Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
File: 984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa (raw, json)
Hash identifier: BVqBLvz00LJ2S80OO4+1wCYeUkc1weGo/3M4QMYHV0w=
Subject key identifier: 90:5A:CD:E0:73:43:6B:9A:CF:4C:AC:05:C9:07:CC:54:92:C5:19:82
Certificate issuer: /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial: 010D0C9F432858486D905097D2915D4C9C9D9280
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 393384
IP address blocks: 162.220.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:50:97:d2:91:5d:4c:9c:9d:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=35772bef-02a8-440b-b7b9-3b3f93771d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:84:e6:5d:b4:57:79:d4:60:ca:c9:5d:06:
cd:b4:d1:f4:4d:a3:76:87:6a:b6:2f:ca:6d:16:27:
42:0f:34:3f:9a:e5:e6:e4:df:a4:0b:45:3e:da:9d:
f6:7a:bf:d4:e8:e5:5c:47:24:a8:ff:46:47:dc:31:
a3:97:f6:a0:07:94:45:57:a8:6e:94:3f:37:8d:dc:
a0:f3:95:58:0c:50:25:68:99:a2:da:3d:86:6f:51:
97:42:bc:b6:46:76:7c:11:c4:3b:81:28:9d:6a:fc:
1a:73:93:25:51:03:08:35:3c:c8:8e:29:bb:e7:12:
f2:50:c7:9e:f3:be:79:47:65:43:31:cb:e7:25:57:
ec:c4:16:f5:da:64:75:5e:de:aa:92:b7:76:d1:ea:
c7:b8:a7:16:f7:a6:68:72:69:d8:a0:db:07:84:83:
45:40:de:d7:77:90:9c:f7:48:89:8a:02:5b:98:96:
e1:b4:ef:8f:da:7c:80:25:8c:59:2a:db:9c:91:be:
24:6b:eb:de:90:76:d6:94:e1:58:21:49:ab:1e:1b:
8a:86:3a:4a:b2:8d:4f:b2:15:06:a8:e5:bd:b0:b9:
2d:91:6a:d2:98:ff:2f:d3:29:28:26:40:6d:ae:b2:
aa:0d:36:5c:58:0e:9c:d5:6a:ab:eb:ff:e7:07:cd:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5A:CD:E0:73:43:6B:9A:CF:4C:AC:05:C9:07:CC:54:92:C5:19:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
X509v3 Authority Key Identifier:
keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a0:26:32:89:c5:bc:67:93:e9:8c:f3:23:43:57:31:ca:48:
9b:59:1a:f3:b3:9b:ae:cd:71:55:f8:87:dd:5b:97:3f:3b:66:
d5:10:b8:4f:26:24:1c:4a:ca:88:9c:7d:75:54:89:dc:4d:d0:
03:d5:17:0c:67:f3:01:5b:20:bf:a7:9f:11:66:91:fb:e5:c9:
33:0b:9b:e1:92:f2:da:ff:13:8d:9f:b4:01:bc:45:91:17:ff:
70:9d:38:8e:41:bc:db:1b:64:db:09:8b:dc:82:c5:0b:d3:0d:
b0:f9:09:9f:3e:66:af:ad:d3:b3:ff:9a:e9:30:9c:4e:3a:f9:
fc:52:4c:10:23:ab:27:00:71:59:1b:f3:6b:69:f1:50:4c:3d:
0f:d1:5a:f9:93:be:f9:af:23:65:fd:a7:1f:6b:c4:83:9a:c4:
ec:ff:32:73:ac:87:7e:ef:a5:f6:a5:48:4a:d9:92:ae:5d:2e:
66:84:08:5f:dc:20:ac:f6:a5:79:66:67:23:93:7e:d4:19:85:
8e:49:cc:b6:72:2e:5d:08:42:8b:24:fa:85:e9:10:60:a0:b5:
8d:6f:1a:a3:ca:88:59:c5:70:dd:58:07:5d:a5:7d:40:b1:b8:
64:44:3b:e5:60:e2:62:38:63:88:1e:88:de:8f:15:fb:eb:7f:
5a:7a:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:01:23 2025 by rpki-client