Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
File: 33acdaeb-a95e-3df1-be44-e1190abf4019.roa (raw, json)
Hash identifier: Yphrb2uWfiwFeqsIpwoanqeX+Ys8QlOrVYR/4AoFXzw=
Subject key identifier: 0D:43:7D:9B:62:AA:8D:27:99:54:0B:FD:88:17:57:7B:64:16:AE:ED
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F432858488AE09ECC1E139E941F9F6FC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 164.152.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9e:cc:1e:13:9e:94:1f:9f:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=0f47171b-e4ba-4435-a23e-7098fe6c2c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:c3:c5:05:86:1f:61:b0:19:93:c5:9e:4c:
c5:59:93:17:03:ea:ce:c1:e6:d3:a5:77:83:96:0e:
1a:06:93:e6:42:4c:b3:da:0e:99:62:7f:e1:a6:ee:
ba:b4:1b:e4:8a:63:09:03:77:92:08:36:b6:ed:b1:
de:34:5a:53:9c:73:51:7a:1c:2e:c6:61:9d:03:eb:
61:e7:49:92:1f:69:31:03:f4:71:86:c3:6c:48:fc:
20:12:0c:fb:c0:ce:9a:97:90:58:3f:e1:73:8e:a8:
48:ae:8e:cf:e2:eb:80:91:de:b2:1b:b5:7b:03:84:
bf:e9:87:ef:86:aa:45:b4:b1:1f:ce:e3:6c:a2:74:
34:10:27:6b:07:6d:45:06:a5:27:bc:13:2d:31:8f:
11:58:ce:de:2c:5a:0c:30:6f:b8:24:ba:67:cb:b2:
2b:e9:21:fa:59:05:68:9b:1a:5c:88:56:81:ed:92:
56:da:1d:b2:e6:46:29:38:fb:53:a3:63:02:c0:49:
cd:b4:c4:7c:b7:0e:6d:70:f8:b8:69:31:16:37:34:
d1:0e:5f:bc:74:b0:d1:38:ba:90:b0:0b:51:6f:25:
a4:05:39:c0:1d:51:5d:15:55:29:b0:12:0b:93:fd:
cc:b1:33:97:11:28:10:26:bd:29:a3:b4:47:2b:6a:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:7D:9B:62:AA:8D:27:99:54:0B:FD:88:17:57:7B:64:16:AE:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
164.152.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a9:b7:27:dc:99:6d:1c:ec:33:46:ca:b3:f2:2b:2e:d1:4d:
c9:0e:2f:6c:9d:d9:0c:ce:17:06:6c:0e:67:87:14:4c:38:0b:
6f:df:22:60:76:5c:04:48:30:8d:a4:e0:89:ec:9f:6c:03:f8:
68:b7:d9:d2:16:07:57:7a:cf:04:68:c5:c4:64:62:d1:c1:65:
2f:c7:bb:19:45:5e:3c:15:04:9e:f9:91:27:c8:7f:f8:23:93:
c7:34:90:5c:68:0c:89:f3:0d:29:9e:2f:80:97:e8:40:e4:0f:
45:e7:ca:03:f0:c3:f7:f6:f2:66:3b:87:2b:23:42:a4:34:24:
3e:c0:e7:c7:98:3e:b6:32:8b:ed:ed:3e:6a:e2:14:6f:44:07:
eb:ca:28:ea:80:8e:35:1d:fa:b8:92:c2:26:2b:29:4d:78:9f:
8d:be:71:12:70:c9:36:d0:75:68:38:3f:35:26:6f:4f:92:5c:
6c:cc:75:6e:07:46:83:18:c8:38:28:95:b6:99:7e:bf:e6:08:
2c:f1:7d:e1:a6:6b:06:ad:1e:7b:b1:c6:db:66:55:6c:fa:c8:
66:e4:63:15:48:93:55:f4:51:55:94:28:18:b1:43:3d:f2:37:
4d:d1:bf:69:70:c6:81:69:47:6f:0b:8c:6e:7a:83:ca:58:8d:
f3:24:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:43 2025 by rpki-client