Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa
File: 450c0d21-5700-3ed5-8c33-216c663999de.roa (raw, json)
Hash identifier: SC7fltkFi7q9huWLmSJnHPKLBVGLwhMlgU2YQZDXObI=
Subject key identifier: 36:81:4B:EF:B8:AD:B7:05:D4:71:0F:79:26:83:5A:B6:68:A5:4E:75
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584877792F8255B4B6073BAE7680
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa
Signing time: Tue 07 Jan 2025 15:12:15 +0000
ROA not before: Tue 07 Jan 2025 15:12:15 +0000
ROA not after: Mon 07 Apr 2025 14:12:15 +0000
asID: 203724
IP address blocks: 161.69.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:79:2f:82:55:b4:b6:07:3b:ae:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 7 15:12:15 2025 GMT
Not After : Apr 7 14:12:15 2025 GMT
Subject: CN=28eef1ff-cdb5-4266-8c2b-2a5c049a300b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:ae:75:3b:93:3e:41:5c:00:3f:1d:4e:e5:
dd:6b:96:d0:5a:3d:aa:7b:aa:69:46:e5:a1:76:fa:
db:db:2b:fd:cd:f8:ce:6f:6c:22:6f:ba:ff:54:e3:
a8:a3:35:ba:04:46:74:73:01:e8:51:1f:44:b9:0c:
32:19:08:f4:65:b8:4c:ea:84:a4:84:54:f1:81:e8:
d9:fc:95:73:f9:b0:fc:21:50:c6:21:00:c3:a1:67:
b3:bc:c7:a8:09:20:ae:99:7f:7b:90:14:a6:9c:62:
2b:dd:1b:50:6a:36:b5:aa:d9:cc:ea:2f:84:8e:a9:
be:90:6d:b9:fe:7e:56:03:ea:7d:3f:50:f6:88:16:
9b:8d:c2:62:83:09:e0:55:9d:82:d2:da:18:9c:6f:
ea:9a:30:6b:a7:12:2d:f9:14:75:85:da:9e:3f:fe:
df:18:f9:56:b0:d8:66:c8:3b:12:25:a3:57:f8:7f:
52:dd:1c:bd:7a:59:34:fc:ad:fa:ec:2e:5a:0d:98:
77:34:88:b7:fe:a0:de:c6:70:d0:c4:f9:d7:6e:54:
06:8a:87:95:c3:0f:3a:4d:7d:6f:ad:c6:05:d9:fe:
8e:89:2a:7c:d4:3a:89:42:40:cb:0d:8b:1d:e6:f4:
da:08:da:5d:0b:72:d9:af:c6:9a:50:77:a6:b1:b7:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:4B:EF:B8:AD:B7:05:D4:71:0F:79:26:83:5A:B6:68:A5:4E:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b1:df:20:e6:43:86:b0:14:aa:20:3a:00:9c:c1:c9:eb:2b:
94:d7:38:fc:e7:ba:2d:d9:46:e0:de:8a:c5:ba:e8:53:3b:99:
b4:69:7f:84:a6:29:aa:e6:2d:57:7d:6f:64:85:d0:84:e3:23:
d7:32:39:12:90:92:69:f8:5f:b1:0c:c2:09:29:f5:4a:a7:db:
65:80:6a:fd:eb:d5:1d:59:64:30:9d:d3:cd:6c:60:3a:e3:07:
ec:f4:36:8a:9b:8e:8f:30:d2:9d:a1:1d:d7:4c:23:6a:5e:0c:
6a:f6:4b:de:a8:5d:2d:6f:ee:3e:c5:d9:fe:39:0e:59:e4:88:
92:a3:c2:5c:77:81:f9:4d:25:1b:9e:f9:c3:3c:88:e8:e3:56:
74:a9:4f:f0:3f:b9:d5:db:79:3b:1f:3d:45:a5:97:c0:d7:bf:
8f:81:27:b1:4f:e6:1e:7e:b5:21:28:37:97:55:78:84:63:d6:
3a:cd:cd:a0:d9:78:73:a3:16:64:16:58:b4:34:77:db:87:fb:
76:06:9e:c8:00:f8:35:8a:94:a4:74:7b:5a:be:c8:34:c2:7f:
54:b5:36:7a:a8:4f:78:d4:b0:ed:44:23:fc:e1:fd:d1:ab:8f:
d1:bb:c5:96:79:d3:06:d1:bd:09:db:66:5b:2b:4c:3c:2f:6b:
eb:98:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:57:35 2025 by rpki-client