Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa
File: 13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa (raw, json)
Hash identifier: 0lra81vdj2PZGh1B8xlSLHqz94T+TE7SHcw7p9/N/rY=
Subject key identifier: 99:05:35:0F:6A:09:41:A5:78:A9:0C:07:1C:8D:0C:57:52:21:E0:92
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858487779CB11A01E767A37E58080
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa
Signing time: Tue 07 Jan 2025 15:13:29 +0000
ROA not before: Tue 07 Jan 2025 15:13:29 +0000
ROA not after: Mon 07 Apr 2025 14:13:29 +0000
asID: 203724
IP address blocks: 161.69.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:79:cb:11:a0:1e:76:7a:37:e5:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 7 15:13:29 2025 GMT
Not After : Apr 7 14:13:29 2025 GMT
Subject: CN=d1cfc0ce-d693-4254-9a85-837b9796d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:31:92:63:71:08:67:a6:31:ec:23:f2:5f:
30:72:a7:85:59:53:0b:63:9a:a7:70:29:34:61:9d:
e0:65:6b:9f:ea:08:4b:bb:9b:9a:cd:b8:5f:88:f9:
8f:a5:e2:0a:0f:d2:12:a3:1a:9e:e8:59:9b:2c:19:
36:b8:f9:11:03:cb:71:c2:e6:48:ec:f4:92:55:0c:
a7:a0:35:50:11:5c:1a:75:54:33:2c:dc:d3:b6:8f:
af:bb:98:8c:ae:a7:6e:8b:ef:74:82:00:b4:8a:34:
f0:29:54:66:29:43:2c:cf:24:3c:0b:6c:aa:ee:5b:
6d:e2:96:c3:7d:12:22:95:5b:44:76:72:08:00:fb:
6f:e0:c0:3b:5c:02:19:53:5c:e9:02:18:06:cb:d6:
63:86:c8:8c:ad:68:5b:c9:1f:57:21:88:95:5c:38:
cc:68:a8:cf:d5:c8:1f:bd:fd:db:3a:be:3b:c9:28:
5f:c7:1d:7a:dd:b3:b1:fd:d5:8a:bd:0f:6e:ed:e2:
27:cb:a0:c1:2e:a9:9f:5a:85:cc:95:8f:46:3e:3a:
e3:78:75:0b:ba:3b:db:b1:52:41:d1:19:72:48:ab:
3e:3a:88:60:cb:47:5e:79:47:59:b1:2a:9d:39:34:
aa:3f:fb:78:76:cf:bd:d2:69:d6:4e:83:3e:e5:9c:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:35:0F:6A:09:41:A5:78:A9:0C:07:1C:8D:0C:57:52:21:E0:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:55:d4:00:94:62:96:01:bb:2d:c6:f8:36:3f:39:c4:f8:49:
49:7f:2f:39:24:21:d2:3f:3f:4d:2b:63:fe:e7:04:aa:5f:f5:
1d:ba:a5:81:4a:85:ab:f5:4f:33:e4:7a:71:98:d4:83:81:28:
76:18:a2:f5:f4:a7:a6:b3:7c:d6:87:e3:15:1c:48:cf:19:b9:
f1:de:be:06:9f:96:7b:96:b5:46:d9:de:ae:7f:4e:e9:85:f6:
8f:9f:38:2c:73:c7:d1:37:6f:49:f1:28:d4:a0:d3:1d:c5:25:
58:b0:bf:dd:20:22:74:d0:4f:11:20:83:41:fd:9e:82:1e:2f:
b3:a7:dc:f8:20:36:43:ad:ad:b4:d6:f0:90:48:bd:fd:6f:b0:
0a:0c:e0:cb:a7:ca:26:a9:0b:71:f5:3a:94:06:4b:3f:0b:fc:
14:7d:c9:78:ac:8c:81:24:15:ae:bf:a7:43:b7:fc:17:cc:15:
1e:9c:32:15:96:21:54:6c:a8:8a:61:11:92:72:fd:26:86:5f:
b0:f7:1c:bf:c0:c5:cc:de:bb:6a:00:e7:94:4f:cd:19:73:33:
f9:ba:45:24:06:fa:d1:eb:5b:b7:9d:1f:45:30:f4:63:87:68:
b8:b3:4f:1c:a0:dd:b6:2f:ee:47:ce:fe:7e:6a:2b:79:2b:c7:
b4:48:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:10:09 2025 by rpki-client