Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File: 536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier: boxOMfj8QAJtsbu4npxOEKyzdG8hTnRa1g7JpPFfiHo=
Subject key identifier: D0:92:30:D0:F6:1E:16:9F:55:B0:57:66:9D:76:94:92:93:B9:60:E4
Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial: 010D0C9F4328584900214A98B5CA3B7477A25880
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 161.199.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4a:98:b5:ca:3b:74:77:a2:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=12507f3f-6af1-45d5-9013-78f81105d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:62:fb:b5:9b:cb:76:4f:01:1a:7e:ed:92:
1c:91:93:fd:ba:5f:3f:79:80:48:4d:fb:ce:ff:e8:
0f:7c:3d:00:1b:99:e4:dd:0a:27:30:bb:ca:2e:e0:
d2:d2:9c:df:18:18:8c:06:17:09:1e:33:bb:95:8e:
ff:e0:13:c7:37:2c:65:fc:2d:0d:83:e1:3e:d6:62:
7b:14:33:85:e3:47:77:89:d5:31:64:01:bc:01:90:
85:a4:a8:ed:6b:03:90:eb:5f:87:09:35:31:0b:61:
29:09:8f:1d:6e:93:5b:9d:df:10:3e:d2:44:f4:58:
f9:4c:df:a3:de:d7:b9:d1:6d:59:90:1f:93:e3:2f:
3a:6f:a7:1d:b7:33:35:b8:aa:e6:71:6b:16:22:b9:
e4:fb:10:ce:55:65:71:8b:a6:22:e6:35:d8:7c:ed:
3f:c1:80:3b:d2:5c:13:75:07:5b:55:e7:33:9e:60:
44:ff:86:b6:64:23:a1:85:87:05:6e:7f:da:86:2b:
99:02:a6:27:2a:4c:8b:65:c7:a1:d1:e7:09:31:5b:
40:fa:17:7b:45:01:ac:3b:81:3b:6a:28:73:2f:c9:
88:fb:5e:a5:c5:3b:4f:56:ba:94:d0:5e:d6:b6:cc:
d9:33:1d:64:94:d3:c5:da:ed:48:dd:25:2b:9d:8a:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:30:D0:F6:1E:16:9F:55:B0:57:66:9D:76:94:92:93:B9:60:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
X509v3 Authority Key Identifier:
keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:66:2b:15:aa:ed:97:49:3b:35:63:7c:d1:b2:03:9d:ab:f9:
02:e1:55:ec:84:25:8b:48:33:90:f7:30:30:9d:34:e3:30:26:
8b:cb:46:8e:d8:3d:3c:9e:98:b7:5e:37:8a:e3:8b:49:44:5a:
c2:69:e6:d3:0f:b5:2a:13:02:1f:a5:be:6c:78:3a:f6:09:99:
39:7e:38:6a:58:8d:5d:9c:0d:3d:81:e9:7a:8f:c6:9d:3c:ed:
c9:6b:64:3f:90:58:52:8c:2e:88:23:60:db:dd:b5:2d:e5:e3:
f1:cf:e0:df:6e:6c:ab:f1:67:8c:fb:98:a1:48:88:dc:11:64:
4d:83:c5:4b:3b:30:8a:24:98:94:bc:9c:07:7b:21:70:13:71:
d0:45:8b:dd:55:83:1c:0f:99:44:87:f7:86:f6:d9:7e:bf:c3:
76:72:aa:f1:cf:34:88:be:7b:b8:9b:df:d7:73:e3:0c:aa:df:
76:8b:1f:02:9e:94:0e:55:66:45:8a:38:81:78:21:cb:6d:3f:
c1:e0:18:81:4d:04:eb:fc:09:6f:51:49:1a:09:42:40:75:2c:
4e:60:66:6e:23:d7:6c:f6:0c:9b:84:3f:8b:ff:69:15:2b:58:
32:d4:83:15:c7:a9:bc:4e:1d:bc:b7:48:1e:9d:99:75:f0:8b:
fb:93:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:00 2025 by rpki-client