Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
File: c1f707e3-581b-3a11-8a60-245b52060e4b.roa (raw, json)
Hash identifier: 1ove9FZVJf3iCmIv9JsinXhuCF94zC4LdVd3h0BeiUM=
Subject key identifier: F0:43:6E:67:A7:4C:78:6E:06:E8:A5:BB:3E:36:5D:52:78:CB:67:D5
Certificate issuer: /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial: 010D0C9F4328584902EC1230B6AE8D1D04448100
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 399989
IP address blocks: 128.254.164.0/22 maxlen: 22
128.254.164.0/24 maxlen: 24
128.254.165.0/24 maxlen: 24
128.254.166.0/24 maxlen: 24
128.254.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:12:30:b6:ae:8d:1d:04:44:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=cd2c1045-d606-41d4-a315-5d61ada5c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:15:90:95:91:4a:7d:9f:30:17:4e:27:69:
7a:9b:c7:81:58:55:0c:e2:a0:36:7b:bd:92:1c:b0:
b5:73:c6:86:56:1e:7b:ed:74:9c:64:8a:6a:b5:92:
d9:83:4f:79:19:14:01:c7:02:7e:ce:20:da:2c:a2:
74:c7:39:c8:4b:90:57:6d:d9:bc:0b:53:47:e1:5a:
7c:18:75:3a:7e:89:ac:90:8b:1e:69:07:26:cd:9f:
20:9f:97:d2:0d:e2:52:90:ad:e1:2f:53:c0:58:06:
dd:a2:31:e8:7e:c4:c1:77:39:a8:c7:4a:c2:b9:7d:
5d:9d:fd:fd:15:66:96:a7:f8:c3:a3:9b:1b:31:27:
d3:2b:7f:7d:ab:94:5b:88:13:d9:b9:6b:9e:37:79:
a6:8a:0f:c6:e3:cd:c1:7a:76:fd:3d:3a:b5:98:73:
8f:59:8a:ca:2d:ce:41:03:18:07:a7:3a:72:c5:fc:
ba:f9:fd:99:11:0e:18:94:2a:98:be:9d:c6:3c:6a:
1a:32:49:58:3c:01:60:c1:58:a6:48:71:c7:f9:d6:
3e:a9:8a:f0:da:f7:27:88:8c:2c:93:21:29:95:20:
50:c1:da:8c:0b:95:70:f5:35:b0:1f:49:6b:28:71:
cc:ac:22:2c:9e:20:f9:ac:e5:07:97:d5:ad:34:2e:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:6E:67:A7:4C:78:6E:06:E8:A5:BB:3E:36:5D:52:78:CB:67:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
X509v3 Authority Key Identifier:
keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1c:e0:9a:6a:29:ff:8e:f7:df:ed:8f:9c:2a:4d:5d:60:21:
3f:0f:f9:26:e7:8c:63:1e:cc:a1:f4:e3:e1:3f:06:4a:c2:bd:
a4:b0:45:a5:4c:87:9d:59:4b:b9:ac:91:32:78:84:6d:e5:1b:
45:fe:04:31:b9:55:4d:c7:f9:07:84:63:a0:11:6a:59:a2:76:
1f:f8:3b:08:2a:84:30:d0:f1:b1:db:d6:30:bf:64:dc:fd:8d:
be:e2:a6:23:0a:e8:a8:1c:a7:26:c4:ef:07:a2:66:1b:f9:61:
58:3e:01:31:80:37:fb:4c:2a:92:fb:49:a9:59:7b:3f:d9:af:
4e:64:c9:5d:bf:53:56:b7:8e:0d:2a:8e:d4:3f:df:84:52:04:
2e:65:f9:01:08:39:90:85:e3:c8:a0:e3:9f:d7:64:e0:3f:97:
40:0d:40:ca:f2:e5:18:13:5c:6e:b5:bf:f3:31:e6:e7:f6:ff:
44:6d:ba:62:5c:0a:1d:cc:a1:f5:c9:b9:8e:c2:eb:95:69:e8:
f6:42:6b:ee:5a:2f:1c:0e:0d:07:de:d5:f6:2e:ef:d0:f0:ff:
e5:d1:d7:65:24:59:f0:cf:13:85:ba:42:16:81:f5:6f:f3:46:
d1:ca:11:80:cc:7c:7a:d0:11:8d:d2:5d:bd:07:3e:29:8d:56:
46:d2:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:57 2025 by rpki-client