Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
File: 8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json)
Hash identifier: t3jTISFBwuMdbsa001j2K30DIFuIBDDnooWR6Jx2a5o=
Subject key identifier: E6:F2:3A:2C:56:AA:51:78:F0:60:C6:FC:18:68:A8:33:DF:F3:D0:DA
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584913AC13F51FB465148FAAFC00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 161.129.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:13:f5:1f:b4:65:14:8f:aa:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=62a3afb7-b93f-4772-b2b2-01739e1aeb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:e9:d3:f5:3c:02:b0:1b:72:8b:79:92:e5:
52:e7:a3:a4:8d:48:7d:6f:91:ec:dd:96:26:f5:4e:
ee:a1:fc:8c:a4:1b:5b:5b:a2:00:ea:95:0d:50:6e:
73:6d:69:d4:4a:08:5a:ff:7e:3b:f6:4a:56:88:b2:
65:18:8e:12:19:79:3f:76:85:53:af:33:85:f1:d6:
0c:e1:94:e8:10:53:8f:23:29:5c:d4:f7:1b:60:a2:
f6:8c:4f:a7:0d:ed:6e:52:85:b1:53:38:80:1b:4b:
a2:e3:45:6a:35:16:85:53:47:72:62:09:43:c1:a9:
26:3b:12:9f:57:9e:45:3d:8d:4e:1b:0b:01:68:92:
1a:f3:27:4b:f9:e0:13:69:26:96:a5:cb:3b:0a:85:
a4:36:8d:97:22:6f:b5:95:fa:59:0a:1c:b5:df:ed:
34:ad:7e:7c:83:cb:b1:ad:80:5f:47:51:8e:16:89:
97:71:f1:ca:66:88:8f:ae:c3:46:eb:a2:4d:1a:a8:
4c:e5:39:f2:4c:7b:49:5f:73:af:87:df:0d:c1:f2:
2f:0e:d5:d6:50:ee:43:f3:9d:2d:1c:1b:88:11:af:
db:4a:0a:ad:de:bc:e6:f4:1c:d9:2d:9b:a9:8f:73:
e8:63:16:c8:a0:e7:a4:bb:67:48:5f:95:51:70:8b:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:3A:2C:56:AA:51:78:F0:60:C6:FC:18:68:A8:33:DF:F3:D0:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:f1:d5:14:31:f3:51:86:49:76:00:56:bf:6b:d2:7d:1d:b3:
f8:de:f7:3e:1b:7d:91:4f:44:8f:7a:d4:2b:a3:81:66:0e:84:
5a:46:06:26:4c:4f:01:53:95:c5:f6:f8:2d:0d:26:16:4f:f3:
23:d3:40:ac:a1:9d:a6:15:ed:b2:8a:a8:3f:1b:d5:71:9a:8c:
ec:0d:a3:42:f0:9f:f7:f0:a7:08:ae:5a:72:a4:09:91:b3:20:
70:59:28:4c:85:0f:53:25:3b:ae:9b:8f:7a:9c:04:66:71:90:
5e:be:f5:14:6b:20:25:5c:9a:e8:08:5d:7d:48:ad:07:b6:9e:
7d:56:e4:00:6a:eb:72:09:5c:6b:8c:de:25:7b:fc:4a:5e:8f:
9b:23:0c:22:31:dd:d9:08:10:94:73:dd:67:a6:bd:34:17:53:
f6:e8:fa:d3:25:dc:01:26:58:bc:06:78:06:96:b8:e6:20:b1:
0e:c4:24:c1:de:a4:1e:a2:34:7d:a5:b4:98:e2:f4:f6:ba:10:
44:9c:79:e9:cf:41:19:cc:c3:67:8e:f4:6d:83:f2:aa:e7:b0:
73:61:2b:90:cc:61:40:68:b1:d9:dd:34:8b:1e:20:07:2b:46:
cb:21:b7:50:d1:d7:33:e0:89:0b:61:f9:84:36:ea:c0:9e:ed:
a7:b8:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:18 2025 by rpki-client