Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa
File: a257f246-17a5-3501-b8c6-4b74e9394e23.roa (raw, json)
Hash identifier: RYSXIA9bgLEpBmg5MptUUBlwF4+SfbgO0IuUx+s8JSY=
Subject key identifier: 2E:8F:F7:3F:31:AE:E5:15:21:F3:90:5E:E0:14:83:9B:BA:91:43:F3
Certificate issuer: /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial: 010D0C9F43285847F84F84FD68D234378047ED40
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 54665
IP address blocks: 72.162.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:84:fd:68:d2:34:37:80:47:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=5d72c7ca-8b1e-4e10-8a87-240154bf59f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:74:7e:54:92:37:02:e3:a1:ac:43:a9:73:
ee:89:9c:da:ba:f2:3d:3a:ef:6b:fe:15:0e:83:64:
b3:ca:2d:88:ee:a2:61:10:09:ca:28:9d:71:86:68:
a2:a7:e8:01:80:1e:3a:f5:af:c0:09:9a:0e:df:cf:
71:b5:7f:35:57:51:93:2f:73:9f:65:7c:c4:17:03:
a5:1d:22:fa:ab:51:41:c4:34:03:ff:0b:ee:5b:9c:
82:0b:5f:55:8d:20:ad:77:17:c3:e3:60:8d:2c:ba:
b6:b0:2f:22:f1:cf:76:a2:e1:49:81:97:bc:86:a0:
7d:5d:7d:8d:ee:19:f6:23:8c:8a:39:8b:1b:cc:46:
58:de:25:a2:84:4f:e7:01:21:cd:27:59:b9:6f:1d:
9c:2e:98:22:fa:64:0f:92:b1:06:ef:f7:37:41:3f:
b3:9f:35:e0:ce:73:b0:87:8d:64:03:dd:aa:0f:79:
42:1b:0e:8c:fa:bc:7b:70:3e:b6:f8:53:c7:c5:f9:
80:cb:32:9b:b2:df:24:02:0b:fe:85:69:f5:e0:e0:
4e:f6:9f:dd:99:73:58:7b:aa:76:b4:6c:76:80:e5:
75:94:0c:99:2f:6f:0d:f1:c5:c8:7c:96:11:f8:9c:
16:cf:59:6a:f7:b6:0c:37:cf:bc:c1:2f:d9:90:76:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8F:F7:3F:31:AE:E5:15:21:F3:90:5E:E0:14:83:9B:BA:91:43:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
X509v3 Authority Key Identifier:
keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
sbgp-ipAddrBlock: critical
IPv4:
72.162.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:1b:02:9b:0c:61:06:c1:f5:d8:8e:3a:d7:1b:f5:5b:d6:09:
60:c7:a1:f3:c3:b6:de:fb:c8:94:9f:16:23:54:e0:16:40:81:
16:88:ad:58:1e:b2:c0:1b:3f:49:35:a1:bb:54:ed:8f:3f:97:
7d:b2:e9:34:7e:8b:e4:7d:4a:49:13:27:10:9f:5d:12:9b:a2:
39:bd:fb:2b:22:bf:8b:10:24:2c:d8:db:66:4d:a3:24:44:4b:
45:a5:0d:20:e9:80:99:09:ab:e3:e5:cb:41:24:6c:93:57:9b:
77:1b:05:ad:27:9e:26:bc:e6:34:e6:9b:fc:2c:8d:ee:a0:60:
29:f9:51:6f:aa:e8:3f:06:8d:94:f7:c9:dc:c9:53:15:04:b4:
26:50:d2:8d:e5:53:fe:2b:fa:84:e0:24:b8:74:ff:26:bd:b9:
d4:0b:a0:c6:63:06:7f:08:cb:1c:58:b2:33:74:0f:b4:f5:e6:
b3:b1:28:f0:b0:16:53:dd:a2:e7:a0:70:ca:9c:01:01:bb:9e:
dc:7d:ed:08:ca:7b:ca:1f:08:01:cb:8e:de:66:05:42:57:7d:
2b:ad:65:42:92:ea:25:3a:e6:b8:54:55:8c:91:7a:06:ea:c3:
36:34:40:6b:8e:6e:bc:ce:fa:29:47:f3:3c:50:7f:62:e9:24:
46:e2:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:15 2025 by rpki-client