Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa
File: 86736a96-ae61-34d5-afd4-91ce542c3947.roa (raw, json)
Hash identifier: 9zX918dbHTWYAt+0xdXD0MMRdW70k0g8m585z3XM1Vw=
Subject key identifier: 5C:44:DA:98:95:79:10:94:40:3E:32:D3:62:96:56:EF:4A:75:CC:E8
Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial: 010D0C9F432858487325BAC724D100D17513BE00
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 394671
IP address blocks: 167.100.0.0/23 maxlen: 23
216.47.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ba:c7:24:d1:00:d1:75:13:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=f7438fc5-b52d-4feb-b07f-c34b91548762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:9f:47:31:18:3d:b6:27:6f:72:dd:5a:29:
e9:e4:0e:07:9a:cb:97:ae:38:25:d0:a4:e3:14:9c:
b0:eb:ac:f1:10:68:39:e4:02:83:70:c5:ff:18:fd:
72:62:2e:80:e8:b3:8a:34:43:c9:5a:9e:f5:9f:5b:
10:42:26:ff:3a:d7:04:11:6f:49:d7:e9:ce:59:5c:
cf:a9:a8:ab:08:f1:50:b2:9a:34:6b:d7:5d:66:2e:
91:66:49:87:be:95:65:dc:32:f6:04:1e:6c:4d:11:
95:18:8e:f9:1c:ed:a8:24:41:a6:5a:42:93:be:f1:
5b:9d:20:c4:33:a9:9a:b7:f4:af:0c:48:c7:97:20:
6f:ce:4e:fd:cb:69:3d:22:f6:0a:f6:d5:c7:d7:8f:
80:33:ae:71:37:43:63:a8:f3:d4:25:94:39:e1:ba:
de:53:96:10:45:3e:49:ec:22:cb:80:d9:39:e3:1a:
ca:a5:ba:71:bc:54:3a:d2:8a:a7:3a:9e:3e:67:9a:
39:fd:dd:84:9a:e7:5c:65:09:87:1f:06:5b:ef:38:
e3:95:35:7d:0a:91:a6:1b:a8:75:28:01:07:b2:65:
bf:68:99:d7:87:97:e6:16:a7:2d:53:14:3e:04:9f:
96:ca:9a:a8:d4:fd:b2:5d:74:18:1a:12:cd:21:d0:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:DA:98:95:79:10:94:40:3E:32:D3:62:96:56:EF:4A:75:CC:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/86736a96-ae61-34d5-afd4-91ce542c3947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
X509v3 Authority Key Identifier:
keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.100.0.0/23
216.47.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:3b:2c:e9:45:47:fc:26:18:59:ee:2c:58:76:67:c4:c4:6f:
8d:32:43:b1:7d:ae:e8:8e:eb:d0:e1:4d:5c:54:f3:f1:a4:58:
d6:94:e6:d9:42:30:23:15:ab:27:45:9f:ea:ca:06:5a:48:56:
40:4a:50:6d:1d:0a:cc:26:b2:33:da:5c:2e:aa:d6:0d:08:e5:
5d:8c:87:98:85:75:7a:e5:ee:28:fb:a5:aa:16:d8:1d:75:97:
27:98:06:73:3a:fa:be:2b:90:fc:4b:b8:6b:93:fa:c3:cf:32:
6f:55:03:b0:36:57:f2:a0:7c:ba:ac:a0:22:ff:56:8f:bc:88:
a6:2f:38:bc:87:d8:78:2c:2f:54:3e:d3:4d:da:18:d8:75:0a:
5a:33:e0:70:cc:8b:97:0b:82:b1:94:25:0b:73:6e:cd:9c:06:
71:e6:cf:64:43:94:58:0c:24:75:15:23:1a:aa:b3:49:b5:7b:
28:51:0e:b2:c5:7e:de:60:1a:dd:10:b0:89:e6:a5:02:cf:ca:
bc:49:74:9e:5e:43:9a:97:eb:ae:a6:61:40:84:44:ff:eb:72:
a6:e0:f0:ef:28:68:b3:33:d9:fd:90:c9:d7:ef:ad:39:0f:98:
96:18:9a:54:ef:3e:a1:78:72:43:d2:60:a8:24:84:76:bf:c9:
9d:bf:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:35:49 2025 by rpki-client