Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa
File: e7175995-4712-3d55-becf-5960421f1c68.roa (raw, json)
Hash identifier: kz7wmUWQsbwt0gJLFN+baL66eeXGRCvMXtIhisiqm+4=
Subject key identifier: E2:D6:AD:96:E6:AD:18:E6:88:96:44:A5:9B:68:C3:76:98:85:10:29
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858480214F2EB426BD30F68221180
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 203724
IP address blocks: 161.69.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f2:eb:42:6b:d3:0f:68:22:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=fff0fd4a-43df-4060-ab51-6ec94f09a94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:21:a7:ae:31:17:05:a3:b1:c3:bc:9a:14:
56:86:6c:30:11:41:75:fb:6b:a2:aa:e8:9f:9b:cf:
48:cf:6f:a4:31:41:b0:7b:53:86:d5:ac:a1:64:2b:
3b:fe:fc:3e:36:22:0f:be:be:21:2b:47:7d:1d:54:
b9:2a:5e:32:a6:b9:fd:7d:1c:1e:c6:49:c0:54:e6:
69:ce:6b:ed:4f:2d:89:30:89:c4:93:a4:da:fb:4b:
0c:9b:ca:df:47:be:45:8c:35:62:45:e6:ca:e3:37:
cf:8d:78:7e:69:5e:e2:7f:6c:67:0e:c3:5b:21:83:
ab:03:48:80:5a:3f:73:f0:4b:f2:3b:33:fe:81:5f:
72:ef:ef:ec:7f:4f:10:b9:eb:96:5c:04:24:00:e2:
fc:5c:2f:ec:af:f6:e3:64:84:2c:63:b5:33:cd:af:
11:1a:c3:b0:ff:08:38:ff:19:24:17:dc:ac:b9:95:
b4:37:fe:6b:58:b0:b7:e9:87:d7:fa:53:0f:67:a1:
ba:53:fa:e0:f2:73:29:bf:ca:9f:66:52:75:4d:e7:
6d:a9:8b:3e:1f:2f:16:30:8f:7b:c3:af:04:0a:34:
44:a6:d4:2a:81:be:a3:1a:5f:47:95:27:14:ea:97:
40:81:40:7e:87:da:3e:4f:8f:65:95:ea:6d:10:a4:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:AD:96:E6:AD:18:E6:88:96:44:A5:9B:68:C3:76:98:85:10:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5d:ec:f0:36:b7:be:ef:bc:82:68:68:67:63:2b:be:8d:b2:
75:d5:e9:63:df:5c:1a:b9:b2:2f:ad:ac:4e:45:c4:1f:27:39:
80:12:0b:f6:d0:ee:f2:bb:98:cd:3b:63:56:66:2d:64:8e:ea:
63:08:9b:57:eb:43:32:30:03:f3:d7:fc:fa:f6:fb:03:a0:16:
09:43:20:a3:ca:e5:b5:51:28:36:04:11:fe:36:73:59:d9:de:
a3:bb:ad:2c:b6:ec:da:7f:d6:f9:97:23:6a:1b:34:5c:8a:02:
6b:2b:e5:29:39:b9:eb:2e:3e:d1:60:27:ec:5a:57:da:7b:73:
8a:98:72:65:cd:ff:e5:28:96:54:46:da:39:cb:5b:49:aa:8e:
fb:26:74:26:36:37:e6:4b:91:ed:53:0a:c7:a2:fa:08:e5:e7:
e2:c5:fe:8b:cb:d6:50:3f:99:a6:41:94:9b:c1:8d:9f:4c:ae:
a6:37:c9:bb:c8:5a:9e:41:bd:a1:43:48:26:8c:4b:c3:86:c9:
ac:31:0b:d8:bf:33:1e:58:44:5b:f6:70:d8:3b:aa:a0:bd:2b:
88:42:ba:a4:0a:dc:ef:f3:e1:99:52:ae:6d:e1:03:dc:32:d1:
58:1e:62:6e:c6:c4:e8:85:cc:3b:5f:ce:c9:2c:8a:09:8a:3f:
ca:da:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:52:01 2025 by rpki-client