Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
File: 2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json)
Hash identifier: gmnZGh3gaPZu2UJwjCSO5ctQoAzifVVw+dc2virUUl8=
Subject key identifier: 10:B8:33:29:D9:F6:98:A7:D9:DB:21:99:B2:24:5C:58:1B:35:44:72
Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial: 010D0C9F432858488280883CFA8E8375D1422280
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 32329
IP address blocks: 162.218.224.0/22 maxlen: 24
164.152.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:88:3c:fa:8e:83:75:d1:42:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=20ef0aa3-8cd3-4adc-8831-5cd24532982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:de:34:9e:9a:af:0f:66:c5:89:44:92:d3:
af:d8:83:15:2e:d4:d6:d1:47:0f:e5:9a:2b:4c:1a:
38:47:1c:e1:4e:e0:ca:8a:40:d6:05:dc:57:56:55:
5c:8d:99:7e:e9:57:5a:a6:52:69:89:85:fc:53:71:
75:aa:e5:70:25:ef:f5:30:3f:73:37:1a:f5:30:36:
c4:9d:b8:16:73:54:ed:02:7a:c2:bd:6a:57:15:d0:
1e:20:de:85:41:ea:11:b8:14:22:60:b6:e5:76:97:
58:7e:75:52:74:db:6f:64:2b:6b:6e:c4:26:25:da:
80:d9:36:75:5a:66:af:25:03:7f:5e:9a:77:30:81:
b8:dd:1a:43:2a:b6:b4:d8:e5:23:fb:d1:b6:a0:0d:
0f:32:f4:dc:2e:b5:34:91:b4:ab:50:fb:80:7e:d0:
8e:91:ad:85:4e:50:d3:e1:bc:10:fd:75:ed:b9:07:
cd:33:f6:a0:1a:16:35:4f:b5:c9:a6:b0:6d:0d:1b:
d5:0c:3e:85:db:fd:3c:ee:aa:10:58:b4:12:c3:80:
47:2b:1b:18:3a:7b:04:ad:98:28:bb:a4:ac:ef:ed:
6f:bc:c7:9f:29:fc:c2:64:2e:42:fb:7a:7c:21:f8:
e6:d3:03:83:e8:a3:52:11:2a:9f:e0:7d:20:22:ad:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B8:33:29:D9:F6:98:A7:D9:DB:21:99:B2:24:5C:58:1B:35:44:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
X509v3 Authority Key Identifier:
keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.218.224.0/22
164.152.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:81:bd:2e:58:6f:a3:ef:63:e0:d5:47:a8:53:8b:e3:bd:7a:
44:84:15:69:d4:93:0a:12:7b:d3:b4:fd:1e:31:a9:83:af:72:
06:7c:7b:d6:4a:b5:c0:e5:13:05:91:f8:a9:4e:fc:63:9b:af:
98:8d:44:b6:bf:44:24:ea:08:75:2a:63:c1:32:bc:4b:50:bc:
1d:8d:7a:8a:d0:40:cd:34:7a:b6:7d:e3:e7:fb:42:8c:31:8c:
55:87:65:1c:89:1f:87:b8:97:d2:07:54:b4:2f:74:4e:e0:cd:
81:82:73:4f:1f:c9:3e:b1:d0:b8:a7:2a:7f:0a:6d:4c:2f:b2:
08:cb:ba:35:e1:6e:15:67:e9:4c:b4:4d:e3:ea:91:e4:0c:73:
62:27:aa:a2:3a:b9:89:fc:f4:3f:78:11:c4:4d:a2:39:63:86:
13:2e:69:9b:e1:a0:79:0e:f7:7f:f8:4f:d1:20:a7:ba:e4:7a:
68:cb:7e:91:25:35:3f:c1:7b:3b:ab:0e:8a:b6:62:b4:7f:e3:
cc:0a:5b:7e:65:31:15:59:73:46:71:44:18:6e:66:24:a4:d3:
4b:e2:96:f5:09:d1:36:06:48:c7:08:26:5c:1c:13:0d:0b:56:
9d:b1:d4:86:82:3b:82:7a:d3:6c:6d:bd:cf:aa:e1:74:2f:f0:
64:28:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:18 2025 by rpki-client