Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
File: 1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa (raw, json)
Hash identifier: 6FIuf1lLRaHc4oQSKRNMOGGzGA2Q90Oa0qQfrlzRj0g=
Subject key identifier: 9C:A5:57:71:2F:F6:E9:40:43:F0:90:33:24:13:49:F4:EF:59:DB:A0
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285848424AD7D25B567AA8F470FBC0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 7018
IP address blocks: 162.255.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d7:d2:5b:56:7a:a8:f4:70:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=9d9545a2-7f84-4399-b74a-56b26c7651c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:12:89:a2:2f:8e:0e:2b:d6:09:ce:22:38:
71:21:1a:27:5f:01:32:58:c9:84:cb:f5:a7:7a:90:
33:db:68:ca:94:b9:c6:94:b2:7a:43:5a:f0:af:9d:
31:b1:dd:eb:fc:5d:4c:4b:11:1c:06:53:33:41:53:
45:44:e2:d4:e7:2d:bb:7d:64:8c:76:3d:bd:af:6c:
df:07:ef:36:07:1b:da:11:5c:4d:85:65:b2:7e:78:
80:ee:9d:1c:25:2a:8f:ea:46:93:e5:f9:59:3d:cc:
e5:b6:11:14:3a:71:3d:0d:68:7e:81:36:59:ea:9f:
92:66:45:1e:1d:84:ed:e9:1b:68:a1:66:44:04:ea:
e0:5d:b2:a0:53:c0:00:df:8d:ac:9f:b4:7a:59:0d:
7a:b7:e1:de:4d:c4:de:0e:ce:08:48:9e:ec:c4:87:
c3:2e:79:aa:b0:f4:b5:2a:66:56:80:98:2b:90:20:
72:32:0c:c4:80:3a:fe:75:58:57:19:61:74:6e:4d:
7f:04:3e:32:9d:4f:58:b9:9a:38:52:4d:26:fb:cf:
02:0f:36:1d:46:c5:1d:ec:ae:98:44:cb:45:1a:04:
2b:47:fe:cd:de:eb:7c:b8:02:e1:fa:db:a6:21:d1:
fe:4a:c6:94:4c:33:b4:63:4b:bb:f0:96:31:ad:ef:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:57:71:2F:F6:E9:40:43:F0:90:33:24:13:49:F4:EF:59:DB:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.255.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d5:91:54:24:af:55:d9:ba:44:12:bc:cc:9b:e8:1d:e2:51:
29:49:ff:ff:c4:3b:43:af:61:1d:86:50:0b:41:cc:67:b6:ef:
ed:94:a9:f3:76:ba:84:9d:c5:64:37:8c:ad:88:5b:24:d4:a7:
47:fa:95:6c:5b:fd:1c:b8:59:1a:2d:55:6f:7d:33:86:ec:9d:
a2:96:cb:74:2b:28:b2:c1:f1:d2:c9:71:cb:f8:96:6f:70:bc:
11:99:02:b6:00:a9:e8:3f:64:ad:fd:01:91:b6:0b:30:33:22:
c8:2c:38:70:5d:99:ee:76:53:ff:b5:db:49:07:6b:e4:f5:01:
74:17:9d:75:8f:1b:82:ac:1b:c5:cc:12:60:68:0d:0d:cc:17:
3d:16:99:e2:89:22:5d:de:e2:97:13:67:ed:6a:f9:8b:bc:74:
1a:c4:6c:f4:0d:92:9c:39:24:be:40:6d:cb:77:8f:11:55:be:
bc:78:b6:78:95:0f:73:e8:01:5a:bc:6f:b3:de:9b:db:8f:a9:
a5:d0:aa:3b:c0:7a:ae:b9:9e:00:ee:d6:e1:d0:2c:2b:e6:c2:
1b:71:b0:3d:8f:25:22:92:9b:d3:48:d3:7a:4c:cd:9d:f5:22:
26:f9:d7:31:e1:52:94:d4:7f:30:c4:e8:44:f2:99:92:74:1d:
68:52:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:58:52 2025 by rpki-client