Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File: 17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier: at67Pi8xqesPCUb6LRxmeikeppj17w9phNKo6UWSZq0=
Subject key identifier: C4:9C:55:E1:F9:57:D3:E5:44:0C:8D:49:18:95:61:93:0A:A8:D5:77
Certificate issuer: /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial: 010D0C9F43285847FF4A4B45E4854CF742CA7EA4
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36352
IP address blocks: 128.254.228.0/22 maxlen: 22
162.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4b:45:e4:85:4c:f7:42:ca:7e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3199aced-d13c-4017-be01-da07d0929ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:c3:7f:03:94:bd:41:ba:10:1d:e0:d0:51:
90:a6:44:b6:99:66:7c:06:9a:55:68:7e:2c:a2:9f:
f2:74:44:e4:11:62:62:37:9a:0c:bd:72:ef:4b:8a:
1e:dd:78:14:87:0e:df:38:1e:31:6a:a1:a2:94:46:
de:26:f1:c6:9c:90:86:a0:95:13:92:da:14:11:00:
4e:aa:f1:2b:89:78:a9:f0:00:c7:1d:6b:65:95:92:
62:b8:d5:31:15:c1:31:59:01:11:ef:3a:f4:eb:b3:
b0:65:dd:64:96:d4:1a:af:89:be:bf:59:87:e8:0a:
e7:60:ea:2b:58:f9:9a:27:c5:6d:fa:f6:71:f1:6c:
c4:e0:cc:78:eb:1f:3e:b6:20:d7:b8:f3:8e:53:f2:
aa:2f:a1:7a:67:e2:23:4d:8a:15:39:ac:99:6a:63:
a3:df:1d:5a:09:15:e6:cb:3b:0c:84:51:b2:06:ee:
40:12:48:58:03:13:95:ba:5e:7a:3f:86:65:ea:21:
f4:21:8d:25:c6:92:86:9f:96:98:54:30:83:a3:0a:
38:e2:fa:9e:52:d0:de:aa:db:77:44:55:8a:88:71:
a8:b4:43:da:e6:9d:5d:09:20:28:8b:72:f3:54:d8:
f9:33:96:70:cd:d8:59:11:0a:56:74:0b:9d:73:8e:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:55:E1:F9:57:D3:E5:44:0C:8D:49:18:95:61:93:0A:A8:D5:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
X509v3 Authority Key Identifier:
keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.228.0/22
162.245.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:42:4b:43:7a:de:76:ab:b8:ff:76:97:d4:e4:ad:e3:23:7f:
7c:e6:4c:76:8d:33:3e:59:6b:97:e3:aa:d8:9c:ec:d9:e8:d9:
a2:f7:f4:94:ce:b5:07:7a:db:9c:2e:9a:28:e0:f3:2e:d1:15:
55:85:ad:33:14:cb:22:ad:ed:0b:51:af:59:dd:a7:45:6d:58:
73:8e:3a:ba:0c:c5:1b:1c:00:35:f8:c9:f7:e2:ee:08:08:cc:
ea:1d:92:83:79:4a:d3:f1:cf:73:2a:4d:71:90:63:db:b3:73:
70:38:4d:db:e3:4b:e3:af:9a:86:50:a0:36:73:00:83:53:c4:
42:74:e6:11:70:84:ba:b1:62:c8:c4:5d:11:c0:4d:21:32:9e:
1e:90:33:9c:f3:96:f3:7f:fa:41:3e:49:75:5b:02:fe:d8:e6:
ba:51:7d:08:bc:7c:0a:78:a6:20:57:ad:23:f5:f8:f8:59:95:
ff:bc:5a:27:5b:18:12:d3:a5:fe:0a:b7:d7:08:a6:da:94:9f:
9c:fa:b4:27:50:9f:80:0f:96:4b:4e:4f:47:ea:66:49:a5:09:
fb:2c:77:9f:9c:7d:01:ee:39:64:db:09:cf:cf:f0:6d:18:97:
46:dc:9e:7c:27:16:4c:b9:0b:0f:3c:a8:94:5b:05:74:59:82:
41:d0:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:39 2025 by rpki-client