Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
File: 3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa (raw, json)
Hash identifier: RKWU5QaL3lEOaEJ8h0lcYt5DeUOzanhkMtNFKeADD0U=
Subject key identifier: 38:0A:27:7F:88:D2:7D:1D:A5:60:BB:7F:ED:C8:1A:52:FC:16:44:A0
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303D905796156FCBB4AC80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 184.170.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3d:90:57:96:15:6f:cb:b4:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=117ead53-b120-4c6b-960e-8c65177a364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:1a:8b:5e:ea:96:c9:1d:1a:a2:62:64:40:
ec:a0:ca:10:02:a1:37:15:33:ec:d6:4a:37:db:a1:
b7:92:97:61:f6:67:f5:00:13:55:a2:4f:85:8d:c0:
22:ae:b8:84:52:ee:50:2f:c2:cd:6b:48:0a:9a:a3:
1f:73:5b:8a:57:b0:ed:d2:9c:86:ae:77:18:99:1b:
1c:0a:70:f9:e9:3a:e9:79:e0:3a:f7:56:34:2e:8c:
bf:fc:41:88:fc:7d:27:ca:a5:af:fb:44:9e:86:23:
94:70:47:d9:9a:98:d1:db:7f:69:e0:0e:c6:6d:96:
47:c8:c6:f0:45:e7:c9:a7:49:05:c5:7c:68:2a:de:
c5:35:67:31:ac:67:1d:f7:bb:2c:2e:ca:92:8e:8e:
72:b1:68:99:e5:7e:1c:99:bf:80:47:73:c1:00:c1:
90:24:97:39:f7:92:a4:8b:84:8c:28:5f:86:9f:6b:
99:7a:6f:d4:1e:67:6d:f9:58:8b:1b:2e:00:dc:8d:
d5:4a:13:8f:16:ba:a8:a7:41:d3:9d:27:df:26:c6:
7b:a4:cc:07:7c:db:f5:ce:25:37:8e:73:73:d7:b9:
b6:bd:24:58:97:68:b1:2b:4d:1b:9d:71:e6:07:3c:
a9:93:12:44:83:e1:71:96:ed:aa:68:3a:49:52:d6:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:27:7F:88:D2:7D:1D:A5:60:BB:7F:ED:C8:1A:52:FC:16:44:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
184.170.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:5e:9f:3e:22:35:29:32:f9:3e:c7:03:fe:fb:8d:2a:e5:3f:
10:2c:c1:4b:25:99:dc:25:45:b8:4a:fd:20:f1:dd:00:8c:88:
fb:4b:41:29:d8:9b:e4:e7:1b:6f:f1:66:e6:21:20:63:22:a2:
9d:09:e4:c5:08:48:b5:4c:4a:ef:1c:af:c3:70:bf:60:e1:ba:
ca:08:54:81:56:78:b8:0e:71:98:29:27:fd:20:61:35:5b:1b:
4f:7a:67:67:05:7d:87:5f:38:a9:ca:6d:90:7a:8d:5c:2e:db:
7a:14:72:64:be:c4:c7:6a:03:50:c1:03:74:e2:27:a1:79:ce:
41:1a:e7:40:b1:69:5e:d7:2d:58:d0:e7:5d:8d:e5:46:fc:6e:
ef:96:78:1a:ac:ee:c2:12:12:89:ca:36:03:a0:55:ad:68:0d:
bd:a5:1c:a9:4a:3f:9e:a8:48:59:e5:62:3f:6e:82:be:f6:e6:
78:70:77:d4:da:16:b4:8c:23:7d:14:d7:9e:07:9f:a9:b2:c9:
7b:fb:39:93:e0:3a:78:15:54:ba:90:6a:1d:56:bb:a6:dc:75:
e6:5c:3f:66:7a:51:8a:ec:75:21:6d:ff:86:d9:cd:c9:ed:d6:
59:96:9d:37:f3:f8:15:de:a1:03:33:39:24:54:41:70:b2:5d:
9c:84:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:43 2025 by rpki-client