Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
File: ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json)
Hash identifier: gjbPHfwDvZr8nUyt27uyboLKdLxodzO9cdiqiGiD0Ss=
Subject key identifier: A5:A0:AF:12:8D:91:71:3C:55:6F:C6:FB:E3:F2:0E:D8:93:FC:11:81
Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial: 010D0C9F4328584894A5EFACD91B18DCA25E8080
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 16509
IP address blocks: 157.166.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ef:ac:d9:1b:18:dc:a2:5e:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=1b37818b-ff55-4c2a-b697-6ba204b1eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:be:e0:04:22:9e:59:ef:4f:f8:35:7a:54:
6b:e2:22:6b:70:d2:f1:fb:8d:0e:cb:c9:45:1d:4e:
07:ee:45:44:3a:f6:a6:f3:dc:34:df:c0:74:db:25:
c2:7e:f6:40:11:2e:a7:57:4f:3a:dc:38:d0:65:c0:
22:6c:6e:b5:aa:d3:78:d4:bc:6e:70:1a:88:c5:a0:
72:5a:a2:9a:d3:ff:db:9f:e7:3e:fd:d0:e2:7c:72:
d2:cd:c9:f5:6d:96:6c:23:71:05:b3:4b:5e:3f:c2:
6e:bb:aa:c3:56:32:d7:cf:ba:88:d1:03:2d:e1:77:
0d:0d:87:5b:e2:26:55:28:79:91:ee:d8:54:6e:54:
57:0a:06:05:fb:57:67:5f:27:a6:fb:49:01:3d:b0:
b5:21:f0:fe:8c:14:4d:cc:0b:76:12:e8:32:47:19:
5e:9c:0b:d3:79:dc:13:64:c8:06:83:4f:b9:f5:76:
24:4f:05:14:ff:97:da:ab:f7:de:b5:48:d3:a1:c6:
bd:ab:c3:1f:a0:7b:67:57:10:01:a8:2f:71:13:1b:
04:ae:06:08:39:84:1f:08:bb:0c:c4:d3:78:53:6f:
4a:09:fe:cd:0d:de:4a:ff:1e:fd:30:51:78:c1:a9:
a6:cb:99:a4:33:df:a2:5b:a5:69:d3:6d:4a:37:32:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:AF:12:8D:91:71:3C:55:6F:C6:FB:E3:F2:0E:D8:93:FC:11:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
X509v3 Authority Key Identifier:
keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
sbgp-ipAddrBlock: critical
IPv4:
157.166.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d5:db:bf:da:18:c7:7d:7e:43:99:ad:3a:9d:d9:20:26:59:
a1:9f:d3:a8:9a:4f:7d:09:0b:ce:aa:69:29:20:8c:ee:6c:6d:
c2:e7:41:8c:e0:16:7b:8c:a4:1c:36:dd:eb:30:d5:4b:b9:97:
17:67:70:52:7b:48:47:9b:8d:03:5d:41:03:82:86:06:06:27:
d0:d0:79:7c:75:c1:10:3e:91:60:ad:bf:55:75:f4:ea:12:66:
61:3d:26:b6:b8:a7:9a:57:67:67:5a:99:13:52:c7:f2:9d:cd:
00:3c:95:59:41:88:99:c6:2b:ce:6e:8e:55:46:90:19:bc:60:
f6:71:8e:4b:a8:3a:de:5f:34:a4:e1:af:45:9f:5c:b8:09:04:
18:78:8a:59:db:cb:90:d3:a5:dc:1d:a0:71:b1:57:6b:15:29:
19:0c:6c:22:c4:8d:78:da:60:0f:44:30:48:74:94:e0:7f:06:
d8:dc:dd:9e:33:74:86:11:30:2b:5c:d0:9d:3c:80:aa:f8:fc:
9b:8d:6f:60:67:88:5f:43:4e:12:2f:08:4d:11:af:c2:c4:b3:
88:19:92:c6:cc:9e:d2:75:fa:05:87:2b:ea:c2:be:b5:58:f0:
f7:4c:2b:62:fb:43:09:e1:d7:09:ca:d7:34:4f:d6:45:4c:00:
b5:a5:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:28 2025 by rpki-client