Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa
File: 00ab0e0c-a930-322f-aa25-d16164065582.roa (raw, json)
Hash identifier: 4uUwLRBX65BsdQJB+xaQpHT+9jYE9JQ0CVHFTdzwADw=
Subject key identifier: E4:A2:11:A4:DB:9C:4D:BA:ED:BE:0B:37:94:0E:D4:43:AD:BA:88:22
Certificate issuer: /CN=322dc169-3c90-4ef2-9c84-cda14edd7dda
Certificate serial: 010D0C9F432858491D717F94064696688D571160
Authority key identifier: 33:8C:CF:2B:DA:06:28:92:99:C8:7F:7C:C4:CE:ED:B9:6E:DF:15:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 53423
IP address blocks: 69.5.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7f:94:06:46:96:68:8d:57:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322dc169-3c90-4ef2-9c84-cda14edd7dda
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=25f4d854-bae1-48d0-9810-9b73744950e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:2c:e9:06:b1:47:79:ed:8b:0c:b3:b9:c6:
2d:5e:eb:02:53:48:9d:94:cc:d5:71:6b:ae:be:c5:
bd:81:dd:6d:91:0e:ac:cf:d2:cc:98:2a:bc:e2:82:
02:af:94:43:7e:f0:e3:ac:a9:e7:81:8e:46:34:12:
64:ec:36:80:e5:e0:3b:74:88:f7:a9:15:61:b6:2d:
fe:f8:06:6c:95:a8:4c:a5:f0:cb:35:89:b3:55:1c:
8b:59:35:da:fb:37:0a:d7:b0:02:4b:03:3a:0b:76:
e0:b6:6e:d6:ac:2d:8d:e2:3c:61:b1:bc:59:41:a1:
16:50:17:2a:90:d7:54:b0:b7:c7:72:5c:4d:64:c5:
95:b6:af:f4:96:5a:15:bf:39:08:82:d0:6c:a7:90:
54:9d:fa:35:7b:71:7b:35:85:f3:0f:01:d2:82:27:
cf:27:a0:b1:ae:d5:02:82:c2:5a:4b:65:c6:5f:13:
f6:ba:fa:06:59:05:83:07:ef:a9:e3:68:82:29:8d:
da:7c:91:bb:20:7c:e1:60:83:70:87:5d:9e:46:75:
a5:f3:1e:6d:e1:d8:37:34:c3:49:af:ff:90:e7:13:
d7:6a:21:0e:22:cd:bf:ad:3d:59:42:13:ed:40:38:
95:1c:fd:27:58:13:8a:75:f5:bb:31:23:c8:86:84:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:11:A4:DB:9C:4D:BA:ED:BE:0B:37:94:0E:D4:43:AD:BA:88:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/322dc169-3c90-4ef2-9c84-cda14edd7dda.crl
X509v3 Authority Key Identifier:
keyid:33:8C:CF:2B:DA:06:28:92:99:C8:7F:7C:C4:CE:ED:B9:6E:DF:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda.cer
sbgp-ipAddrBlock: critical
IPv4:
69.5.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:9f:f0:4a:f1:80:58:9d:68:9e:f3:ff:06:c4:56:3e:26:a0:
fe:1e:69:6d:cc:e3:04:76:79:1c:db:6d:9d:fc:96:3c:01:ed:
37:a0:f9:4f:93:26:d8:e4:a6:ba:49:48:fa:3f:8e:81:ff:a1:
e4:83:0a:d9:5d:7b:49:c0:3f:67:ac:2a:60:22:65:e4:a2:20:
c0:dc:9a:ac:be:5e:1e:fe:c3:0b:e8:7c:56:41:1b:db:b4:30:
04:30:a7:f2:48:84:17:ac:f5:06:c3:99:c6:41:a0:91:1e:46:
7a:48:a3:da:e1:76:ab:d5:4b:93:3b:28:1d:f6:09:2f:df:91:
55:0a:c0:9f:93:7e:53:e5:71:08:ab:48:ff:13:97:e4:81:9d:
cf:8d:85:93:15:9f:c3:03:10:f0:7a:6f:55:10:25:14:07:cc:
4b:f0:6f:96:4c:ca:6c:d8:55:17:c7:2d:bb:f8:09:c6:09:7a:
ef:3b:24:68:d9:bb:8c:5d:69:2c:98:23:12:d9:d4:89:ae:e4:
11:a9:e4:a8:ea:d8:f4:d8:7a:48:45:4a:ee:1b:ac:04:55:e0:
66:89:24:ad:60:fb:31:1a:92:88:17:ba:8d:03:b8:d2:59:30:
f1:b0:4e:57:e9:17:8f:5a:a2:68:3a:62:2a:4a:2a:a8:2d:8e:
55:6a:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:13 2025 by rpki-client