Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa
File: b9dd9788-1f88-3890-b233-520f9602c142.roa (raw, json)
Hash identifier: bcp76PYXaxUAInzyfonmAQD2YXTUbeRL4P+0LFmof9E=
Subject key identifier: A8:D6:CF:00:50:B7:5D:86:F5:3F:34:DB:34:7F:87:9B:B5:A9:0B:45
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F4328584832F02DB77356815AC79B3A00
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 8075
IP address blocks: 161.221.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2d:b7:73:56:81:5a:c7:9b:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=39cee57e-79ab-43ae-9c4e-b8f175c0ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:51:f5:78:1e:cd:a6:7d:96:11:14:45:c9:
6e:97:0a:9d:5e:25:aa:1e:3f:d0:ee:b7:b0:86:89:
c6:f9:80:a8:90:00:3d:a6:6c:75:aa:54:81:f8:53:
42:b8:ff:98:17:11:50:f3:f5:5d:83:f9:38:a6:64:
a4:dd:9b:02:67:54:72:55:1a:26:99:c3:9f:9d:6d:
81:04:c5:a3:38:2b:75:a6:31:30:4c:80:b6:e0:60:
b5:e6:54:84:36:6a:ac:8b:ee:4f:29:b3:4e:9a:c4:
e8:ad:76:36:43:df:c9:c2:cc:44:76:2f:bd:c2:65:
09:8b:9a:41:f6:f8:bc:74:4d:ee:b4:3a:3d:02:0e:
10:b1:40:8f:a9:74:e0:b8:f4:fb:e8:0e:15:a6:68:
c4:2e:09:ac:ad:72:66:b3:c7:5c:7f:d1:8f:f5:03:
ea:b8:8a:92:49:e1:f1:38:be:4d:81:e6:38:e7:1c:
26:1e:06:49:6b:1c:3b:ef:1a:0e:be:6a:e7:d1:62:
94:50:fb:a2:8d:73:7d:66:18:b4:4f:87:fd:1b:2b:
6c:01:7c:46:de:ef:09:60:89:e1:94:b0:5f:90:53:
89:f9:b5:fd:e1:a5:12:83:13:f3:4a:e3:6a:73:bb:
fc:7d:67:6d:01:2f:97:df:08:92:32:d6:b6:8a:37:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:CF:00:50:B7:5D:86:F5:3F:34:DB:34:7F:87:9B:B5:A9:0B:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:09:51:c0:d2:2f:25:26:45:76:00:ab:95:37:87:6b:8a:ae:
c6:3a:92:26:bf:ad:21:22:96:59:b8:a8:7c:da:33:8b:29:81:
07:dd:0d:00:28:e7:5a:c6:cc:c0:6f:9b:b6:29:fc:57:94:d3:
01:a3:c9:e5:ea:b0:a6:72:54:22:8e:7b:d8:5f:ad:16:de:54:
0a:16:5b:2b:12:1c:d4:0d:bc:e5:5d:8c:75:f7:bf:d9:cb:5b:
50:53:ad:41:d6:f9:d7:13:a5:06:01:72:02:1e:fd:92:75:e1:
0b:eb:3c:d2:e1:b5:bd:29:ca:8e:89:68:4d:66:47:24:5a:c3:
d1:c8:c6:f5:3d:c0:1e:3e:ca:8f:92:a4:a5:c9:3a:15:8d:14:
fe:fb:b7:43:31:90:77:40:f3:55:4e:ba:46:4c:5f:66:5c:7c:
d9:87:85:a8:7a:99:31:0b:4b:ae:db:df:e5:e8:b2:7c:51:5f:
bd:16:0e:54:df:fa:4d:8d:80:59:44:f3:c2:73:a3:71:29:c8:
94:19:d6:17:35:28:b3:3b:70:d5:db:fe:39:c6:23:78:07:ca:
49:d8:67:60:02:35:47:84:60:78:24:95:33:c1:60:a7:16:a8:
dd:a2:13:74:f5:2d:0a:b5:a9:15:4d:1f:ff:09:08:4c:22:30:
c4:43:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:22 2025 by rpki-client