Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
File: 450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json)
Hash identifier: RamqQzk3LnbrbIDcSrs6qwBiY8ljJVGZakR8qZdePhI=
Subject key identifier: F1:DB:E3:AD:FC:27:30:0A:FD:B6:C0:12:D0:5A:88:37:E8:3C:EC:01
Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial: 010D0C9F43285848ADC6062F531ED496F9EB3400
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 13347
IP address blocks: 167.253.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:06:2f:53:1e:d4:96:f9:eb:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=da646999-f612-4678-91b2-be6caf0c9100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:ed:c2:5f:12:d6:3b:d6:29:32:84:c6:e3:
28:3f:be:82:3b:d5:18:1d:e0:89:0b:60:be:9f:d6:
99:4b:0e:cb:94:7b:68:70:ae:3f:ca:cf:30:4a:15:
7b:0b:ff:c6:e4:2c:02:51:db:5c:43:d5:d9:73:85:
a6:a5:87:4b:e2:f0:e9:59:8c:05:35:65:da:94:1e:
03:7c:92:a3:66:d2:31:ba:9e:72:53:92:ae:02:98:
72:e9:cb:ea:1a:f0:88:51:7d:e2:46:ce:e5:0a:df:
55:c9:70:39:f2:0a:d9:4f:0b:7f:e4:81:19:f0:b0:
9d:23:50:cd:dd:38:91:8f:bd:d2:0a:3d:a4:99:f4:
3b:45:9c:c5:94:fc:1f:36:60:0b:a7:cc:a0:c6:89:
1f:56:da:0d:1f:77:52:61:19:0a:a7:d3:8b:2d:d2:
e1:41:21:bd:a0:96:0a:1f:1b:3b:51:3c:06:b5:5f:
5b:d6:57:38:66:16:27:2b:9a:5a:3e:dd:2a:e1:fb:
7e:d4:d5:cd:e6:a5:b2:b8:34:9f:41:c4:94:98:80:
9b:ae:af:e1:df:f6:35:0a:6e:1a:20:b8:ca:bf:6e:
35:e1:30:2d:39:fc:71:52:42:fe:37:d3:59:88:8d:
a0:a8:b3:da:be:08:ed:0f:b6:76:87:cf:db:f4:cb:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:E3:AD:FC:27:30:0A:FD:B6:C0:12:D0:5A:88:37:E8:3C:EC:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
X509v3 Authority Key Identifier:
keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:ba:ae:fb:e0:45:ee:77:ce:cd:81:c0:dc:01:fd:3f:b3:8c:
b6:b8:e7:ba:ee:48:88:5c:fc:7c:7f:4d:a8:07:b2:ca:e9:68:
c6:26:bf:58:9f:5a:1a:c3:19:09:04:e5:13:43:a4:82:78:e2:
87:6f:33:01:e4:7e:bd:5e:13:b8:0f:de:d6:a1:2a:73:be:81:
ca:55:9c:dc:35:35:5a:20:0e:9a:c1:63:df:fb:d4:db:54:44:
7a:68:42:1a:8b:23:64:eb:58:04:b8:1d:86:19:10:0d:0d:05:
90:43:e9:f1:cf:08:5b:9f:9f:de:95:53:a6:0b:a9:c4:e4:74:
fe:78:28:d8:41:8f:36:a0:74:7f:99:83:79:45:a2:3a:25:8a:
6f:4a:d2:a1:a4:2d:e4:74:a0:ad:37:1c:5b:88:79:4a:5f:c2:
07:1a:38:d3:ab:6d:a0:65:ea:72:1b:9f:5f:eb:ea:b1:a8:3c:
ec:a6:77:d4:3e:c0:91:13:82:e0:91:de:41:76:ad:35:bf:24:
86:0f:bb:b9:b3:44:8f:aa:89:c6:46:98:49:88:63:ab:a4:06:
26:f2:24:b7:10:12:9f:a3:d6:8d:d0:83:2a:74:90:b4:9c:12:
cf:c9:a0:0a:9a:d1:17:7e:c6:5e:ab:8f:f2:77:4e:c2:95:3a:
cd:f9:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:46 2025 by rpki-client