Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
File: 541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json)
Hash identifier: fvFfNZnN51YRV2cgGVmPQ+w04ZpYYBeh/FCetlSdvHQ=
Subject key identifier: 01:AF:A3:E5:8F:49:2C:42:37:DA:F4:1F:F1:EE:12:89:65:72:12:3E
Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial: 010D0C9F432858487FB5D177F0E9C0DC2A9B9C40
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 162.212.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d1:77:f0:e9:c0:dc:2a:9b:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=0a63d43c-e1e3-437f-b8e4-631edfb4b061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:4c:4a:be:da:89:50:9e:25:76:46:a1:78:
8c:db:18:79:04:ec:79:2f:f5:36:3e:24:81:44:7e:
b8:67:1e:ef:d3:ce:7e:42:59:e5:a8:ee:4b:52:15:
a8:a3:d2:3f:82:4b:2f:4e:bc:c1:ae:89:44:94:f0:
6b:e0:49:21:ca:ec:28:16:af:96:16:8b:1d:c2:06:
03:59:7b:4b:d6:59:a8:dc:23:1a:78:7f:70:11:16:
3d:76:50:93:bb:17:32:0a:dc:2c:a9:85:6d:4f:a3:
7d:66:76:d3:46:37:0a:76:78:b7:46:a6:44:27:8b:
84:6f:05:33:b0:59:1c:03:51:63:62:b9:7b:08:a7:
68:ea:be:e0:81:f3:30:05:ad:ae:22:0f:f1:1e:52:
45:be:a9:23:0c:e1:6b:cc:85:d5:f9:fa:f3:84:89:
cf:aa:0f:3c:22:14:0b:f8:73:24:ca:39:6c:e0:df:
c1:20:07:f0:5a:99:51:3b:19:13:df:50:a2:a8:4b:
47:8e:4a:2f:6f:01:84:06:ef:22:6f:5b:8e:a1:f0:
88:20:be:c9:51:0a:4f:0d:eb:fa:b8:68:82:ee:14:
dd:8f:1a:16:a7:57:4f:6a:3b:2c:88:f6:75:9f:31:
a3:95:d2:1e:b1:a3:c9:85:ac:de:45:9c:db:68:24:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:A3:E5:8F:49:2C:42:37:DA:F4:1F:F1:EE:12:89:65:72:12:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
X509v3 Authority Key Identifier:
keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:62:05:33:f6:10:06:57:ce:74:5d:bf:52:19:72:26:5c:b0:
2d:31:ee:9d:46:a5:37:74:8c:31:d7:05:7f:a4:88:86:8c:ca:
1d:10:92:65:cf:16:dd:4a:17:5b:58:7d:29:8a:93:47:f2:6a:
ad:25:60:d7:75:b5:30:07:d9:d9:53:1d:ef:18:ef:4b:85:0c:
e2:bc:0b:01:34:f4:a2:18:b7:c7:32:38:f5:d1:e4:c1:38:d8:
d5:a4:65:97:17:75:85:b1:2b:c6:fe:72:c5:6b:79:91:ed:13:
db:9e:45:c6:29:c1:2c:26:7b:88:f2:e6:ad:03:2e:99:1d:49:
a9:20:d8:25:56:28:7c:43:4f:c8:29:08:82:31:80:47:fb:46:
1f:fd:50:e3:1d:65:2d:c9:3f:dc:71:a4:66:06:b3:80:5c:4e:
03:2e:f5:ca:d6:25:8c:3b:69:2f:f7:74:f9:6c:64:23:90:e7:
8a:e2:dd:7b:03:4d:80:99:de:13:b8:0d:cd:1a:3b:c0:fd:d4:
5e:7e:11:cb:22:29:01:fd:43:30:fe:b5:95:25:5e:e9:9e:7a:
62:52:85:ce:fe:73:b8:bf:68:13:18:a1:f6:0e:56:f8:70:99:
05:d0:88:61:c4:f8:ab:0b:85:71:26:6c:50:b7:39:52:c9:66:
0c:27:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:58 2025 by rpki-client