Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa
File: 5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa (raw, json)
Hash identifier: RGZmR/cOQXZBufVglagE4eQOWiLmkeBU4wCv8zeV3/c=
Subject key identifier: 93:62:64:EE:35:22:99:7A:8D:EE:C7:C1:94:ED:11:BF:F6:DF:D6:09
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584957F3FB234EB4992DA382A700
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 22898
IP address blocks: 8.42.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fb:23:4e:b4:99:2d:a3:82:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=6ee92f97-ce11-4fff-b089-a9338c46f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:ca:ca:4d:ea:e9:a1:31:9a:1e:ce:fb:38:
dd:dd:f8:7b:f9:78:d5:7e:5a:7d:e6:70:9e:48:31:
08:63:2f:76:81:92:4b:00:c8:d6:dc:21:03:b3:35:
01:f2:9e:42:43:17:9c:81:a4:b8:23:48:06:6e:bc:
37:b2:5b:de:bb:fc:6c:71:54:77:a6:09:58:43:66:
df:cd:5c:07:a3:51:74:6f:fe:cc:79:c2:9b:06:0d:
3b:9f:03:b0:02:11:8a:8a:a6:a9:0a:8d:ea:b4:1c:
97:1d:79:b3:2e:46:75:20:e4:69:d0:04:06:d1:46:
18:9e:6c:59:2f:26:ca:24:a5:2e:14:66:40:46:29:
fb:d3:2b:c8:ea:54:71:fa:09:11:2f:cf:b5:9b:26:
f4:84:9b:04:61:55:93:fa:88:dc:59:f4:bc:9c:d3:
5b:44:d3:13:5e:ad:88:4d:a3:dc:b5:e0:14:58:e8:
f9:dd:64:7d:34:d3:be:df:89:9f:a2:21:ba:2d:39:
a0:cc:b2:f4:5c:31:ff:69:23:77:32:9f:a4:2f:15:
03:e9:a0:52:01:54:13:8b:15:51:d7:e1:b0:bf:12:
6f:9c:a4:00:b9:9f:e2:e7:6c:d5:c6:74:0e:67:a2:
a7:54:be:cb:05:04:0a:26:d9:ea:b2:8e:cb:ac:f7:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:64:EE:35:22:99:7A:8D:EE:C7:C1:94:ED:11:BF:F6:DF:D6:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.42.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a1:a4:7d:1b:75:0d:ec:76:57:69:05:d7:94:41:2b:03:6b:
1d:e5:c7:11:05:7c:5a:86:ec:d7:89:4b:fc:6c:d7:32:a9:b3:
5f:d6:46:49:d7:7f:66:ca:9d:a2:27:bb:50:aa:f8:aa:be:72:
71:ff:d1:be:42:87:a5:ec:2c:ca:b5:dc:fc:31:72:12:d1:07:
09:89:c9:01:4e:90:dc:b3:43:4a:97:75:9e:1d:fa:b0:50:8b:
7b:2c:6f:f9:d2:6d:5a:e9:b7:66:34:97:b8:43:61:f6:50:60:
14:dd:e9:a5:c0:cf:a6:86:59:43:c9:43:2f:19:68:12:06:20:
7b:74:0c:71:c3:82:9a:ac:cb:0a:f3:d8:d0:13:14:43:18:14:
a2:16:85:ed:31:34:3a:58:49:4f:b2:3c:37:67:33:d7:56:78:
1f:4f:45:c4:f7:62:aa:f7:a3:0f:bb:8d:df:6b:b2:fd:bf:ef:
83:d0:c0:fa:6e:9f:97:2c:de:38:dd:62:32:99:79:68:92:84:
e2:a6:94:18:d5:84:6a:a4:08:d1:58:69:d3:ef:1e:3b:6c:41:
a3:32:e5:87:af:14:5e:51:93:91:b6:8f:e9:95:ee:8f:ac:10:
19:de:7b:a3:a7:6a:01:82:1f:93:f3:87:9d:82:8b:a8:ae:c2:
45:a9:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:32 2025 by rpki-client