Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
File: 9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa (raw, json)
Hash identifier: Qjsu1+VU+XEYg8Xnmr7d17qcGrAbvT4yF2RqjD/frD0=
Subject key identifier: 7F:33:7B:6A:AB:27:C6:03:A0:B7:88:C7:23:5C:42:E1:89:33:BB:B0
Certificate issuer: /CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Certificate serial: 010D0C9F432858480644FA8D09183C91C2C9E300
Authority key identifier: C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 55222
IP address blocks: 162.211.96.0/21 maxlen: 24
2605:1240::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fa:8d:09:18:3c:91:c2:c9:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=18764047-cc7b-4ea8-976c-6d7ad033d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0e:53:01:a5:85:df:e5:8b:45:eb:97:9c:63:
c3:00:28:f8:5c:ca:13:8f:30:19:2d:1d:5c:b3:05:
f3:39:b1:26:8e:d0:cf:db:3c:48:01:43:44:78:92:
27:ff:e5:81:b1:cc:c3:80:25:23:08:f1:cb:b6:ad:
3d:9c:7c:50:8d:17:13:40:d4:a6:f0:ca:ba:24:03:
33:79:cc:04:55:02:66:e1:ba:79:f3:98:e5:5d:ad:
08:54:a8:b8:88:9c:75:dd:ab:be:78:e2:2a:3c:47:
75:00:a0:fe:88:c6:ad:96:d1:fe:1b:ac:28:3a:2e:
3b:e9:4d:f0:7f:58:16:bd:53:5b:e7:c9:67:ae:4a:
d7:0d:46:82:98:e4:41:55:f7:ea:56:88:fa:cf:6d:
89:9d:5c:85:d3:6c:37:55:15:0b:1b:a6:1c:09:a6:
e3:13:a4:4e:d0:bd:70:23:dd:82:a4:f8:e6:f0:1a:
93:b5:f4:58:83:1e:16:1f:d5:b6:be:be:ef:5b:f7:
9b:df:22:43:74:dd:95:a9:e7:af:47:3e:78:f5:93:
8d:3a:3b:64:38:6b:bf:50:c9:e4:c9:7d:bd:7c:16:
d3:af:fb:b5:6f:84:29:94:75:86:7d:79:76:3b:63:
aa:cb:2f:60:ca:52:a3:5d:73:d0:aa:dd:ec:2d:da:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:7B:6A:AB:27:C6:03:A0:B7:88:C7:23:5C:42:E1:89:33:BB:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl
X509v3 Authority Key Identifier:
keyid:C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.96.0/21
IPv6:
2605:1240::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:af:24:6c:ed:41:c1:b8:6c:bb:2c:87:49:24:3c:74:90:16:
b9:3f:f1:8a:e3:fc:30:62:0d:c8:18:9a:61:e9:9c:08:83:b5:
02:64:2b:89:74:bb:99:7c:2f:37:86:27:ac:e9:25:fd:cc:9b:
f2:d8:ec:90:1b:17:07:93:0e:be:d0:6b:44:59:1d:ba:cb:61:
f8:b6:6a:21:c6:1a:95:8c:6b:01:15:d8:8c:e5:f7:c8:e6:69:
ce:8a:d4:41:4a:ce:d2:ca:a6:1e:2d:69:df:4d:e5:e3:7d:fe:
d3:3f:66:37:5a:8b:56:bc:5a:93:78:93:52:46:70:e2:31:33:
d1:d1:d8:63:64:fc:6a:1a:a0:fa:81:2a:e1:f6:da:49:b6:ad:
e0:68:a6:f7:0a:e7:91:a2:8e:77:72:1b:86:d2:9c:e6:7e:0d:
33:77:0b:2b:0e:ee:08:fb:20:32:dc:1f:c0:d0:68:af:e8:62:
19:9d:f7:b1:ef:cf:6e:9f:3b:7c:64:ce:1d:99:17:6f:3e:f9:
8c:9c:d0:d5:51:4e:15:12:f6:e4:51:b6:73:be:be:e2:2e:e6:
55:52:62:50:cf:ff:bb:16:28:f5:96:6b:b5:fe:cf:77:73:73:
de:29:91:33:6d:ca:b9:22:eb:e2:9f:2e:e2:19:bc:0e:9c:07:
2b:f9:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:51:07 2025 by rpki-client