Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
File: 6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa (raw, json)
Hash identifier: CXWGexAlXRTvStNIxOANv63niabi6qsQ1XRvAR/phB0=
Subject key identifier: 1A:1C:5C:90:34:4B:D1:B7:70:C9:7B:4B:54:77:BC:AE:FB:A7:2E:C5
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F432858485F9ADBE3B27B617180F37C60
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 159.172.202.0/24 maxlen: 24
159.172.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:db:e3:b2:7b:61:71:80:f3:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=85d934a3-321f-4535-83ac-f6019e1adb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:f4:13:66:fb:99:3d:27:c6:99:d2:06:e1:
e4:b7:9c:b1:8d:22:01:ed:a2:15:d8:6d:7b:fb:5c:
b8:d0:9f:94:9f:13:76:0f:66:95:39:5e:19:07:72:
bc:c8:36:19:77:e1:ac:1e:66:04:4d:4c:90:92:72:
df:36:48:d7:57:ce:f0:82:d4:ba:79:04:cc:65:67:
a1:cc:d8:e1:80:61:58:d2:bf:26:92:5d:54:45:c7:
11:0f:14:a7:92:c2:a8:ef:2f:1a:32:38:e9:cb:36:
c2:75:14:5b:58:74:e4:64:31:92:aa:b0:cf:97:f7:
c6:ef:e7:45:4a:12:65:c2:67:3e:1c:ed:e6:ff:6f:
44:9d:7d:66:6a:9d:57:81:b0:04:2b:3b:16:66:1f:
b8:a7:c7:49:6d:27:12:0e:32:4a:47:de:51:29:57:
0d:8d:f9:dc:e2:2f:27:57:59:d9:25:0b:6c:83:ab:
87:73:ee:fa:cb:8b:58:6f:31:0c:62:dc:d1:c6:fc:
85:2f:e0:75:77:56:ca:e1:04:e4:04:67:7b:f5:c0:
bb:9e:c1:71:b1:fa:a7:94:d9:7b:5b:b6:13:36:85:
fc:a9:f9:ff:f5:e7:35:22:e5:26:c4:42:1e:53:13:
80:0e:6b:b0:c7:1b:c7:15:f6:3d:af:3e:f7:3b:5a:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:5C:90:34:4B:D1:B7:70:C9:7B:4B:54:77:BC:AE:FB:A7:2E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:1e:43:29:d6:f2:ca:18:29:28:81:73:58:94:49:1c:a9:a8:
30:6b:b8:01:3b:10:7c:de:4f:6b:f0:2e:55:8d:ae:4e:3a:c2:
53:50:22:08:3e:13:39:14:bf:43:a8:fd:54:e5:8d:5b:ee:c6:
01:69:b6:06:6c:ff:1a:40:4a:c8:4c:b0:39:ee:66:2f:4a:fb:
47:a5:b6:83:0a:80:93:9f:ca:7f:c6:77:b6:e4:ab:dc:2b:c4:
64:66:87:f8:87:68:3f:9c:0d:aa:0b:16:43:28:49:35:1a:1e:
09:9a:96:1a:86:c3:24:28:31:61:de:2f:85:1b:15:5a:85:88:
9a:6f:05:ea:40:e3:e1:2e:bf:9e:39:b9:ca:80:50:56:38:34:
08:c0:fc:8f:8a:6c:26:11:69:8f:fe:f1:78:27:e7:a4:3a:9b:
e4:ae:bf:ca:a2:52:28:d2:c7:3e:5f:ee:20:d7:13:21:1a:c8:
be:81:4c:02:3a:09:90:54:70:ba:d5:14:fb:85:dd:53:e1:89:
46:ad:d0:4e:76:6d:82:b6:25:94:a7:b8:b4:56:fc:26:14:f0:
66:a4:f7:30:5f:0e:77:d6:e5:f8:ea:3b:03:68:34:66:b5:db:
b8:36:0e:96:98:70:30:87:77:75:62:d9:34:36:d5:96:52:68:
f4:70:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:53 2025 by rpki-client