Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
File: 6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa (raw, json)
Hash identifier: Xp37rRs2RBolmpOlUjZjIydRZW96g8pbsjf5095z61M=
Subject key identifier: F8:A1:76:94:04:C1:40:0F:31:12:0F:00:DA:AA:09:F9:B7:2F:15:9D
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285849403950BA2FF3192A54156480
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 159.172.202.0/24 maxlen: 24
159.172.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:50:ba:2f:f3:19:2a:54:15:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=7ca6ce51-7412-49c5-9999-86da5ab0886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:06:23:94:b5:cf:a3:20:32:61:14:6c:67:
43:06:c2:61:1d:0f:af:ff:24:ac:dd:d1:9d:c5:dd:
b4:08:46:33:65:d4:87:6e:e5:98:58:08:a1:c7:27:
6e:5e:68:89:7a:7f:e7:b4:eb:90:c6:ea:ef:77:47:
8e:9a:c7:c1:b8:e7:1f:77:30:da:15:56:b2:32:26:
71:7a:be:86:ac:e2:ce:2d:73:bc:a5:f3:20:6d:84:
a3:5f:9f:87:55:72:5f:06:6d:b5:00:45:f7:d6:67:
a2:13:11:12:ce:cd:9d:2c:af:41:63:28:ce:52:f3:
4c:e4:93:4a:c2:c4:1b:66:50:c6:ff:84:ef:50:e9:
e2:93:7a:ab:aa:d0:96:ff:28:c8:75:3b:61:75:a9:
8d:ee:c5:d0:71:65:8d:26:69:0a:48:f6:d6:cc:80:
f8:0c:eb:e1:bd:e7:cc:a7:91:ad:f8:02:17:58:2e:
f8:6f:fa:21:82:8e:a8:a6:a8:bc:9b:73:9b:d2:e1:
29:6f:26:94:dd:bc:2f:07:d3:0d:bc:5d:05:a7:a9:
4d:cf:63:c5:08:44:05:2e:f0:78:7a:8e:4a:79:16:
d9:10:d4:6c:44:5a:4a:99:f0:96:b2:d2:e0:d9:57:
d7:49:43:6a:29:2e:42:f3:ac:8f:0b:b6:53:bc:80:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:76:94:04:C1:40:0F:31:12:0F:00:DA:AA:09:F9:B7:2F:15:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/6b92d122-ffed-3479-b5e1-792d6cbebc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:71:39:72:2b:b0:86:fd:33:56:30:8f:84:21:0d:6c:3a:01:
bd:3c:1b:03:08:0b:22:c1:92:98:f9:8f:bb:b2:2f:3f:c2:4d:
cd:fb:16:b3:d7:e3:4c:38:65:51:e9:b8:c0:a6:d4:e3:08:a8:
a9:d1:db:34:89:5c:12:33:dd:3d:1a:13:e9:c0:ca:e2:e1:b1:
f0:e2:aa:ce:05:71:0b:ca:4a:70:9a:29:7d:7f:b6:c8:bb:4a:
eb:26:a9:30:ce:6e:14:9a:f3:b5:2b:a5:2d:92:0d:cb:5d:3f:
1b:5a:ad:fd:e5:22:d0:e0:e3:8e:00:a5:06:b3:8f:8e:61:e8:
77:7f:1b:76:49:e9:da:0e:37:9b:18:48:ef:ff:4d:2f:1d:31:
1b:f0:ff:27:2a:84:43:ae:0b:20:6e:20:dd:0d:61:6f:5d:b1:
d8:22:e9:8b:0a:94:6c:af:81:ad:f5:50:e4:87:67:af:6a:d9:
35:3f:d2:08:c8:e4:9a:3b:06:b2:66:1c:98:3c:f2:1c:4c:05:
65:32:d5:73:46:b7:34:12:1a:31:0d:fb:dc:1f:29:64:1c:1a:
98:26:7f:87:8c:65:78:75:17:57:a1:24:a1:d2:ff:ff:5f:1b:
47:aa:c0:6e:45:d1:52:1c:9c:41:65:4a:75:ae:10:49:d9:f7:
1b:51:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:24 2025 by rpki-client