00:e5:c7:b3:e3:48:a3:c9:
16:2d:7f:7c:24:c0:4d:45:2e:fe:e0:56:76:c3:5d:2e:60:48:
0e:35:db:d3:5b:53:3a:02:4b:a1:d9:8f:a1:1a:af:78:a1:7d:
9d:5a:73:7f:35:05:f2:43:09:b0:9b:9c:87:a5:cf:d9:da:04:
a1:bb:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:19 2025 by rpki-client