Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa
File: b6fbb67c-9203-335a-950d-613a9b372ea2.roa (raw, json)
Hash identifier: Dbafmh8M5U+AQYdJI3uVotnEHK38C+h65vmRYkuUfwQ=
Subject key identifier: E2:41:7D:A9:8A:14:9D:7B:21:23:28:13:55:6A:F4:1C:FD:AE:76:FE
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584950F96BAC2701D0A19B2916C0
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 22612
IP address blocks: 162.0.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6b:ac:27:01:d0:a1:9b:29:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=99ce1565-8126-4454-a3fe-f6299eeb7f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:33:f4:5f:5c:46:28:0c:48:e6:5f:17:2a:
97:c2:b9:09:8b:6b:92:84:92:20:fd:d9:ac:0c:e5:
82:98:27:0c:93:44:24:73:c7:54:b4:19:71:35:b2:
5c:a8:a9:2b:65:5e:e0:90:1d:f9:7b:b0:9e:a5:50:
3c:fe:8d:8c:89:41:01:0c:a2:6c:83:44:60:cc:5e:
d2:9e:12:fb:b2:8a:07:ac:7f:9f:a8:d5:fb:c8:94:
a1:a7:2d:54:4a:9e:f8:e3:a2:b7:0e:60:31:ed:ff:
d8:ff:5b:c0:7c:df:29:63:6b:68:24:cc:95:b0:92:
f9:4d:c9:9a:11:05:2e:7e:58:ce:69:f6:e3:be:00:
96:d2:e8:63:e7:2e:71:1e:87:bf:fe:54:ae:9d:f8:
b2:25:0f:88:89:48:71:e1:91:0b:c6:b8:24:be:8e:
16:07:4b:2c:ec:62:f7:56:0b:e7:88:13:31:43:ad:
79:51:0e:42:51:b7:80:73:c8:13:56:9c:2f:a7:84:
2f:c6:02:cc:c4:90:4c:16:21:62:99:ba:7b:a0:ec:
25:75:c0:17:10:a6:85:3f:13:5d:08:c4:cf:e6:37:
4a:45:3e:f9:35:eb:09:b5:20:ae:da:49:a0:1a:03:
60:e1:df:0d:1d:6a:28:09:02:7a:9f:26:5a:9b:2a:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:7D:A9:8A:14:9D:7B:21:23:28:13:55:6A:F4:1C:FD:AE:76:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.0.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:0d:e5:f5:39:01:20:8a:9e:24:49:20:c6:0d:8c:f3:26:a7:
b2:e4:27:b8:7c:04:aa:27:68:f2:6a:21:c0:d1:64:47:5f:47:
42:c8:46:3b:7f:96:09:01:40:38:aa:d9:4a:41:c6:11:80:60:
8e:4c:10:6a:c4:c3:c4:f9:fb:11:45:db:b8:38:9c:d8:04:f5:
71:0e:2e:a2:6d:f9:d3:28:98:96:f1:8c:29:3d:0d:c9:05:71:
3d:19:87:f6:37:43:30:71:33:9f:43:41:ee:12:61:da:02:18:
54:ef:8c:b4:02:71:91:2e:f5:5c:72:3d:d1:bf:1d:b5:3d:0c:
1e:6f:72:f7:b6:30:66:4e:dd:be:ce:1e:a7:f2:43:26:ab:86:
8f:c2:8e:92:fe:54:24:24:2e:cf:b5:a2:20:3d:28:2a:34:e3:
8d:75:3d:d7:d4:ce:2e:d1:8d:e2:68:74:41:19:ab:a7:c1:11:
96:dd:00:ea:eb:64:4f:54:9c:cf:f8:79:45:82:ff:18:e3:cf:
5a:1e:e6:07:50:1f:b9:5b:ee:e6:21:50:4c:73:41:96:80:85:
e3:43:b8:39:17:50:c4:0c:7b:9b:7b:98:72:e6:37:29:74:15:
ea:4f:9b:4e:00:d6:2b:6a:94:87:07:61:fa:f6:47:fc:77:7b:
9f:e8:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:28 2025 by rpki-client