Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
File: 2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa (raw, json)
Hash identifier: TnHul4o7xJQm1DQ0C41Vw3HRu2aHL14+dabtu92UmEo=
Subject key identifier: 50:BC:EF:D4:D5:E1:7B:08:5C:0A:04:99:21:B6:28:6B:68:4E:41:17
Certificate issuer: /CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Certificate serial: 010D0C9F432858485CD0324DD2A0EABF05993580
Authority key identifier: 38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 14503
IP address blocks: 161.129.22.0/24 maxlen: 24
2620:13f:c000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:32:4d:d2:a0:ea:bf:05:99:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=39c6e17c-d244-46ab-a355-b757ef5f30b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:b0:f0:d5:64:54:dd:2e:c3:13:49:2a:01:
68:df:da:f8:c3:c8:8b:4f:a4:3d:c8:46:09:75:49:
6a:01:e0:91:63:ba:f7:07:25:e1:f9:6c:74:02:f0:
38:b7:97:b1:3e:24:df:b4:11:48:7b:de:5a:c9:f0:
d4:c4:3f:81:37:53:11:e6:3f:ca:65:87:9a:25:b3:
37:6d:24:c5:e9:ad:91:e5:58:bb:34:9b:65:98:e2:
33:ac:72:4b:22:23:bf:1d:1c:29:a2:00:56:01:42:
27:fa:a3:20:02:0e:f5:da:eb:1f:d7:55:a5:00:ef:
3b:33:ee:a4:2b:40:09:dc:cc:a4:e4:c8:5e:d4:46:
30:aa:18:c5:46:83:50:ef:f1:d3:58:64:87:b8:8e:
74:3c:13:d1:44:9f:81:74:a1:f5:0e:04:84:0c:bb:
fb:d0:d4:30:65:6c:81:f9:9a:21:f4:c9:b4:41:4a:
cd:98:2b:fb:d4:28:59:3a:49:9c:f1:46:4a:b1:53:
a9:03:b0:e1:fb:95:70:b1:c3:df:cc:9a:d6:b0:83:
da:3a:9a:dc:85:cf:0a:8e:5c:14:d5:33:c7:aa:cd:
3f:f1:b0:74:46:49:98:c3:a7:98:a0:54:22:84:06:
6f:2f:9b:fe:f5:94:7d:64:53:2c:0e:8f:99:73:7b:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:EF:D4:D5:E1:7B:08:5C:0A:04:99:21:B6:28:6B:68:4E:41:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl
X509v3 Authority Key Identifier:
keyid:38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.22.0/24
IPv6:
2620:13f:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7f:fa:e4:4f:f9:10:a0:30:91:2d:bf:2c:5d:d8:be:23:9d:
f8:e5:0b:d8:ea:d1:d7:b0:17:f1:c2:95:71:70:92:ab:0c:ae:
bd:7c:7f:bd:7b:38:29:0f:0f:4f:7a:9a:c6:a9:f8:e1:ca:74:
70:8c:14:c9:c2:f8:68:52:1a:ac:3e:36:fa:2c:9e:6b:b8:bf:
29:4f:45:21:68:3c:60:38:69:24:8e:4e:56:b1:04:7e:58:e6:
00:ba:98:0b:95:75:62:be:7f:ab:d2:b3:40:8d:52:68:4c:e2:
2b:7c:08:4b:65:46:34:5e:2f:4d:45:b9:36:ff:28:db:14:08:
11:7c:2e:87:be:45:44:1a:2e:e0:c8:a7:18:be:2b:90:43:b0:
ec:dc:f5:b4:a9:66:b2:67:2a:af:03:28:de:8c:76:b1:4b:21:
54:29:de:3e:28:11:49:a0:c8:ac:81:1a:bc:41:66:4b:74:ec:
51:3d:4d:56:4c:8a:bb:fa:84:f6:14:4b:18:9a:91:29:54:6a:
b6:2b:13:1e:14:7a:9d:71:c9:a7:42:1f:64:af:0d:eb:0b:c2:
bb:e8:7b:f5:e4:a2:80:7d:11:5e:b5:2b:9d:23:ff:8d:54:31:
44:4b:33:a7:46:53:30:b0:c1:e5:88:2b:46:3a:5a:05:df:aa:
8a:05:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:32 2025 by rpki-client