Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
File: 7774879b-9330-3b7e-ae8b-286b0014a62e.roa (raw, json)
Hash identifier: SjXopWR4iUj++WTF2O2dmTjHuufG4TUJrJjBcEJX/0c=
Subject key identifier: 83:DB:C9:28:92:7E:1E:55:C7:24:32:C1:56:2B:CC:26:A7:D1:78:3D
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F4328584806450B4ADF517488878D6B80
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 202
IP address blocks: 161.151.162.0/23 maxlen: 24
161.151.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:0b:4a:df:51:74:88:87:8d:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=3f4c5559-375e-42c7-8dbd-2afe33d33ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:44:7d:68:39:9e:d1:63:b5:9c:e6:b4:ac:
bc:bb:68:31:4e:bd:e8:5b:66:ee:5e:83:95:cf:f1:
26:ef:11:89:6d:b9:be:55:9f:8e:33:ff:9b:29:f7:
e3:e1:83:43:4b:f2:d9:ce:10:f4:4b:6d:c9:63:9e:
7c:e6:15:db:8e:68:1a:8f:c0:e3:93:bd:51:14:96:
3c:54:15:c9:4f:ac:9e:69:61:cd:b1:61:33:f6:1e:
b8:56:9c:94:81:08:3d:1c:5f:03:cc:bc:ba:62:c8:
23:16:c1:66:f3:54:09:75:97:89:34:72:df:47:e7:
ef:84:f6:90:54:05:8b:7c:7c:e9:08:1c:95:f2:01:
9c:d7:de:6f:c3:41:cd:b3:9b:c8:f0:3e:2b:e4:ac:
5d:21:96:bc:32:6e:07:62:d8:b0:d2:d7:0c:96:f2:
84:91:82:b4:28:47:32:a1:76:4d:9e:43:ac:31:6e:
ab:db:05:0e:e8:bf:47:c5:35:9f:68:8b:7e:fe:a1:
2f:60:ce:18:41:40:2c:2f:e9:15:6e:c5:1d:a3:63:
1c:7f:8a:2d:45:08:99:b4:f1:8a:21:ef:ba:f7:b5:
fd:0f:ad:92:5c:06:26:e9:df:7d:bf:3d:3b:e2:20:
ef:3d:16:f1:93:cd:28:e0:57:b4:31:a7:24:b4:2a:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:C9:28:92:7E:1E:55:C7:24:32:C1:56:2B:CC:26:A7:D1:78:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.162.0/23
161.151.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:6a:d3:33:f4:39:2d:fe:09:91:ab:fb:0a:d1:57:89:09:7d:
f3:31:ac:1c:1a:a1:d1:12:2a:d4:27:81:76:8c:73:94:8e:97:
f9:fa:a2:7f:01:fe:24:87:aa:4a:a1:c7:9c:87:c6:67:c7:50:
ac:c9:a7:3e:76:bb:d4:53:ba:1b:46:da:18:bd:15:bb:8f:64:
58:fc:0c:e0:6e:15:a9:c0:1f:98:77:d9:a9:24:27:a5:86:d2:
64:a4:10:47:b9:5e:f2:21:e3:6f:2f:79:85:bd:fc:ae:2e:04:
e6:ed:a8:6d:97:58:df:9f:1b:6f:44:cc:d4:80:f5:96:ac:6f:
59:c4:c6:98:38:8d:4f:43:d5:56:7e:96:fd:74:9f:f1:63:66:
94:33:98:df:ba:c1:b1:e2:40:30:cd:9f:a5:83:3c:af:c3:bd:
ed:3a:0d:e4:53:ae:17:45:b1:59:b3:74:a2:5e:c1:06:1a:35:
a3:f9:b9:6b:3d:ad:48:5c:2a:0f:e1:09:87:ad:5b:70:56:53:
0d:7d:b4:08:85:4f:1d:da:59:cf:95:d4:14:d0:85:44:56:3e:
dd:03:7d:84:c4:b1:c3:91:a6:b1:c9:6a:91:a0:8e:a2:b7:b0:
d4:8c:5f:d1:5e:8b:78:33:de:18:b9:59:51:29:79:5b:d7:a0:
07:5a:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:26:47 2025 by rpki-client