Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa
File: f408e666-d679-305e-ab55-c3c09f6ad3fd.roa (raw, json)
Hash identifier: T/ktOuPyLfWJDFaXlNU9L5W2qaO0Wq3/qfZaZnwF4Q8=
Subject key identifier: 5D:B0:B6:F1:A2:E7:FD:18:7D:AB:32:7C:D7:B7:28:BB:60:B6:23:3C
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F432858486530424D03B857A260343E80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 192.34.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:42:4d:03:b8:57:a2:60:34:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=f8d2b54d-9834-4ea8-bee9-1be0fcf85aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:b0:f9:be:35:b2:da:c2:91:9e:7e:1e:45:
66:e0:83:6f:81:40:cd:4b:1b:74:56:21:21:2e:1e:
58:a7:44:3e:4d:5c:80:9f:2e:56:7b:27:05:02:fa:
ad:93:f0:11:7a:a6:a0:7d:1f:4e:4b:17:1c:8e:f5:
5e:95:38:29:f7:af:10:74:f5:c5:1e:be:09:bc:2d:
1b:b7:aa:01:ee:72:9d:b9:2e:0c:7f:d9:ef:6f:2b:
72:ac:69:d1:bf:47:49:46:fb:9a:8c:40:fe:32:b8:
70:a4:76:43:03:32:bb:d1:04:91:2e:22:68:35:f7:
24:96:f6:71:e5:3e:42:9f:18:25:69:80:1c:3d:68:
7f:6d:cf:62:09:76:b2:04:6b:b3:4d:66:13:e0:45:
75:71:dc:e6:d5:ae:8c:67:29:33:06:f4:40:47:97:
a8:cb:7a:5e:7b:5e:68:77:b8:16:8f:b2:28:c4:67:
e4:7b:98:78:4b:ef:e1:f5:77:87:b1:fc:9a:72:b9:
84:eb:b3:19:f8:4f:d0:22:2b:4f:71:8d:52:96:7b:
5a:92:5f:c0:86:ab:1d:ce:68:18:6c:c8:55:0c:9c:
7b:5f:24:37:d1:74:ea:62:c4:c9:1f:4f:43:74:56:
f1:fc:63:9a:e3:25:14:e0:d6:19:4f:8f:7d:4b:19:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:B6:F1:A2:E7:FD:18:7D:AB:32:7C:D7:B7:28:BB:60:B6:23:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:13:2c:2b:dc:fa:00:83:aa:30:d5:30:82:77:4b:1a:7b:aa:
7f:92:89:e8:40:6d:b2:c0:18:50:10:3c:56:e4:90:2b:a3:ce:
d4:6e:f1:0e:09:d5:28:33:39:7f:0d:be:b8:b9:f4:c0:7a:90:
ab:de:11:aa:77:6f:9f:1c:45:bd:75:6d:a3:87:24:9a:90:17:
49:ba:c3:7b:b5:b9:53:03:62:17:dc:89:c2:cb:b6:c5:e1:ea:
8b:c6:04:8e:70:c1:36:b9:55:0d:80:4f:94:9e:c0:06:e6:91:
bc:80:72:56:28:ce:d2:1c:6c:5a:78:44:e1:55:5b:01:40:6d:
74:41:fd:7f:25:54:b2:b7:73:6c:03:cb:fe:5e:83:a6:2e:32:
3a:62:ce:2d:0e:55:b7:86:41:bc:29:2a:2c:7d:9f:f7:0e:d8:
21:ed:c1:79:02:7a:65:59:0b:eb:a9:9f:3f:ae:07:99:92:fc:
13:07:47:3a:f2:a3:3c:3a:3d:1e:21:5b:41:cf:2e:b4:4b:c9:
da:60:e3:63:7a:86:ff:14:26:af:b3:22:68:2c:50:3a:e5:70:
b2:1b:46:db:f5:6c:73:6d:8e:27:05:57:ed:69:32:d6:51:52:
ba:90:3f:e4:8f:8d:6b:ef:9b:71:a9:d0:61:4b:59:be:12:9c:
34:12:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:22 2025 by rpki-client