Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/ae14dd82-734d-39e6-b86a-b24bb2012b77.roa
File: ae14dd82-734d-39e6-b86a-b24bb2012b77.roa (raw, json)
Hash identifier: ntOO80FkTVkmyNje6wHu/e91zW+fG1dBk2SxUv+6TG8=
Subject key identifier: 53:6D:CC:4F:06:4B:FA:85:14:24:92:FC:CF:F0:EE:FE:58:A7:D3:3B
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F432858482943B8337E4782D35840DF00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/ae14dd82-734d-39e6-b86a-b24bb2012b77.roa
Signing time: Tue 10 Dec 2024 14:51:29 +0000
ROA not before: Tue 10 Dec 2024 14:51:29 +0000
ROA not after: Mon 10 Mar 2025 13:51:29 +0000
asID: 0
IP address blocks: 169.145.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:43:b8:33:7e:47:82:d3:58:40:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Dec 10 14:51:29 2024 GMT
Not After : Mar 10 13:51:29 2025 GMT
Subject: CN=a896b96d-6f1c-4daf-b9ef-eceb393f160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:ec:b7:96:5f:9d:78:de:49:9c:96:3f:bf:
6e:1f:6f:cf:91:56:76:6c:1a:a6:ac:70:61:a9:29:
d0:0e:88:90:58:c7:ff:eb:af:5a:2e:23:3c:f9:be:
5c:8d:0c:37:1b:1b:f6:f3:87:4f:92:f2:c3:df:f8:
d2:97:2c:47:b4:20:78:40:7e:3d:41:16:7b:9f:36:
46:78:19:a8:c9:b7:13:60:04:d0:9b:75:4f:0b:63:
0e:b1:87:2b:93:4c:a0:87:48:75:69:ed:a7:dd:6a:
e1:e1:cc:ae:fb:02:e0:73:af:97:60:d4:fb:a8:54:
be:5b:73:30:1f:23:7a:53:d3:1b:cb:bc:61:44:11:
d2:a6:3e:3e:3d:40:5f:a2:df:df:ff:90:14:c0:5d:
9b:d6:d3:6b:f2:fc:12:41:13:d6:e7:52:e4:bb:52:
ce:b0:19:1b:83:a6:09:5d:8a:d1:ad:fd:e8:7b:c3:
61:88:4e:63:f5:60:66:76:54:3f:20:21:3a:bb:6f:
e3:80:6f:81:07:6f:42:af:c7:3c:b6:2b:88:e4:e2:
9f:96:d6:88:89:03:21:96:fd:78:c6:8a:e1:9b:28:
36:17:aa:18:4e:0a:19:d7:d1:9c:a9:73:9c:3f:5f:
f2:a1:fb:b7:f4:d0:5d:47:08:34:bf:ae:0b:61:61:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:CC:4F:06:4B:FA:85:14:24:92:FC:CF:F0:EE:FE:58:A7:D3:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/ae14dd82-734d-39e6-b86a-b24bb2012b77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4f:35:be:4f:7b:ce:b4:71:55:a1:44:cc:82:5f:b0:9d:ba:
d7:94:5f:b3:18:fb:cf:6f:d4:89:f2:36:9e:e9:a7:9d:e6:0f:
28:da:4e:55:ec:37:6e:11:62:f6:39:be:ea:4d:30:e9:0c:d9:
58:df:76:57:60:fb:ae:71:a2:fc:e5:01:39:6a:1e:63:2d:4c:
5b:b5:c7:c5:85:a2:cb:e1:e6:b0:c7:ee:42:fa:5f:06:05:b1:
a0:d4:c3:c8:09:01:ca:f1:68:f3:7d:3d:66:2a:7c:c0:db:d2:
37:fb:09:85:13:94:3c:91:c5:11:1b:a0:99:10:c5:66:28:fe:
55:89:5a:79:93:2d:ad:8c:56:fe:1e:83:56:10:d1:e3:ee:84:
a7:3f:5e:9e:c0:bc:2a:41:ba:fc:3c:d5:74:5e:b4:be:5c:ba:
a1:62:a1:b1:c9:2a:8e:58:14:46:f3:4e:75:27:f0:08:9a:74:
fa:9b:4d:e3:ed:55:8b:c8:2e:63:29:cf:19:87:28:b7:88:2d:
36:5a:5a:17:07:e2:35:71:fc:1b:e0:11:93:57:3f:5b:30:dc:
aa:da:c7:f8:03:0e:86:0c:aa:9b:3a:24:c7:bc:15:5d:8a:7f:
f0:2f:85:e9:da:4b:a6:18:65:b9:43:7c:e7:53:21:c9:09:0f:
89:39:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:08 2025 by rpki-client