Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/3216d78e-dfb2-383f-86f0-e285b0bfe6f6.roa
File: 3216d78e-dfb2-383f-86f0-e285b0bfe6f6.roa (raw, json)
Hash identifier: AlKPTuVaN6B+fyi+PpbGisMCD88KgB+Opv123S4JDU4=
Subject key identifier: 4A:EE:0D:27:0C:11:2D:1A:3F:24:E6:37:B4:A1:4E:BE:66:91:02:DD
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F432858486695BFFA46708335C75FF2B0
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/3216d78e-dfb2-383f-86f0-e285b0bfe6f6.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 62164
IP address blocks: 142.147.96.0/22 maxlen: 22
162.251.120.0/22 maxlen: 22
172.96.8.0/21 maxlen: 21
192.188.88.0/24 maxlen: 24
204.10.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bf:fa:46:70:83:35:c7:5f:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=98f18477-1d09-4ada-bb84-c36359da12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:43:71:6b:7b:d2:b7:2c:dd:ac:6c:72:b6:
bd:e3:dd:62:42:fe:62:57:a4:24:13:f9:5d:e8:b6:
68:98:c0:8f:0c:13:c7:8a:09:a9:59:f2:ba:b9:69:
10:1d:80:51:ef:55:48:ad:7a:c0:11:3b:be:cf:29:
52:80:7e:2e:37:5b:28:02:83:12:32:91:c7:45:a4:
6e:9f:68:32:3f:4b:92:a4:4e:70:3f:97:78:b9:49:
f7:78:d4:9a:40:25:6a:51:2c:48:4d:6f:9c:f5:85:
fb:07:40:05:b6:5d:67:4b:e8:51:9c:b2:a8:b1:15:
33:49:44:0f:64:5b:1e:54:eb:79:6c:b6:13:b0:ce:
2c:4f:d8:b8:81:cb:28:89:9e:70:9b:b4:6c:3f:7c:
94:3c:3a:a6:d0:d9:28:9a:7a:bf:c7:4a:09:22:f4:
dc:80:16:f3:1f:e7:4e:d9:d1:76:e4:67:ee:41:42:
ee:04:8b:8a:50:de:8c:a2:0e:9e:ff:67:33:03:5e:
bf:73:b1:53:f3:66:f9:11:fb:7a:c8:ed:fa:a8:99:
77:4e:0f:0b:ff:79:33:38:4d:02:ca:f2:ae:7c:d1:
e6:f8:04:7e:d7:1f:25:7b:9d:00:cf:b0:d7:96:5b:
a9:14:a1:3f:38:87:63:91:6e:be:d1:17:22:bd:26:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:0D:27:0C:11:2D:1A:3F:24:E6:37:B4:A1:4E:BE:66:91:02:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/3216d78e-dfb2-383f-86f0-e285b0bfe6f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.96.0/22
162.251.120.0/22
172.96.8.0/21
192.188.88.0/24
204.10.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:44:ae:52:17:7f:21:8e:48:d8:f8:0a:83:22:df:63:8f:91:
6e:b3:33:23:9f:a8:fb:37:32:bb:52:63:f2:0f:10:7e:ae:df:
eb:7a:8f:44:77:c9:7a:5b:81:f6:60:5f:e2:97:0f:9c:69:f3:
5f:8a:d6:2c:b6:56:1f:21:af:1c:08:9b:ec:da:a3:ea:11:90:
79:ca:1d:e8:df:f5:9e:d2:42:4a:1e:6a:ee:63:34:c0:b5:e2:
5f:e2:30:e2:ee:e9:31:3c:aa:c0:8e:e9:44:8b:a4:45:55:ec:
e8:49:05:0a:f7:bf:92:52:97:5a:26:59:8b:4c:ec:30:ea:59:
10:11:14:3a:f4:96:59:95:36:74:4e:ed:62:45:15:2b:dd:9d:
aa:d2:02:10:86:2a:c5:03:5e:31:39:70:77:35:42:65:32:21:
a8:b4:f3:87:43:42:93:88:bd:87:d2:36:45:47:48:08:80:97:
78:e1:d9:5f:61:67:f6:ea:e7:e7:91:86:b7:d9:dd:0d:bf:8d:
9b:f9:a4:f2:1e:60:b8:49:33:ec:10:f4:03:8d:9d:ab:46:d4:
15:33:a1:49:bb:c4:97:02:14:36:ff:b0:a5:c2:56:1b:a7:9f:
c9:b9:0c:29:43:62:0d:17:6a:10:a1:ee:ee:1f:65:9b:7e:f8:
2b:c0:2d:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:09 2025 by rpki-client