Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
File: b822bf14-e184-3b36-81d3-0ada1b344013.roa (raw, json)
Hash identifier: 7XXN528VeeCuYSBJpFL0HtcsXRRbZpzHlllyt0Fxxrc=
Subject key identifier: 46:87:E3:ED:7B:07:A7:F2:FF:FA:E4:04:05:85:8E:54:C7:D6:6D:A9
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858487778E7389AEB7259EE8F0A40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
Signing time: Tue 07 Jan 2025 15:11:41 +0000
ROA not before: Tue 07 Jan 2025 15:11:41 +0000
ROA not after: Mon 07 Apr 2025 14:11:41 +0000
asID: 203724
IP address blocks: 161.69.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:78:e7:38:9a:eb:72:59:ee:8f:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 7 15:11:41 2025 GMT
Not After : Apr 7 14:11:41 2025 GMT
Subject: CN=ff1f1074-077c-4503-bf25-b0e3939ad475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:4d:18:e8:c3:38:df:3b:01:25:ec:a4:e5:
31:2e:6c:dc:36:05:13:26:39:e2:79:cd:93:c1:33:
4d:b5:5f:98:9b:a1:d3:df:35:ed:37:7c:ed:fc:e7:
44:03:35:0d:b0:35:5d:0d:ca:f8:15:2f:98:20:fe:
f9:6d:65:13:30:96:39:de:e8:92:3f:90:9c:7d:fa:
80:29:48:7e:af:51:8c:88:40:0d:f3:d4:4f:b9:2a:
ff:4f:b7:c9:33:86:c4:31:39:80:51:5c:0d:12:4c:
c8:3b:94:1d:95:3e:c9:ba:b8:94:07:65:a6:77:e4:
65:02:06:da:20:7f:db:ae:01:a2:e8:fa:88:08:f5:
e0:b5:c8:ac:3f:6d:18:1e:5a:76:ed:bc:0a:fc:6f:
fd:9d:8b:f1:69:89:4c:2a:92:bc:9b:55:a7:07:92:
26:f4:86:0a:4d:fe:37:26:87:85:77:6c:ef:ed:fc:
c7:c9:28:68:75:2f:0c:8c:1c:d9:a5:50:ec:6f:6f:
47:8a:15:83:ff:aa:df:c5:6d:de:aa:b0:fe:7a:38:
61:b6:34:cb:b6:0c:3f:80:2f:2b:93:a3:84:12:d9:
72:3b:89:e6:ad:8a:2a:a4:d6:6a:1d:66:2c:83:31:
ad:65:b7:21:58:26:22:05:b2:da:09:06:16:7a:4c:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:E3:ED:7B:07:A7:F2:FF:FA:E4:04:05:85:8E:54:C7:D6:6D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d2:d7:1f:23:a6:bd:8f:49:58:9a:fc:6a:90:2a:7e:18:cb:
c0:00:b0:ae:5e:3f:cb:ce:e7:5d:a0:d4:ec:0b:e4:8f:91:16:
13:53:31:09:cb:c9:a6:25:f5:f7:82:96:ee:83:de:11:c7:10:
32:ce:82:b1:4b:ac:1a:49:fc:2f:44:c2:30:9a:53:fb:1c:3b:
41:f4:26:50:be:57:58:4d:80:9e:8a:46:de:57:5b:43:c8:a9:
94:c1:dc:14:01:95:ca:15:5e:46:ed:40:ae:f8:84:01:f4:0f:
f0:34:fe:5b:1b:7c:59:1c:be:78:6c:c0:67:df:7e:8a:44:cd:
56:e9:07:22:ec:94:da:e2:98:ca:d1:78:46:45:a3:63:db:a1:
f7:83:82:0d:5a:24:4a:8e:46:1b:b4:ca:a6:c5:88:58:9a:00:
72:53:95:af:e1:51:2c:a3:d5:1c:0b:3f:96:38:9b:1b:71:ba:
24:c6:44:f1:89:14:65:39:7a:94:61:ca:10:bf:47:75:ab:15:
54:8a:00:3e:90:7c:be:82:9e:52:f4:4b:d7:c1:f7:bb:08:11:
b5:be:e1:98:8a:e3:f6:d6:5f:b2:3a:98:14:17:51:6d:ba:76:
12:2f:de:d5:4b:95:1e:bd:7b:58:a1:bf:ce:d1:a6:08:54:bd:
b4:66:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:35:56 2025 by rpki-client