Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
File: c7a9fdea-664c-38e1-be4a-09e48baa862e.roa (raw, json)
Hash identifier: R/HG/QnKQ6QJgxB7Ka5ESH9bB4+/Xlhq/Bw1Vs5QISI=
Subject key identifier: 1A:11:C0:69:EC:61:D2:4E:3D:2E:90:19:3C:C2:12:4B:5D:D2:F6:23
Certificate issuer: /CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
Certificate serial: 010D0C9F432858488DAB539C3D75EC2F38C6F180
Authority key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 9009
IP address blocks: 167.253.136.0/24 maxlen: 24
167.253.137.0/24 maxlen: 24
167.253.138.0/24 maxlen: 24
167.253.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:53:9c:3d:75:ec:2f:38:c6:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=a5fe9bec-3dcb-4f17-a266-2c3aef7d5d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:ef:74:44:2b:89:41:93:da:e0:e4:68:7f:
f5:88:d8:bb:cd:f6:b4:38:4b:07:36:c7:10:0b:de:
ee:63:44:8f:5c:6e:99:39:eb:71:60:a2:54:b4:01:
52:a9:68:79:d2:f0:62:af:d9:95:d5:10:be:09:a9:
87:e3:2f:e9:3e:db:06:5f:a1:3f:37:66:92:0a:20:
f7:0e:20:83:0b:66:93:92:cd:83:02:78:61:44:56:
96:6d:92:0d:ac:c3:83:5d:b3:8a:07:41:9c:cb:92:
10:6f:cd:3e:9b:d5:53:22:fb:1e:a8:fc:11:6b:66:
35:c7:8d:ba:d8:c7:98:02:e2:8a:0a:1d:a3:3c:fd:
61:10:be:b6:9b:28:fd:63:a9:c8:92:47:02:b4:8b:
bd:27:40:80:cd:8e:8f:36:53:dc:d0:06:2f:74:c7:
7a:76:6a:0d:46:d4:94:8b:39:a4:94:1d:83:d7:dd:
e1:34:7f:6f:04:82:fe:f6:eb:91:04:f9:85:ee:8f:
8d:5d:20:e1:89:90:ec:cf:75:56:c6:68:b8:f8:69:
7e:b9:91:bf:ed:96:9d:55:78:88:bc:36:6e:e9:c5:
9a:fb:a6:3a:dd:ec:51:8f:bf:91:ee:3a:f3:b8:8a:
11:30:60:c6:ca:d4:63:08:ce:c6:3f:c5:7c:79:c4:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:11:C0:69:EC:61:D2:4E:3D:2E:90:19:3C:C2:12:4B:5D:D2:F6:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl
X509v3 Authority Key Identifier:
keyid:4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:32:80:54:9f:1d:41:67:64:64:8f:c8:80:b8:0b:e6:26:f8:
27:18:dd:65:05:43:fa:88:6e:f2:60:ea:88:56:83:48:4d:2d:
de:74:da:ea:3c:00:5c:29:ed:d5:28:6e:a5:f7:87:84:5e:f0:
61:d1:40:9a:39:f8:02:26:30:dd:2a:5c:22:19:ac:af:c0:26:
78:f9:dc:df:6f:ab:b0:f2:d8:5a:ab:56:b0:4d:84:97:1d:f6:
cd:41:ec:c9:69:2c:42:b5:05:e5:22:d6:34:9b:af:6f:6c:ee:
58:7c:06:61:87:11:d2:36:ad:37:ca:38:6e:ed:03:87:39:f9:
0b:ee:11:89:f1:d5:0a:65:21:f8:c5:4f:04:f5:c9:5f:e0:33:
11:05:9b:7d:17:c1:a0:e7:1e:48:00:87:bb:55:49:6d:de:1c:
a8:c6:80:d6:94:1a:7a:fb:bf:a4:88:f0:cc:dd:19:6e:2d:0b:
a7:c4:4f:b9:23:7d:4b:f0:49:8f:42:35:82:56:7c:75:3f:6e:
e7:64:b3:55:93:5b:dc:29:4f:ad:4e:94:8d:43:fe:35:64:c1:
6a:11:69:ca:b0:d5:80:9c:ba:9b:7f:96:b7:7c:cb:12:60:e3:
1c:66:3a:38:2a:75:b5:d6:cd:f0:69:f1:93:37:91:5f:1c:7a:
71:60:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:54:55 2025 by rpki-client