Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
File: cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json)
Hash identifier: uEGiyF184fHnkuL+xJrC45PL8LpoW5MgnfZ5Z/wQQ+k=
Subject key identifier: 94:54:3D:D2:C9:2F:DB:91:87:A1:B6:13:B0:A6:7D:61:35:F4:20:53
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6085C350972CE63A747C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 161.69.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:08:5c:35:09:72:ce:63:a7:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=a4bdf6c3-3e0d-409b-bc73-b54f47a65fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:2f:48:e4:21:ad:f9:14:18:18:4b:4a:df:
e0:78:3c:b8:72:67:f0:54:a4:07:c6:a2:26:df:ad:
f3:ce:79:ff:6b:44:5b:f1:02:d9:98:ad:56:67:c0:
87:4a:8c:63:45:b9:39:94:dc:14:10:43:79:3f:65:
3f:a7:5d:10:b5:19:3b:5c:c5:19:4e:bb:b9:eb:96:
72:8a:6a:41:bf:89:69:e3:d0:e8:45:3a:73:98:dd:
50:0c:8f:d6:5e:1e:87:c0:05:52:a9:03:1b:d1:d7:
4a:31:c4:07:a8:07:51:66:ec:03:a8:11:c3:43:33:
ae:b7:51:8d:cc:db:8b:1e:9a:c3:ef:aa:2a:7e:0b:
a7:c3:93:23:40:09:3e:bc:5d:be:45:32:36:23:76:
eb:cb:ea:be:b3:87:4f:98:73:7d:27:7e:ea:e5:44:
e2:a4:3c:c8:64:36:b9:a3:76:a9:e4:3c:d5:30:4a:
00:91:4a:a2:d5:97:f9:9f:50:1d:d4:88:95:73:0b:
f1:07:72:65:9c:49:6e:d8:3a:aa:8a:7d:e5:e1:61:
e8:b8:44:b6:af:46:3a:45:62:4d:1a:e9:7d:d1:11:
f8:d7:c1:2d:fe:7d:bb:95:92:90:35:a5:c5:3a:6a:
38:6d:fb:9a:fb:78:82:d3:f9:27:91:51:f7:49:16:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:3D:D2:C9:2F:DB:91:87:A1:B6:13:B0:A6:7D:61:35:F4:20:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ba:09:b2:97:28:43:1c:42:2d:92:14:fb:d1:96:16:d9:86:
f0:23:6a:1f:29:4a:a6:bb:57:a6:b9:c6:a1:bb:63:94:65:5c:
92:88:2e:45:ca:93:f3:d9:e5:4c:3b:7c:a5:91:b0:13:f0:4d:
a6:35:e8:07:c6:c3:f0:c6:10:e6:fb:44:1f:fe:41:a2:0b:db:
61:c7:bf:e6:3d:29:d6:81:25:b4:69:de:78:bf:f7:9d:48:0d:
ec:f5:d5:b9:56:d8:f5:20:2f:99:e8:41:c6:83:5e:f4:d4:81:
6b:7a:2d:db:b4:04:47:fe:1f:e3:bf:ff:e0:01:1b:43:2a:45:
86:04:75:c6:e8:cd:b3:dc:7f:27:24:38:97:3a:3c:d4:10:1b:
99:ab:e4:7a:f2:7b:0f:87:2d:ae:05:8f:5d:10:5c:c7:76:81:
36:21:ef:b9:20:69:90:a0:0b:d8:d2:17:ee:e6:30:c6:ab:8e:
58:7f:2a:04:30:d9:fe:a6:27:f1:b0:a0:3d:5d:64:8a:89:af:
9e:15:ce:03:72:c5:e5:28:69:c5:7e:f0:dd:c7:3e:67:9f:6a:
52:c2:25:60:d2:4b:a2:1e:af:79:92:33:50:c6:40:2c:54:ca:
00:74:80:71:9e:0e:b7:fb:b9:8d:3f:bd:88:52:9b:14:8d:ff:
e2:1f:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:30 2025 by rpki-client