Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa
File: 28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa (raw, json)
Hash identifier: GKy+xF/JzIa+pdvV/S0bu7O4yOwDLehKTvzBXexmMfE=
Subject key identifier: 4A:19:2A:C2:3E:22:29:07:5D:C5:CE:BE:7B:FD:F7:1D:34:89:5B:8B
Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial: 010D0C9F432858489075EA5B8CFB5693A8998AC0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 7029
IP address blocks: 162.254.0.0/21 maxlen: 24
216.185.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:ea:5b:8c:fb:56:93:a8:99:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=5e68db70-a8c3-4061-a694-ee19f3a82240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:19:4a:c2:1a:df:95:5f:89:71:3b:73:df:
5c:83:99:25:49:eb:ec:21:d1:24:21:64:0d:1e:bf:
79:4c:6e:0e:57:d8:b1:9f:9d:f9:6b:79:b3:20:84:
81:f8:eb:eb:af:a8:45:bf:0b:e0:3f:a2:b1:eb:41:
46:9d:72:a8:8b:b5:b6:b1:2e:04:fb:af:ac:e8:36:
9b:55:6b:43:c0:1e:d8:ab:4e:1b:02:8f:b5:3f:b1:
64:7d:8e:50:70:3e:44:e9:63:da:0b:c3:68:36:92:
62:e8:35:84:36:b1:cf:35:04:e5:c6:45:9d:c4:11:
7a:d9:2d:a9:06:e0:f8:4c:e0:ec:ec:e0:0c:34:d0:
e8:96:39:f9:f4:a0:d0:7e:94:48:eb:3a:11:c1:6b:
c3:4f:72:52:3b:0b:ac:60:8d:a9:19:80:c4:e3:5a:
4d:ce:25:05:60:98:57:ea:0f:ff:91:0a:dd:b4:fd:
af:0f:bf:ef:5c:2c:b3:a1:71:bf:9a:7c:49:e5:4f:
8d:d7:bb:7c:70:f7:7a:97:66:ce:54:75:70:24:d0:
42:40:20:1c:5b:63:bf:2d:0f:92:2c:13:ae:31:b2:
8c:36:79:dc:dd:a6:69:1d:43:38:63:b7:ae:0c:60:
f2:71:30:76:79:7a:2a:3a:0f:ac:ba:dd:c2:25:1e:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:2A:C2:3E:22:29:07:5D:C5:CE:BE:7B:FD:F7:1D:34:89:5B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
X509v3 Authority Key Identifier:
keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.0.0/21
216.185.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b2:ed:5a:b3:98:b0:1e:81:b5:d8:4a:d9:f9:a1:58:31:a9:
78:4c:e6:b9:99:a7:ed:f3:7c:c6:62:80:39:13:d2:bd:08:48:
24:ad:6f:df:e8:a3:7f:05:35:54:09:67:6b:de:b9:a6:4f:a3:
71:06:b6:e0:2b:66:c5:6c:6b:3d:70:b8:70:09:94:f8:d0:3f:
eb:45:27:17:34:de:df:a6:a1:ae:9b:be:2d:da:d1:0f:9d:73:
71:86:fe:68:29:69:aa:80:7c:85:38:62:26:db:b2:9a:5c:66:
68:d6:d8:6a:22:09:88:8b:02:95:e9:6c:e5:dd:28:1c:e4:45:
b9:10:bc:26:08:11:81:93:23:33:16:60:5b:a2:c8:c0:d1:cb:
56:b6:ce:7d:8a:5f:6e:23:6b:3f:c1:78:96:29:c5:dc:a9:e1:
78:61:92:0e:14:56:c5:33:06:7e:c8:29:15:56:cc:e3:85:a2:
55:2c:a7:5f:8d:03:79:ba:fc:e2:89:94:f8:9d:fd:53:24:39:
52:c1:f7:20:02:40:d9:04:f8:b1:89:d9:a9:6f:57:48:f8:cf:
d8:94:2c:05:64:e2:c0:9a:4b:f9:c6:e2:ee:ab:8f:35:68:fa:
76:3e:a2:09:66:a9:90:9f:21:fb:82:dd:c7:f2:5d:e3:e9:e3:
de:8d:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:17:04 2025 by rpki-client