Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
File: 25b57fbd-9358-3be7-a98f-a532b62c0739.roa (raw, json)
Hash identifier: codne6hJjZhCnFZuPuN4CfDsDjEB11BdF98Ko9pqsRc=
Subject key identifier: 23:05:65:B7:11:C5:09:CF:7D:31:DD:71:00:4B:58:51:A0:F3:F0:ED
Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial: 010D0C9F432858486C67D8EB1B3D208E655D1280
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
Signing time: Fri 03 Jan 2025 16:03:26 +0000
ROA not before: Fri 03 Jan 2025 16:03:26 +0000
ROA not after: Thu 03 Apr 2025 15:03:26 +0000
asID: 11766
IP address blocks: 162.211.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:67:d8:eb:1b:3d:20:8e:65:5d:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Validity
Not Before: Jan 3 16:03:26 2025 GMT
Not After : Apr 3 15:03:26 2025 GMT
Subject: CN=f04c7a67-a3a4-4d1a-a791-45e472e0a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:c3:c5:81:4a:98:0a:6c:54:d7:39:fc:40:
75:a3:51:1b:99:40:f2:a6:68:b9:fe:3b:cd:e6:75:
90:8c:3a:11:2c:64:33:49:8b:5f:39:75:98:34:c1:
dc:e4:43:96:d5:36:11:60:52:90:d1:ee:1b:11:75:
7b:ea:7e:cd:bd:50:c3:f1:50:cc:6b:bd:ff:26:d2:
e2:42:61:63:bf:f4:03:7e:08:95:ff:ed:d1:b7:d3:
56:fb:ca:e4:52:af:53:d5:e5:eb:4a:bf:9b:73:92:
e9:4e:8f:5a:77:4f:a0:37:83:4e:49:47:85:36:97:
c9:18:ba:77:1d:e0:b6:a9:60:25:61:3f:84:82:a9:
7c:61:9f:d2:57:3c:5d:be:3a:d2:d8:e2:8f:2f:fe:
2b:b7:9a:28:fd:4a:ef:53:47:87:f0:13:d3:44:e0:
59:5c:64:cb:43:eb:84:73:92:61:a0:17:98:59:03:
98:96:4b:5b:d9:ed:82:c6:2e:92:43:63:f2:68:1c:
58:55:10:32:7f:67:8b:5f:bd:69:f6:b2:45:c5:74:
b9:6c:71:cf:82:1d:fc:f5:db:dd:b1:c7:27:5d:46:
ea:c2:cc:00:b4:38:e6:96:42:9b:7c:dd:6c:41:79:
95:00:a2:fe:97:ef:7c:73:f4:de:f7:fd:d4:e5:d6:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:65:B7:11:C5:09:CF:7D:31:DD:71:00:4B:58:51:A0:F3:F0:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
X509v3 Authority Key Identifier:
keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:91:a4:8e:5f:5b:36:0f:5f:06:38:fb:33:11:1b:bb:4f:d7:
a9:19:66:1b:53:31:76:32:50:53:1c:1a:2d:44:b2:aa:ad:aa:
08:8a:2f:d4:c5:86:95:e2:d7:f5:07:84:fe:f7:f5:2e:0e:f4:
ad:06:f6:07:9e:74:b2:df:e4:d0:65:fa:2d:ff:f0:df:ef:a2:
6d:8a:d0:f9:11:15:63:23:96:dd:a7:38:77:17:24:06:90:52:
87:80:00:00:bd:0e:82:17:f5:ef:bf:89:2e:45:73:93:13:7f:
f3:f8:e1:68:18:67:41:d3:8e:46:5e:cd:8a:28:92:75:a6:15:
90:5e:40:41:23:1a:04:88:d0:df:cf:20:a2:ca:6f:42:a8:43:
bf:e6:55:f7:cb:a9:33:e6:56:c3:3a:95:9f:93:10:1b:19:22:
3f:c7:8f:fd:d0:df:93:c0:fe:5f:9f:54:8a:1c:6a:90:b7:19:
8b:27:cd:68:0f:49:d5:73:e7:cd:57:d1:57:08:4f:12:35:aa:
59:10:70:86:30:36:9a:f0:43:bd:5d:af:4b:56:5a:28:d8:7f:
8f:70:9b:1b:5d:57:f2:82:ca:62:09:44:e3:24:45:03:df:86:
60:3d:fc:b8:75:2c:d4:19:67:0d:99:9d:14:3f:29:44:f0:4a:
08:f5:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:48 2025 by rpki-client