Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa
File: 4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa (raw, json)
Hash identifier: exs9NCzKO3TsGn3GmrlZRc+5P6NFjlg7hz6sQkh1/Fs=
Subject key identifier: 63:7F:B9:C3:1C:7A:05:4F:70:8E:A3:DF:3E:BE:D4:BC:61:BC:FF:68
Certificate issuer: /CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee
Certificate serial: 010D0C9F4328584867FAE589A9D75F28EBA7AA80
Authority key identifier: 7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 400167
IP address blocks: 165.140.62.0/23 maxlen: 24
2606:9240::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e5:89:a9:d7:5f:28:eb:a7:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=1f131014-2e51-4dee-ac1b-f298ad9d9ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:8b:92:0a:f4:60:d0:15:dc:8f:27:ca:cc:
fe:bf:f4:4b:a5:65:f6:03:d6:a1:2e:2d:f1:99:ec:
76:41:91:c7:97:60:29:fa:53:70:06:f4:5d:2b:f6:
12:06:d7:f0:a0:25:33:a3:f0:1c:dc:5e:32:03:b0:
b8:f2:c8:ab:ed:ec:7d:e8:06:74:2e:0e:f8:a7:a5:
04:54:5f:c0:34:0a:30:38:76:c1:3f:51:13:11:5d:
c3:9e:fe:47:c7:ed:b3:30:ac:14:eb:3b:c5:2c:fc:
c8:91:f1:bc:9a:0a:0e:51:06:2a:c7:9c:c8:bb:f9:
97:da:5a:8f:da:d5:d3:6b:54:06:46:3f:1b:91:63:
c1:c4:d9:4c:a2:03:0e:f0:08:ee:c8:cd:19:25:0e:
5b:fa:d1:70:6f:d2:2d:ce:55:38:4c:27:7d:79:64:
af:e3:bb:d0:05:8d:15:85:ea:47:c0:b3:7c:3e:91:
db:3c:3a:e8:6e:2a:5f:b8:58:32:4a:48:6e:51:37:
57:c7:7a:55:ed:00:d9:32:92:e6:b8:5d:01:fa:dc:
72:78:21:19:07:af:c7:4d:e4:65:80:ec:26:9a:17:
94:98:e8:ea:74:f7:26:6d:91:83:b3:55:03:1f:ff:
6f:1c:64:43:eb:ec:68:07:4c:fe:2e:58:78:d0:05:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7F:B9:C3:1C:7A:05:4F:70:8E:A3:DF:3E:BE:D4:BC:61:BC:FF:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.crl
X509v3 Authority Key Identifier:
keyid:7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.62.0/23
IPv6:
2606:9240::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:25:76:a1:94:6a:71:6e:80:02:48:d7:8b:ee:92:7f:2a:ed:
16:13:7c:7d:c8:cc:3a:12:ce:0a:0b:cc:90:65:e5:8f:a9:ea:
03:77:a4:12:84:d5:e2:3c:a8:c5:1c:23:9a:e1:d2:da:d6:77:
97:af:fa:88:04:ad:42:b5:a7:ba:70:92:fc:0f:9e:8e:49:0d:
1e:c3:a0:3f:c7:f7:8d:fb:4e:95:41:36:31:56:a7:e5:d5:b9:
de:5b:2e:ac:b6:1a:a4:b9:88:0d:8e:2d:3c:e5:30:8b:71:4b:
b8:9b:c2:13:5c:1e:8e:12:ea:9d:f9:46:2d:a5:c9:11:60:d8:
ec:dc:ab:e9:20:0f:59:5e:df:ae:d6:c6:e8:37:db:6b:42:d7:
99:61:55:a5:db:86:88:e2:6b:66:3a:2b:2f:29:bd:70:c6:0e:
f8:44:d0:d9:61:38:3d:22:22:68:03:77:ca:58:66:77:15:86:
9f:e8:01:5a:79:68:b2:ec:96:d8:3b:ac:24:61:31:13:49:9b:
35:7d:d6:9b:79:7a:9e:0a:0a:7d:84:ac:34:14:1b:a5:54:88:
5d:ae:aa:4e:ce:e9:b0:51:66:12:bf:de:bc:bf:1f:61:31:c9:
f6:16:ad:95:4c:83:f3:01:e1:4a:d3:47:f1:64:65:be:d7:df:
67:2a:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:28 2025 by rpki-client