Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa
File: 7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa (raw, json)
Hash identifier: spyqW1y5hXmp9Ed7xdrdFsnbkWveijjzDwl+1bxc0uM=
Subject key identifier: 59:E2:1E:59:A7:DB:E7:04:CB:A8:08:C4:C4:BE:6C:79:E1:E1:58:61
Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial: 010D0C9F43285848828081EC652669D90B1E3330
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 398573
IP address blocks: 151.161.0.0/16 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:81:ec:65:26:69:d9:0b:1e:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=1d90185f-2a20-4b7e-91bf-0aeae438e9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:68:2e:c5:b5:5a:2c:11:1d:ef:8d:c6:cc:
c9:fb:78:5d:ad:a3:f2:c5:83:12:5b:e8:13:95:5d:
69:0a:34:01:f5:0f:cd:dc:b9:8e:7a:09:2e:dd:bc:
0c:cf:e2:34:36:22:b9:27:fc:08:73:8a:76:7b:dd:
df:8f:71:c0:95:ba:20:aa:8a:93:72:4f:d3:0a:33:
ad:80:c5:2f:77:0c:ba:86:d9:57:f3:0d:7c:39:7c:
83:e8:a4:5d:06:0c:1f:ae:4d:0e:94:77:b4:6f:bb:
ef:e3:72:43:c8:7c:02:47:75:85:f7:ff:37:53:e7:
db:94:af:82:a2:73:fb:c4:96:f0:75:ba:ef:72:a4:
57:dd:0e:6c:02:62:e1:b5:98:42:ef:c6:84:eb:99:
3b:39:67:78:fe:c6:ce:8c:d5:ed:a3:3a:49:62:cf:
16:b3:61:31:53:af:ca:e9:01:6a:24:37:c1:f7:19:
76:e8:3f:f4:2d:4e:5d:b7:55:0f:c1:de:4b:a1:93:
ba:a8:05:ec:8f:0f:86:b5:b2:ec:93:1e:f2:b8:ab:
b1:d4:d9:aa:a4:61:a6:7b:9d:76:fc:8e:f5:b7:f6:
56:2f:b9:56:63:e6:81:95:80:c4:0e:16:f1:89:75:
6e:cc:93:e5:f2:8e:0a:70:6f:7c:4f:92:2a:af:17:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:1E:59:A7:DB:E7:04:CB:A8:08:C4:C4:BE:6C:79:E1:E1:58:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
X509v3 Authority Key Identifier:
keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
sbgp-ipAddrBlock: critical
IPv4:
151.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:3d:a1:4c:4d:2c:7e:e7:eb:07:17:80:36:c9:e9:07:38:78:
b3:65:27:71:22:cd:25:29:08:a5:d2:75:ba:0e:80:ba:7d:50:
33:1e:ff:a0:8e:89:64:fa:be:f3:a8:23:89:ed:9b:5b:fc:7c:
02:46:45:a3:a2:e9:21:db:b3:41:2d:05:cb:8f:3e:b7:e5:d4:
85:4f:4e:76:a3:06:7a:c1:15:be:33:e6:95:f7:34:dd:35:ef:
64:a5:eb:5e:29:3c:e3:76:45:0a:ef:e8:b5:28:44:4e:e5:b9:
f8:11:84:03:5e:5a:62:dc:e8:22:ab:84:4c:0a:4b:88:53:3c:
92:e9:f8:dd:70:db:6a:f7:a3:d9:90:6b:96:a2:66:41:46:e8:
7f:89:5a:6c:c2:dd:2f:c3:c4:cf:74:fa:d0:75:40:59:3d:b4:
19:61:9e:e3:f6:65:18:ae:1d:d8:ed:91:9a:59:a0:07:10:43:
5a:f9:16:bd:24:7a:28:2e:2f:44:27:73:88:85:c7:cc:aa:b5:
ee:63:aa:0f:0c:32:dc:db:07:b9:52:71:85:a4:e2:f8:97:f7:
9f:d2:7a:c2:28:16:6b:2e:d6:e8:f0:46:44:d0:8c:4f:ab:18:
19:20:67:d1:d8:8c:5e:6e:b8:bd:98:b0:71:50:da:e1:18:ed:
88:27:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:41 2025 by rpki-client