Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa
File: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (raw, json)
Hash identifier: xdZKTUnu2Uf7UlYPD6ZM5ZnilqYpasLUKstGiQbGUcY=
Subject key identifier: FE:E9:27:4F:C6:96:6B:C9:8B:86:56:C4:08:37:DD:62:9B:FF:63:46
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F4328584957F41598D89253DC75C04F00
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 62952
IP address blocks: 162.251.168.0/24 maxlen: 24
162.251.169.0/24 maxlen: 24
162.251.170.0/24 maxlen: 24
162.251.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:15:98:d8:92:53:dc:75:c0:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=27da77d5-22ca-4019-b8bc-541a7003a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:35:22:f9:56:d8:9e:32:43:8d:d3:a0:4a:
86:8d:fa:87:d6:6e:65:2d:db:01:5d:b1:5c:73:9a:
31:4a:54:6a:39:e6:26:5d:70:1f:9d:31:27:d3:df:
73:e4:ce:1c:ce:f9:cd:7e:f0:6c:b5:01:2f:11:87:
15:0b:5a:d2:a2:0d:26:5b:49:36:a7:f7:3a:9d:53:
44:76:fa:ca:eb:fa:7c:69:a7:af:a6:d0:3c:6a:d3:
dc:3b:1b:ed:6e:0a:d1:7b:7a:57:17:1c:ae:b5:23:
9c:4d:69:6d:37:6f:6d:b5:64:0a:94:64:89:78:2a:
9c:e4:7c:5a:76:dc:cb:0d:6e:bf:5b:0e:2a:a8:38:
f3:d7:d3:7a:42:ea:49:0b:4f:06:e2:08:35:48:a5:
30:58:12:c2:c4:c1:bd:26:0c:85:ea:a5:4b:c7:25:
11:4f:87:3a:91:01:b6:5c:31:1c:af:5e:38:05:0c:
cd:45:f8:59:42:86:4d:7d:dd:34:33:48:e0:7f:b7:
97:b1:63:75:2a:54:20:81:5c:9c:75:76:2c:2d:3f:
54:b6:a3:c5:21:31:8a:34:86:94:e6:25:4d:f3:d0:
2d:ed:0c:e6:91:14:7a:b2:b4:a1:c6:80:07:25:8f:
8a:a0:09:d0:b8:cf:2c:1b:cb:8e:b6:50:a2:51:51:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:27:4F:C6:96:6B:C9:8B:86:56:C4:08:37:DD:62:9B:FF:63:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:b1:f2:5a:3b:05:51:ac:36:84:fd:c1:19:72:4e:d6:63:56:
ab:c1:2e:c7:b6:37:a3:cc:95:c0:8a:dc:4a:8e:55:eb:ee:ae:
42:95:bc:da:83:7e:1b:b5:a4:23:26:4d:f1:48:b7:e7:d8:25:
e6:a8:bf:55:3c:f8:0e:7d:50:86:be:33:d1:9a:dc:f7:bf:b8:
50:d2:c8:25:b6:6a:8a:cf:eb:be:ed:8f:2d:88:c4:6a:b9:5a:
d4:1b:c9:76:9b:c4:af:c5:01:8c:d7:59:ac:77:60:cc:40:04:
b4:22:05:46:54:54:3a:b3:c4:a4:98:cb:69:f6:5d:0d:af:30:
05:1d:8e:a8:b4:4b:d5:0b:3f:ee:3b:0c:8e:e1:ae:3d:d0:6e:
0e:e9:fb:a1:f0:4c:1c:c4:c6:c4:d9:46:d2:29:da:62:d1:70:
95:ea:c3:7e:11:b2:b4:19:14:68:42:3e:b9:32:37:c2:d1:94:
c1:e6:94:e6:98:19:fe:7a:04:93:f4:70:99:2b:78:a9:24:29:
b7:25:fa:1e:29:5d:31:b0:91:69:09:3e:b5:e0:4d:84:53:6a:
9f:2b:2d:9d:70:55:00:55:40:51:e6:46:02:12:b6:a5:e0:3d:
f5:14:a8:69:92:9a:d9:e7:3b:f4:b6:45:f6:fc:50:2b:8c:6b:
a2:e2:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:29:59 2025 by rpki-client