Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa
File: 79085a12-1642-3f55-944b-46308ebabf6c.roa (raw, json)
Hash identifier: h2IyNKgmOasS3WS37SsbX/zim2jC8pFO6UUgquOc+A0=
Subject key identifier: A1:52:8C:68:17:6B:54:32:38:BD:24:60:14:D6:30:74:6D:64:34:2C
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285848F4F6A6E52E9F54008030E180
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 16509
IP address blocks: 160.153.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a6:e5:2e:9f:54:00:80:30:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=31920b76-6b59-4034-af48-c4b56abfe5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:3f:d6:60:4e:07:61:c7:95:cf:f4:c3:28:
84:14:14:dd:65:ee:18:98:32:23:ef:48:a8:02:25:
b1:76:53:89:ad:0c:49:c2:c9:d3:f2:f2:15:99:4e:
26:9d:7e:08:2d:d3:a9:76:f0:ec:3c:99:3f:cd:06:
2a:cf:b4:c2:b7:6f:0c:10:77:d0:d2:e8:22:38:7e:
e1:01:d9:a2:7a:7c:41:84:5b:86:7b:dc:09:b2:7a:
0b:51:49:d0:f7:0d:ef:48:08:b6:0a:f7:38:79:a8:
e5:1b:c7:16:55:61:e9:a4:ef:05:6e:96:eb:a2:2c:
51:45:3e:1d:7e:74:1e:d3:18:e2:bd:8b:cd:5d:66:
a6:53:a3:29:ba:cb:1f:5c:9c:26:ac:64:2e:f6:9f:
ea:92:e0:42:2b:b0:7d:b1:b3:e1:8a:2a:01:eb:f8:
4c:d0:87:1b:ac:0f:7b:61:6e:37:d9:4f:dd:25:03:
de:43:42:f3:7c:d6:84:49:2a:03:5b:de:08:16:f3:
39:7f:2d:77:df:e6:d4:fb:db:c5:83:f3:af:93:21:
df:ec:d5:c8:25:d1:4c:a5:97:d7:53:98:0a:bb:30:
dd:d8:66:0b:09:5b:af:b8:43:58:56:2e:6b:ec:ce:
57:51:98:88:b7:75:c8:7e:21:85:df:e6:15:e9:73:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:8C:68:17:6B:54:32:38:BD:24:60:14:D6:30:74:6D:64:34:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
160.153.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f7:56:c2:87:d2:f7:fe:9b:68:62:8a:73:a1:1a:31:3f:08:
a9:8d:02:6d:ab:1c:5d:89:39:a7:6a:f2:95:15:c6:c9:83:43:
1f:cd:d2:5e:a6:7b:c8:cd:20:3f:fd:2e:6e:2e:3f:ec:bd:37:
4e:a9:39:c2:7a:bb:05:be:a3:6e:79:12:dd:e5:eb:01:26:dc:
96:c2:40:2c:e5:f1:5d:fd:cd:9b:b5:89:e9:4e:fd:c6:27:49:
8c:84:54:d2:01:07:5a:54:80:f8:a7:61:29:fb:9c:63:bb:17:
3e:97:aa:18:c5:29:b5:77:d9:5c:9c:42:a2:7f:9a:e4:df:f6:
02:d5:3b:40:fa:d9:c6:b7:fa:78:60:6c:f1:20:13:20:a1:67:
10:d7:c1:47:de:a3:fc:72:05:d5:a9:8e:12:6a:10:10:64:44:
de:5b:25:a4:29:27:32:30:8f:92:75:75:84:c7:86:c4:d1:64:
ec:52:4d:f4:ba:94:d3:1d:fa:44:4a:40:a8:af:ee:9e:b5:18:
2b:7e:ce:07:5e:3f:21:ab:5a:61:a4:6d:7a:12:e3:14:33:6d:
db:95:13:fc:e9:97:4a:5b:d1:9c:9c:83:1a:2f:d5:f9:90:93:
61:7e:7f:78:b0:28:c6:ba:3c:65:36:a3:20:d1:41:af:47:45:
37:a2:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:39 2025 by rpki-client