Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
File: e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json)
Hash identifier: 19M1yp9M6CnnGwikG5ZjG4eDCffRPiHBx6ReBSka5A4=
Subject key identifier: 9D:C6:0D:35:B0:7A:41:24:BD:9E:10:04:7C:18:72:52:96:7D:79:C9
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F4328584824FA870FBE11B1CEE1C65000
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 394625
IP address blocks: 161.129.136.0/24 maxlen: 24
161.129.137.0/24 maxlen: 24
161.129.138.0/24 maxlen: 24
161.129.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:87:0f:be:11:b1:ce:e1:c6:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=757a602e-51da-464b-b015-87f9e24b9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:db:98:d3:99:94:09:1c:4b:1b:dd:4f:29:
65:5a:ef:37:eb:2c:fb:f4:da:42:bc:d5:2c:21:15:
de:84:61:fe:10:b9:4c:bc:98:1a:00:fc:24:90:8c:
a6:0f:da:ac:64:34:e4:12:d5:c7:24:28:55:72:62:
e7:81:7b:e4:88:56:f7:07:5e:05:d0:89:3e:9e:a9:
cc:cf:d7:ec:b3:25:7f:76:fd:1d:7c:10:82:64:f3:
6b:c4:f6:e9:05:92:73:f6:82:6e:d4:05:8d:ea:e1:
bb:16:bd:cf:d2:c2:ca:69:c8:7e:3a:e4:86:50:0e:
25:73:90:73:a8:a2:fb:e1:43:a3:e1:b1:fc:ae:06:
b8:11:02:0e:29:bc:12:19:a3:16:e6:c1:67:30:07:
96:f2:ee:77:d6:ca:bc:6e:9c:d7:7d:8e:08:32:eb:
6b:6d:61:a3:b2:29:46:82:55:98:5b:05:70:34:27:
97:65:d0:8c:22:ba:dd:aa:7a:77:bd:9b:9c:53:86:
66:d3:8f:e2:16:56:19:eb:00:d1:bb:a7:33:4b:2f:
4d:b8:59:78:f9:90:9c:e5:8a:b9:05:ec:bc:9f:88:
7a:c6:6b:43:ff:88:a9:23:f0:9c:43:0f:24:53:af:
ca:31:aa:89:50:0b:cd:77:dc:99:75:f5:4d:1f:28:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:0D:35:B0:7A:41:24:BD:9E:10:04:7C:18:72:52:96:7D:79:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a6:9b:1d:11:d0:2e:e1:b3:d6:f9:a1:b4:5c:04:2f:cd:d5:
62:6a:3c:88:e8:fa:d5:ac:e1:66:88:64:e6:f3:e6:ff:0d:e9:
b8:0b:e7:cf:c3:e6:4c:47:24:90:37:e7:47:bc:bb:bd:bd:0b:
34:19:1b:e7:b0:32:21:ae:75:d0:32:11:b7:6a:09:6e:88:47:
00:66:50:12:4e:96:b9:ee:82:d0:ec:cc:a0:a5:26:13:62:61:
a7:1a:3c:e8:ac:97:cd:79:69:4a:0a:4e:db:dd:07:29:0f:01:
6e:98:26:b1:14:92:dd:99:e9:96:08:0c:b2:10:e1:a0:fe:83:
77:18:ea:37:2a:67:78:bf:7f:9e:24:f2:b3:9b:e5:c4:31:48:
07:ce:57:99:7d:f5:77:31:2b:5d:5a:d4:14:56:3c:75:08:99:
9b:e6:91:a0:cc:f6:1e:52:9b:d3:b5:e4:b7:68:48:45:08:a5:
f6:f9:47:ac:94:86:a8:58:ca:83:e0:ad:39:9a:fd:63:96:c7:
12:f2:c1:d5:61:d2:75:b5:0e:04:fd:79:ef:36:25:49:29:f6:
2a:6f:40:80:f3:e4:21:c8:8e:d5:76:e3:6b:6a:02:0e:23:82:
ab:b5:6b:df:dc:69:6d:7c:1e:d1:5f:54:d1:7d:c8:65:ee:bf:
28:ec:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:29 2025 by rpki-client