Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
File: 0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa (raw, json)
Hash identifier: O0DlmSB9Jzl7yy26UyIIUF5znmEuIszE2+H3O/OT5KI=
Subject key identifier: 65:AE:56:1F:48:23:7C:E5:33:63:6B:0F:04:F3:9E:FB:26:DC:7C:55
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F43285848292989CF32925F2E36E50898
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
Signing time: Tue 10 Dec 2024 13:58:43 +0000
ROA not before: Tue 10 Dec 2024 13:58:43 +0000
ROA not after: Mon 10 Mar 2025 12:58:43 +0000
asID: 0
IP address blocks: 169.145.120.0/21 maxlen: 24
169.145.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:29:89:cf:32:92:5f:2e:36:e5:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Dec 10 13:58:43 2024 GMT
Not After : Mar 10 12:58:43 2025 GMT
Subject: CN=bfad055e-7dcf-469a-9bde-b9c9cd28f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:bb:96:fe:41:9e:e2:56:45:75:ac:92:aa:
55:68:a4:f6:92:a7:df:67:9a:04:5c:11:f4:d4:36:
15:b7:64:f3:87:90:e9:8f:d8:e0:e6:78:ba:ba:16:
43:6c:df:90:64:57:87:d1:01:f3:27:db:9a:48:84:
54:7f:79:fd:e7:13:d1:0e:93:de:32:fc:9a:e7:bd:
58:2e:3f:2e:5e:73:6d:47:2e:15:16:1d:4a:55:df:
f4:e5:bb:7e:21:cd:0b:43:c5:c7:2a:16:67:08:e8:
21:e1:78:a3:d7:55:41:2e:f8:57:1c:53:43:53:ad:
f4:96:c4:8c:84:97:46:84:85:b7:7f:05:2e:7a:1d:
c5:aa:13:e8:41:cf:c8:a3:f6:bb:97:e3:ca:d9:9b:
24:4c:20:e0:04:9a:e3:42:99:6d:be:20:57:1b:df:
6b:2a:2d:65:12:67:d9:9f:e2:8f:99:c2:48:f3:7d:
1b:6d:9f:a1:a2:43:14:7f:a5:9c:75:92:c1:89:73:
a6:c0:85:ca:1b:c4:f6:07:6e:1f:5a:24:c0:41:22:
fe:3c:39:ad:60:0b:cc:ff:94:01:a5:a0:35:30:c3:
91:61:d5:86:8b:a5:73:cd:fc:0a:81:49:00:39:6e:
38:e2:70:10:5e:f1:79:5d:db:1b:57:95:2a:b2:2a:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:56:1F:48:23:7C:E5:33:63:6B:0F:04:F3:9E:FB:26:DC:7C:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.120.0-169.145.135.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:33:5b:f4:54:7a:12:3b:78:e7:1f:02:5b:be:ec:82:dd:93:
33:01:ce:89:50:29:d3:92:5b:28:c4:48:b3:c8:09:d7:1c:47:
55:8b:2f:90:7e:82:21:4a:45:15:2b:c7:45:20:63:e6:8b:3d:
63:7c:f6:2a:7a:5c:d6:0a:4f:4b:68:01:c2:b8:da:47:d8:ba:
22:a8:15:2b:d9:89:29:3a:52:3b:0e:b8:53:9e:00:05:49:43:
af:45:a4:7a:de:5a:a3:79:8c:13:40:2a:f0:c7:86:f0:b3:4b:
7d:54:65:36:1e:a2:8d:86:7c:d7:fd:56:26:6b:9f:a6:7c:12:
e3:d9:56:3b:8c:4b:7a:bd:80:ec:49:30:bc:53:56:9e:cd:b9:
eb:92:e9:99:08:f0:a5:03:73:02:ca:f8:5f:7e:17:bc:37:a0:
df:2b:88:90:14:7c:ae:b8:03:0b:ee:87:64:46:ca:90:d7:33:
9f:8f:d9:da:75:44:e6:50:65:48:40:b3:76:86:a9:16:cd:7e:
c4:b9:95:85:75:2e:6a:bc:e7:3c:1a:fb:05:76:f6:6c:87:07:
1b:95:cb:05:38:e3:78:c7:76:0e:d4:82:6e:71:af:bb:45:96:
e1:b5:ad:8e:ea:ea:90:f0:4b:6e:48:4f:2a:2b:c9:6b:32:a0:
fe:82:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:04 2025 by rpki-client