Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52e1d6-5635-3a26-b5e4-58335ba43dbc.roa
File: 4d52e1d6-5635-3a26-b5e4-58335ba43dbc.roa (raw, json)
Hash identifier: wZxMoWauIfpWbEtfigP08+DI8cYUWsGYzmjzNahoYJY=
Subject key identifier: 5C:23:CC:6D:1C:3B:9F:B7:5E:32:38:1C:46:D2:6B:3B:A9:E3:CD:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F64DF894EA89E1A562DCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52e1d6-5635-3a26-b5e4-58335ba43dbc.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 162.151.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4d:f8:94:ea:89:e1:a5:62:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=a4d35eff-be7a-4622-994f-c7a49643c0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:d3:19:11:b2:d1:e7:3a:6a:2c:0a:23:12:
6d:04:a5:d2:69:43:fc:04:14:f0:f3:bb:42:4a:99:
39:62:7f:7f:ac:d4:0c:ba:72:20:88:fe:43:94:ac:
c6:78:ca:71:4f:2a:15:17:dd:43:82:19:6c:d2:4c:
47:9c:46:bd:60:d5:27:50:ed:b1:5c:dd:e9:54:cb:
f9:2f:a3:ee:0d:fa:05:e1:cb:05:4f:67:bd:6a:4d:
de:4a:b0:7e:84:8a:bc:44:e9:c0:fa:57:85:8b:bb:
80:9c:82:e6:a0:37:b6:20:bb:ec:e6:4a:59:82:fb:
8a:82:de:59:51:54:05:de:9c:55:e9:8f:46:4c:00:
74:9b:6e:dd:6b:2e:a5:85:f1:12:a4:c2:be:2c:0f:
f1:e6:fa:5d:1e:7b:04:5c:c6:85:99:93:e7:33:91:
da:39:37:78:ed:c8:d0:02:ba:1f:b8:79:f9:68:ba:
05:a1:fd:a9:17:19:08:89:d4:8d:18:80:63:5f:42:
44:39:7b:0e:f7:58:ea:71:88:0a:4c:4c:44:51:03:
97:74:b0:49:49:c3:a6:79:c3:69:c0:85:b4:ea:85:
bc:84:86:f9:5f:d2:67:2b:dd:e1:ec:37:57:61:fe:
40:b3:08:62:19:68:19:34:2c:10:02:f8:18:a9:b5:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:CC:6D:1C:3B:9F:B7:5E:32:38:1C:46:D2:6B:3B:A9:E3:CD:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d52e1d6-5635-3a26-b5e4-58335ba43dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
162.151.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:04:36:e3:45:55:74:94:f4:13:46:25:52:5b:d3:a5:8b:6f:
92:2f:e8:8d:40:0b:f6:a2:e1:8f:db:97:1e:db:d6:9b:c9:a2:
15:cc:65:93:35:23:6e:f0:d1:71:e0:2c:ea:7d:bc:45:47:15:
69:0d:bb:3a:42:b4:34:cd:82:8f:d7:54:57:72:a1:88:5d:5d:
b7:ad:63:9e:08:99:44:af:d7:2d:3d:08:a7:03:1a:48:40:c2:
4f:93:b9:e2:ac:44:9a:72:b4:21:f1:1c:0a:13:fe:a3:0a:26:
ac:f9:a0:47:fa:f9:91:e5:2e:03:06:42:30:f4:c1:e5:34:c5:
df:e3:e5:5b:97:f6:5b:83:52:a7:1a:3b:1b:a1:b1:7c:54:22:
92:1b:d2:8a:67:e6:8e:68:0a:eb:8a:d2:a8:e0:d1:0f:00:42:
00:1d:94:ba:80:21:9f:7b:3a:4d:91:d1:84:8c:17:06:12:93:
c5:de:c8:1e:c0:14:65:69:34:7c:8e:b4:cf:56:fd:53:60:cd:
52:38:6a:1c:0a:0a:09:b4:7b:2c:bc:b0:64:11:b0:e6:41:f4:
92:42:b2:ce:c0:2b:41:e1:79:9d:c3:45:8b:35:0b:a5:8d:85:
0d:56:13:03:fb:22:e6:43:5c:d6:81:38:4e:d1:64:41:1c:08:
1f:bd:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:55 2025 by rpki-client