Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
File: 350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa (raw, json)
Hash identifier: /cGB4n1nMbd0wYL4i0IlVhdSWwI/NAfxeZSR8ia/DLA=
Subject key identifier: D4:95:C5:8D:A8:97:E9:50:31:42:26:46:4F:D7:F7:CA:06:ED:48:AF
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858482BF559FAF43BB25D127DEA40
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 22925
IP address blocks: 162.211.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:59:fa:f4:3b:b2:5d:12:7d:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=7e7d59eb-5a8a-4c73-be8c-d462020915ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:5e:f5:74:48:b2:9c:73:c0:f3:af:4d:bc:
f9:6e:b8:01:ee:d0:7b:4a:33:c5:70:e0:b7:e4:37:
8d:a3:cc:10:45:b8:ee:6f:ee:84:27:e9:57:f3:39:
f6:c4:3e:cf:63:ac:50:0f:eb:68:58:5d:2f:c4:11:
cc:a6:37:13:ef:af:04:2c:77:b1:7c:78:30:0c:87:
26:d2:15:5f:19:6d:6c:0a:b3:73:c8:43:35:3b:a7:
17:e5:cd:7b:9f:d2:18:2e:1d:3c:9a:6c:e7:9c:51:
45:df:f0:cd:18:14:23:ec:3a:b4:46:00:14:c7:50:
7b:25:e5:cd:1a:0a:29:e7:aa:2f:c8:06:25:94:74:
9b:66:26:77:e8:84:01:7c:14:54:59:6b:9e:55:fd:
6a:0f:74:fa:a9:65:1e:c2:31:da:17:d3:3d:7c:5a:
9a:13:59:c8:a1:a1:38:ba:0d:0c:a7:27:62:0e:d6:
27:1c:ed:33:e2:bf:5d:17:bc:4d:da:67:48:0a:72:
df:5d:62:b1:4d:61:27:b5:2d:3a:89:50:9d:a9:71:
7f:10:19:5a:17:f1:7c:c0:11:90:68:ee:9d:36:a4:
bf:e5:a3:38:ae:25:a9:63:0d:0e:0e:1b:5b:b6:ba:
e5:37:16:d0:7b:22:88:a8:bc:6e:20:88:75:06:07:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:95:C5:8D:A8:97:E9:50:31:42:26:46:4F:D7:F7:CA:06:ED:48:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:77:75:ba:9a:6f:40:21:ba:79:50:0b:8c:c6:e9:b9:d1:88:
e2:74:05:a5:7b:4c:86:8d:22:51:28:14:07:7d:e7:31:b1:3b:
15:22:1c:e4:ab:f7:be:8e:4d:d2:e4:b4:9b:82:14:c8:e5:52:
48:99:e2:26:10:5c:c0:c0:30:af:db:19:49:1e:27:d9:b9:43:
2a:6e:f4:64:70:36:82:c8:ec:cf:0d:be:39:72:b2:a5:f9:94:
22:14:81:7e:9e:47:d9:58:37:f3:be:f0:62:93:7e:1f:84:23:
1d:3c:cb:d1:f0:c9:09:11:65:ca:7e:4d:38:95:de:0b:a4:5c:
dd:79:74:03:db:e8:98:01:7a:d0:75:72:6b:58:1a:fd:19:23:
56:50:07:1d:6d:b9:56:ed:19:0c:e6:f5:40:63:9a:96:4b:9a:
5e:0d:3e:3f:b3:df:c1:fd:0d:b1:13:a5:d5:d9:f5:0a:98:05:
50:f1:da:97:97:c6:94:83:bc:29:73:72:00:2a:4e:a0:e9:96:
0f:ef:01:15:ed:de:fe:94:ad:4d:26:36:46:dd:03:e3:74:70:
25:7f:41:57:c5:5b:97:2e:ea:2e:0e:22:a8:ba:43:6c:4e:51:
df:32:e2:56:01:ae:95:59:98:bf:17:fb:63:9a:25:8b:81:82:
9c:03:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:26:13 2025 by rpki-client