Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/5f27c3c9-9250-3b0b-b4a1-eeeb5c3a9eec.roa
File: 5f27c3c9-9250-3b0b-b4a1-eeeb5c3a9eec.roa (raw, json)
Hash identifier: RIRpGce977Cwmr5i9l8ICmQ2TF2+Vjnx2kniCsfBJ1w=
Subject key identifier: 3F:84:66:E7:6F:05:5B:A2:EC:78:1C:D6:DD:45:E5:51:20:77:6E:3F
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858481F6533EDBA6296B6E317D680
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/5f27c3c9-9250-3b0b-b4a1-eeeb5c3a9eec.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 21743
IP address blocks: 144.168.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:33:ed:ba:62:96:b6:e3:17:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=931a78df-d979-4dd9-b137-d64fa6e67cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:8d:8a:79:aa:1c:03:75:62:4b:3e:3d:4c:
73:e7:13:9e:88:6c:e8:b2:28:90:2f:11:f9:90:58:
ea:49:46:44:53:24:08:32:ea:44:c3:14:5b:78:9b:
38:88:df:ce:04:1e:f4:d9:c3:11:64:eb:b5:fa:2c:
d7:e4:1a:95:d9:a8:6c:c1:bd:1a:9e:5e:50:95:93:
d3:67:6e:46:4e:a0:d2:6d:1c:f8:de:a3:d7:61:21:
fd:41:04:50:cc:d2:28:a4:4a:35:c5:53:67:cb:a1:
96:0f:14:52:30:1f:62:aa:71:16:6e:5d:14:28:aa:
3a:21:af:45:87:6b:ae:9e:ca:e5:43:c3:46:38:57:
c2:a5:96:e5:7c:46:e8:b9:97:a2:c0:7b:72:e7:40:
16:04:65:62:fb:5e:23:14:a4:ae:d9:1f:48:89:bd:
6b:74:69:02:9b:7d:e6:02:5d:90:f1:36:49:99:df:
a9:68:be:c8:8b:e6:bc:40:1c:46:b3:b4:a4:38:51:
13:a6:5a:69:b0:63:16:c4:ac:ce:19:9c:b7:de:1b:
fa:12:b6:91:4a:69:a8:b7:f1:23:c0:cc:ce:e4:c9:
72:16:ae:59:02:76:01:0e:3e:7a:98:5c:32:70:3b:
d5:fe:b5:63:f2:ba:f4:f9:38:37:b8:80:ed:69:87:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:66:E7:6F:05:5B:A2:EC:78:1C:D6:DD:45:E5:51:20:77:6E:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/5f27c3c9-9250-3b0b-b4a1-eeeb5c3a9eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:58:48:d4:a2:d0:86:ba:9c:9f:85:89:85:bb:46:58:6d:c1:
36:c1:eb:52:3b:8e:17:b5:17:76:4d:5b:04:54:4f:7c:ea:3a:
1c:76:22:06:7a:21:cb:75:df:7a:88:0a:74:7d:80:07:1b:d0:
44:c8:b9:4b:d6:c0:f8:1a:12:db:e3:99:ea:77:9d:ec:4a:82:
7f:41:91:8f:3a:46:44:02:19:d7:d9:4e:f2:42:29:ff:c6:ec:
e7:c9:cc:ca:c4:31:d5:82:f2:fb:39:cb:0d:8e:4b:4a:e1:8c:
11:e6:25:96:7e:83:53:6c:b0:29:f4:a7:d9:79:65:50:95:03:
e5:54:49:c1:c3:4d:ac:b7:bc:7e:87:b2:f6:a8:58:97:40:48:
01:85:dc:38:77:c3:1f:4c:a0:e2:8e:9b:0b:fd:ad:ed:d8:98:
f1:56:19:6a:e6:6c:37:7b:15:28:a1:d4:f4:55:26:b2:f8:4a:
e3:62:69:13:f3:15:11:89:72:a3:c8:f3:91:8e:0a:a5:0f:c5:
2f:48:6d:18:34:a2:92:a5:98:fa:59:7c:cb:12:3e:98:52:7f:
25:e9:ac:ff:f2:eb:6b:9a:93:e7:96:58:1f:31:5d:cc:34:23:
81:b7:b7:b3:42:89:53:84:d4:41:f4:3a:9c:de:77:61:74:c1:
83:24:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:53 2025 by rpki-client