Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa
File: 37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa (raw, json)
Hash identifier: iqH+R2TQ+jbzgq8YClAGajTOZvNG5j7KUCsIwQSnRc8=
Subject key identifier: 87:A5:5F:C9:EC:5D:F6:CE:7A:0E:CF:91:E9:60:9B:90:34:15:03:C5
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F432858488280923390216E279ACFC200
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 10430
IP address blocks: 168.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:92:33:90:21:6e:27:9a:cf:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=c70e3712-c16f-4cde-9c96-c6aa0c31d4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:18:51:68:fe:d3:55:f8:0b:25:0d:ad:0d:
af:fa:4f:16:35:86:48:18:c9:88:50:bf:7a:f7:66:
35:e6:37:77:f0:04:1a:1a:d4:10:0c:1f:6f:3d:0a:
39:d9:23:fb:d0:84:24:91:07:46:7b:da:87:62:ca:
7f:2c:38:85:68:80:57:35:83:5f:e5:c5:e0:b0:ff:
15:e8:e5:62:fc:3d:04:65:97:58:f9:bd:18:d0:82:
56:f7:75:71:bf:b8:78:3a:3a:9d:10:88:85:cb:81:
f5:0a:74:88:76:56:6c:16:5f:84:0a:89:70:27:f9:
b0:da:e6:76:ab:2d:13:4b:2b:d3:0e:2d:59:bf:98:
7e:f9:e6:76:29:70:f3:94:e3:ef:8b:e6:cf:5d:11:
10:6e:f5:77:c2:d2:78:7c:5b:4a:22:5c:40:33:b2:
30:a8:b5:d9:16:8f:66:33:8a:ed:9e:20:43:85:f8:
9f:13:9b:0d:8d:9d:18:42:60:43:ec:cb:53:4c:c0:
25:bc:e0:f3:d9:a2:8f:ab:9b:97:f5:4b:1e:1c:2d:
cb:89:dd:9c:7b:4e:61:24:e4:c0:21:52:8f:1b:7a:
37:b8:3f:ad:01:95:46:a9:f9:03:bf:e2:11:c2:74:
d2:15:e8:83:e4:dc:27:7f:6f:bc:1e:63:c7:59:f8:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:5F:C9:EC:5D:F6:CE:7A:0E:CF:91:E9:60:9B:90:34:15:03:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
168.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:45:58:14:11:72:8c:1a:0a:39:11:03:0d:95:91:61:f3:1c:
9d:0c:c5:8c:63:f5:ce:d7:a8:97:c7:96:f5:ca:0b:76:bb:ba:
96:0f:9e:34:28:b6:59:3b:99:da:f4:89:25:cd:e5:80:a5:b7:
4c:dc:86:9b:30:8b:4f:ef:f1:69:65:09:2c:75:21:ee:31:6e:
88:04:6d:4d:31:86:6b:81:37:55:28:b3:4a:87:19:85:68:2a:
3f:04:77:a3:21:00:04:f8:c2:46:d3:14:ea:17:a9:87:0e:34:
da:25:de:0e:2c:4b:08:b9:8f:62:8c:d8:ee:80:f3:42:9e:0e:
27:10:a9:6d:c4:76:bd:0e:24:a5:89:63:e1:9b:91:23:c2:ee:
ce:70:51:37:b8:42:9d:a2:b7:1a:c8:05:9e:b2:00:54:e5:c4:
93:bb:55:42:5a:0a:f8:74:90:9b:57:38:fd:e3:f2:65:e1:e1:
f4:ab:4d:4a:f2:ed:e8:fc:38:1d:9b:9a:8c:e5:19:a1:7c:46:
21:6d:0b:b9:d7:78:33:a1:c1:49:a5:cf:5f:52:a1:b5:d0:66:
9c:ae:30:ff:d9:a1:e3:37:4c:1d:b8:41:aa:b0:aa:ac:0f:e2:
c5:3c:35:2e:09:40:40:88:b4:35:b3:bc:6c:55:8f:ba:0b:d8:
15:fd:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:25:56 2025 by rpki-client