Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
File: d41965f6-81e6-3659-8a3f-5c6056d921d3.roa (raw, json)
Hash identifier: 8uClZRfQg53JullCAiJob3S3AOJ+IQU84Hf94FWZW+g=
Subject key identifier: BE:B4:32:93:F2:79:F7:B7:D1:29:EA:36:17:FD:4A:57:44:C4:1D:1B
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865304260882DFEECEA9D5D00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 192.34.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:42:60:88:2d:fe:ec:ea:9d:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=471436b2-5849-400c-9af0-3ce69b2b4c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:1a:ec:0e:ba:b9:2d:7a:a6:4d:7a:ba:7f:
62:1e:76:b2:fc:bb:29:df:05:ef:e1:af:33:f9:aa:
7e:b9:9b:e8:e9:85:78:b0:b5:e9:07:f4:53:7f:77:
54:4f:d4:9c:be:d3:24:82:55:d3:5c:8f:93:38:5d:
ee:cb:53:97:08:1c:51:a3:5c:12:08:14:de:b5:5d:
70:4c:74:f7:e2:42:6b:1e:e2:d4:92:9d:34:8e:3d:
9b:09:1b:a7:cc:f1:d0:6c:03:d8:c8:4c:11:e0:1b:
18:ae:b2:05:67:c1:96:2a:0d:65:d6:9e:4b:a8:8e:
fb:98:a4:c3:92:f4:ad:c5:f5:61:ab:49:21:6f:83:
47:4b:72:75:f0:b0:0d:a2:4a:76:c5:a8:a9:3a:98:
25:86:64:86:76:86:99:11:02:f0:df:4e:14:b7:29:
6a:b1:9b:13:c9:60:c1:ea:aa:e3:ee:03:a6:b9:b1:
a3:9a:14:96:bb:8f:89:c1:02:de:ed:c4:37:63:a9:
56:92:2b:69:71:22:b2:8d:d8:2b:5f:2c:e3:2d:81:
2e:e3:65:75:05:88:43:99:f2:ad:e0:66:40:53:af:
cf:31:ea:b4:8e:73:a6:a4:54:92:c3:34:03:f2:66:
bf:df:b2:ae:ba:8d:57:d9:c3:c4:97:ac:0b:c1:71:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:32:93:F2:79:F7:B7:D1:29:EA:36:17:FD:4A:57:44:C4:1D:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:44:06:f3:e9:fa:e3:5b:3b:f4:a8:a3:a2:6d:04:f5:f2:c2:
f4:36:e3:4a:c1:90:21:bd:2e:9b:17:a7:5e:ba:46:f8:62:b7:
c7:39:df:74:2b:94:da:c7:27:cc:90:86:d6:ef:63:66:28:2c:
71:81:b5:b7:79:f0:da:9f:1e:bd:fd:f9:8b:06:8a:ae:e9:86:
12:b3:9c:2f:dd:74:49:49:2a:47:b0:3d:ae:68:cb:f7:c2:83:
78:7e:b9:f6:d3:ab:a8:ad:d8:0f:79:ef:b8:69:3c:59:b2:7f:
db:20:68:8b:0b:d7:37:85:fd:5b:c7:82:6d:97:be:43:87:3c:
dd:27:98:24:7e:16:00:1f:38:d0:2d:f0:96:19:d4:7c:18:f7:
7a:b6:d6:7f:8f:ea:3b:58:07:d7:92:2a:44:8d:d0:d6:62:50:
5c:95:55:0c:9b:4e:cc:ea:15:f1:e9:39:c5:02:d0:cb:ab:f4:
87:87:09:34:7f:96:df:cc:55:bf:15:79:ab:2d:50:e9:ce:da:
02:e7:2d:58:86:a9:ed:1b:8a:69:9f:51:5b:7f:09:6f:75:57:
a4:05:6d:62:8a:64:c4:dd:2a:a3:4d:b7:a8:d9:e9:fe:7f:1f:
2e:fd:6c:f1:c1:26:68:43:8e:2d:34:d1:99:b3:8a:69:24:de:
ec:48:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:28 2025 by rpki-client