Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
File: afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa (raw, json)
Hash identifier: uDd/hZfr1eL03jFyzjFmobSqyBjXSX1a5HaNJi8a5oo=
Subject key identifier: EC:7F:47:3A:51:2D:AF:8E:3F:5E:D2:70:10:0B:B8:41:A0:E0:2B:AA
Certificate issuer: /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial: 010D0C9F4328584957F3F64B80CD89777DA5E8A0
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 14870
IP address blocks: 162.244.220.0/22 maxlen: 24
2620:122:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:f6:4b:80:cd:89:77:7d:a5:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=f76324c4-7750-4ab6-ab62-224d1275c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:80:9d:c6:61:ba:f9:6d:ab:be:df:03:5f:
ba:6e:07:4c:3f:8e:38:c4:be:d1:ab:17:72:5c:3d:
9a:3f:d6:f0:fa:df:37:bf:60:11:3b:8b:3b:0e:b3:
ef:08:e5:48:ba:22:ea:5e:31:a5:f7:15:8e:e5:ae:
14:91:80:d4:76:fb:c1:8c:1c:32:7a:67:1e:60:29:
38:ba:9e:99:68:76:3b:b8:f9:49:af:63:eb:a7:70:
9b:e0:7b:52:3d:8d:19:cb:4d:a1:57:46:3e:f2:d6:
3f:48:b4:76:a3:6a:e2:86:89:f5:bd:cf:94:bc:d6:
a7:4d:4b:bb:db:38:90:70:19:15:6e:75:91:e9:07:
92:90:32:4a:90:83:43:b5:81:26:08:54:b3:19:1c:
f5:83:93:32:83:87:24:29:df:04:fc:91:5f:18:70:
f3:33:82:78:86:a8:61:fe:95:7e:af:a6:03:21:57:
8b:21:df:58:0f:d2:76:59:10:a5:b1:47:16:3f:05:
c5:97:4d:bd:f0:1b:c9:34:e0:c0:03:82:89:bf:cf:
28:4c:4d:9a:46:78:6a:d3:fc:d9:93:59:df:cc:03:
08:ac:79:c6:1c:ab:8d:6f:a2:85:bd:49:b3:75:ca:
e1:52:96:dc:6e:69:d5:a8:aa:61:ea:54:9d:1d:44:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:47:3A:51:2D:AF:8E:3F:5E:D2:70:10:0B:B8:41:A0:E0:2B:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
X509v3 Authority Key Identifier:
keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.220.0/22
IPv6:
2620:122:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:2d:fd:a6:1b:6d:98:46:93:99:92:51:78:36:11:40:73:0d:
10:8c:59:f6:68:34:b2:63:bd:10:d8:29:24:a7:c1:b3:e0:d1:
b0:0f:3a:f4:d1:04:bc:ee:f2:90:6c:b0:e5:e5:1f:6e:29:a2:
2b:6f:cf:a0:cc:62:b0:59:e7:36:d1:24:8d:3b:7a:3e:bb:94:
a2:ac:b7:01:30:ca:37:ae:1d:0d:28:2e:ba:28:70:a2:60:93:
55:94:20:a2:f1:d4:ee:1c:c3:6d:0e:62:48:0f:ab:d5:23:ad:
0a:a9:fb:2f:f5:06:aa:e7:b8:80:b3:e1:2e:34:03:c2:ec:ff:
73:6a:2b:1a:2f:a9:92:67:1e:fc:ab:8a:37:75:35:28:07:24:
f5:8a:c3:4c:6f:f7:a4:0a:19:1c:80:44:f6:36:35:7e:9e:43:
f6:bf:1b:14:11:aa:14:e7:f3:86:85:7f:cb:18:67:30:f8:87:
8f:5e:e6:c4:4d:a9:e7:61:56:8c:bf:f2:a9:a8:15:3c:77:88:
17:ec:2d:34:26:0f:4d:cc:dc:28:da:e6:e1:c9:ef:25:05:2a:
99:90:65:5a:d6:9d:64:f4:63:d4:69:12:94:c3:b3:1e:e2:2a:
78:4c:89:3f:21:ef:4f:df:9f:98:6d:12:4f:4d:70:24:7e:a6:
90:86:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:31 2025 by rpki-client