Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json)
Hash identifier: Kz/NCOqmGVRzOmlSnyh1jzdx182f5sJfTQ3fexSa5qw=
Subject key identifier: A8:47:E3:54:40:E6:66:53:E7:9B:F5:A5:2D:9C:9D:14:24:E3:70:38
Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial: 010D0C9F43285848222FD8C0F45BBEA306883D00
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 155.63.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d8:c0:f4:5b:be:a3:06:88:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=fd2071ae-97ec-4500-b42f-0bbbb01a5f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:30:4f:2c:9c:cd:fc:68:71:1d:14:21:a8:
85:f1:b9:81:19:a5:d5:06:1f:6c:7e:e3:f6:86:7e:
7d:95:28:1f:d1:c4:5d:59:77:a6:a6:3c:ba:82:fb:
40:5f:66:6c:57:6d:1b:a6:e4:b0:6c:2d:22:53:1e:
7b:04:44:d4:27:25:d6:f7:3b:f7:ce:2a:5f:17:51:
9e:f4:77:67:41:79:f5:e6:50:1d:db:49:9d:96:5e:
5a:cf:7f:7f:86:4d:00:87:a8:3b:67:37:25:49:92:
a0:1f:b2:50:08:61:ba:30:f8:ba:44:60:56:e0:41:
46:2e:c7:66:f3:1b:b4:af:2b:21:e8:d8:ff:f1:74:
f0:8f:bf:f9:4b:d0:1c:7b:0e:74:8c:5f:74:c4:2a:
1b:cc:5f:61:f9:c5:d2:bf:62:66:4e:50:b3:84:68:
83:33:8c:0e:cc:8b:55:35:92:0f:67:c9:f2:82:17:
b6:15:c2:cc:77:d2:14:3f:ae:82:f1:84:b3:51:70:
14:75:85:d9:06:a6:77:d0:15:11:4c:72:93:4d:8b:
60:a4:57:05:63:a9:54:bc:42:02:c2:b9:74:f8:5d:
74:f4:a4:0f:44:b9:49:64:59:d3:fb:f2:1d:4a:05:
d7:24:d4:2a:8f:70:25:43:61:a2:0a:4f:d1:6c:47:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:E3:54:40:E6:66:53:E7:9B:F5:A5:2D:9C:9D:14:24:E3:70:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
X509v3 Authority Key Identifier:
keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
sbgp-ipAddrBlock: critical
IPv4:
155.63.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:68:c9:ed:5e:1e:1e:f7:9e:24:a1:21:0b:69:86:1c:91:13:
49:80:90:0a:6f:b8:53:f0:f9:c5:bb:22:66:b3:4c:43:a9:f8:
c4:3b:dc:48:e2:bf:2c:78:2a:e0:dc:90:7b:56:89:11:5f:42:
1f:a4:96:45:f9:56:be:dd:1a:32:4e:6f:c7:00:86:23:12:9d:
b2:7c:58:da:64:79:9c:8d:28:88:96:bf:91:af:64:bb:9a:ef:
5b:1f:3f:f1:30:0d:c9:48:90:bf:b1:58:09:47:5f:ad:35:e0:
11:01:a4:00:55:54:b5:24:e3:0f:72:00:7e:98:83:6a:b9:dd:
c3:60:7c:35:87:ce:7b:84:9d:9a:58:98:aa:8f:4d:e3:10:eb:
94:67:8a:d4:3d:07:6c:ed:34:fa:c3:be:aa:6e:24:35:4e:b2:
84:99:1f:37:a9:7b:1a:50:94:8b:54:78:60:2c:f4:75:54:36:
73:2b:f6:11:5b:97:81:e3:f2:ba:f2:0a:0e:fe:79:b2:75:d0:
80:7e:e2:6f:54:93:e1:8c:ee:d3:a7:a0:7f:d4:9a:2e:a5:0c:
43:7c:17:cc:0c:5b:2d:44:3e:40:aa:29:75:88:ab:3e:f3:9c:
b1:31:17:ff:c0:bf:ad:d4:c0:d8:a2:6d:88:2d:c4:d6:f9:d5:
94:8a:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:29 2025 by rpki-client