Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
File: d97f986e-cea3-3138-8288-1c3a31bda324.roa (raw, json)
Hash identifier: Lbw30dd/sBiGYYQMliQyjpmYrvAl7ozN+QMANK69QTI=
Subject key identifier: 63:1F:9C:60:4B:6C:73:62:70:FF:BE:26:0F:1A:D0:11:5A:1B:C4:98
Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Certificate serial: 010D0C9F432858487A2082DE06D01D5CCA47EA80
Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 800
IP address blocks: 162.120.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:82:de:06:d0:1d:5c:ca:47:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=9a678d77-852e-4df7-8f54-1a9d97bf6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:ef:03:35:7f:3a:bf:8f:a7:77:a3:33:58:
fb:10:63:bd:16:19:43:33:39:bd:ef:3b:b7:65:27:
4f:a4:e6:dd:08:1f:94:14:08:41:f3:6d:68:3e:89:
ba:fb:11:57:b7:6e:58:a6:65:c6:e7:ae:75:fe:37:
14:36:f1:f5:a5:40:47:9b:e9:24:9e:35:b0:e2:c0:
d5:ec:3c:5a:5c:f8:e1:cd:6e:f2:7e:55:8d:31:cc:
07:bb:3c:97:ba:72:9c:86:db:af:47:25:f3:74:e4:
f1:98:8e:92:5c:47:57:33:7e:77:b4:63:06:52:ea:
8f:14:0f:a8:bd:3b:52:ef:12:19:cc:d6:28:84:7d:
8b:24:09:89:c0:35:e7:66:87:25:d5:da:fd:ad:0b:
89:8d:ce:8b:1d:5d:7d:24:e9:73:a4:a5:1e:1c:93:
e0:30:f9:74:cb:f4:40:03:4d:32:ca:33:fb:2c:77:
67:8b:c5:16:1b:9a:a1:4e:e9:05:d3:c9:72:6f:84:
e9:b7:c8:28:ac:e7:f6:47:c3:dd:04:f1:c0:cc:02:
bf:11:be:67:31:40:34:c8:49:19:4d:0e:b5:26:61:
69:ca:59:a5:5b:c7:cb:0f:2e:14:11:a2:31:76:d5:
5f:b3:e8:99:b4:76:e9:dd:5e:6d:6c:e3:3b:54:1a:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:9C:60:4B:6C:73:62:70:FF:BE:26:0F:1A:D0:11:5A:1B:C4:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl
X509v3 Authority Key Identifier:
keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.120.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:75:ec:17:9a:6d:bf:36:c5:7e:c5:17:de:82:d6:94:5b:78:
48:d2:a0:b9:51:49:3c:32:4e:1f:2a:67:94:98:29:0b:35:6b:
2e:69:4a:35:6c:49:c9:40:74:3f:73:62:d9:1a:c3:44:0f:5a:
b0:ab:fc:af:dd:d2:e4:a3:fd:f2:74:ba:81:1e:6d:20:32:97:
68:c8:4f:89:ed:51:5a:a4:42:ce:61:f0:84:c1:b0:65:e1:91:
8a:f2:a5:48:39:34:e9:b7:15:af:39:9d:ba:3e:ff:69:bd:0e:
82:4b:e2:dd:73:d5:1e:7f:2e:f8:ac:dd:52:55:12:d8:63:57:
5a:6a:ce:ae:bb:f3:da:0b:30:86:e3:0f:8e:17:ae:63:b9:f0:
9e:c7:36:7d:bd:c9:69:57:85:d8:e2:e6:55:37:f6:14:11:13:
33:95:93:dd:5d:0e:31:ce:a8:d1:57:5b:76:8e:6b:18:12:59:
52:54:d1:5b:75:2f:9a:6c:9f:67:3c:a9:4e:07:a4:7f:4e:e1:
b4:51:2b:90:38:8f:93:12:9d:24:54:68:0b:20:fc:bf:19:87:
27:bb:78:2c:58:5b:a4:3d:76:9b:58:2e:06:ad:44:33:8a:92:
cf:75:a7:32:c6:dc:85:93:69:78:82:fc:fe:3d:6e:94:8a:f2:
ac:fc:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:30:23 2025 by rpki-client