Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa
File: 1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa (raw, json)
Hash identifier: UUjswcouXfyPobclFaDWtkNxg+qD1hPHt1LjnNxLk8Y=
Subject key identifier: B5:31:66:2D:C7:89:44:4E:B9:C3:96:13:58:30:E1:EF:35:16:1A:84
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6012F8F0407F93572BD80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:01:2f:8f:04:07:f9:35:72:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=42a5f3c0-44c9-417a-a2d8-f1a45441a4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:ba:65:85:03:42:0d:aa:ae:3c:8a:cb:57:
2e:4f:ca:f1:6d:b6:1a:3a:fe:a2:bd:26:99:0e:f4:
0e:71:ae:14:83:94:32:68:37:b5:a6:eb:e3:da:dd:
30:dd:55:fd:6e:94:29:bf:90:9b:2e:0c:fe:8b:47:
6e:ae:68:30:30:1d:a4:36:67:16:49:12:48:3e:79:
fa:6e:26:09:a5:86:86:6e:07:23:03:f1:76:c4:82:
27:08:c8:ab:37:78:11:f5:a6:dd:5d:cc:01:b0:ea:
4d:27:1c:e1:8a:3c:f4:dd:6b:1b:65:7b:5a:33:f9:
cd:0b:49:31:4b:47:19:9e:f3:b9:17:aa:35:51:1d:
4b:10:5a:0d:30:b5:a4:be:69:23:dc:5e:ec:97:5f:
ce:b7:cc:e4:36:a2:18:0d:d7:81:5b:75:0a:81:8d:
00:8e:c6:0f:43:da:48:67:01:9b:fa:81:45:bf:55:
ec:61:7e:7f:6b:b2:99:5d:b5:b6:f6:f1:d0:01:bd:
8f:b9:f5:6c:a3:fc:42:7d:92:81:27:74:a2:5e:ef:
84:e7:bf:d4:8e:59:0e:72:8f:37:ba:01:67:98:5e:
5e:ac:00:b5:bf:17:a6:33:b8:fc:62:31:22:6e:65:
33:ee:49:96:ef:8e:58:d3:25:22:ae:5a:aa:87:0d:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:66:2D:C7:89:44:4E:B9:C3:96:13:58:30:E1:EF:35:16:1A:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:dd:f0:7f:0f:70:96:8a:dd:63:52:a6:fa:35:29:20:41:90:
f8:56:44:c9:1b:f5:41:d4:ed:46:0f:00:0e:b5:77:9a:bc:1a:
99:e0:27:51:43:9e:bc:7e:b3:b8:64:5b:bc:62:b0:83:1c:cf:
10:45:55:61:28:71:54:14:a3:8c:d5:70:a6:22:41:45:3c:ae:
9a:72:50:11:0e:75:64:6e:22:8d:5d:09:59:05:ea:92:c1:cc:
aa:1f:5e:83:b7:2e:18:f2:a8:bf:72:45:a0:71:81:9c:b6:bb:
e1:2b:73:f8:a0:4d:23:a1:46:4d:07:5f:7d:cc:bb:f7:4e:71:
aa:aa:6e:aa:40:f2:83:a9:45:fc:28:f4:61:5b:1e:e2:2d:23:
1c:ac:bc:96:ee:f3:e5:58:32:5b:08:e8:d1:96:34:93:73:d8:
49:b9:73:6b:90:79:4e:4c:67:6a:4a:3e:ba:94:77:f3:90:67:
14:23:98:e1:f8:9e:6b:08:c4:ef:5d:fc:3e:16:da:27:f8:8b:
ad:f4:9f:a4:30:60:4e:00:02:07:4e:2d:09:aa:83:ce:1a:7e:
a8:be:91:08:a8:e3:1f:62:f6:83:1b:2d:52:9c:9f:24:b4:c5:
11:88:f4:e4:93:73:d2:2d:fb:a6:80:13:1f:01:fb:98:fa:91:
3d:1e:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:03:42 2025 by rpki-client