Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/7241d360-8b98-3868-8cc3-308a2527d3e0.roa
File: 7241d360-8b98-3868-8cc3-308a2527d3e0.roa (raw, json)
Hash identifier: o+xZNqM+xpEdLdqhRHKh3d7f5oho6YMHBJVjWsI3aAE=
Subject key identifier: 48:F1:65:43:71:A7:D8:C1:CA:2A:02:2F:FA:94:B9:6A:F7:B2:06:D1
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F432858487B85B61EA6B955FDCE020700
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/7241d360-8b98-3868-8cc3-308a2527d3e0.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 8018
IP address blocks: 162.251.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b6:1e:a6:b9:55:fd:ce:02:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=c7c08b8e-c49b-4a72-8581-8291a886cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:b0:0c:2a:62:0f:ba:2c:04:4e:be:4c:66:
32:1b:2e:7f:ca:34:15:65:f8:5f:8c:4d:dc:fa:a3:
fa:51:e7:8d:fc:28:4b:a6:9c:50:a3:c3:a7:fa:ad:
46:7e:cf:22:8d:4c:da:ed:14:4d:e0:7a:55:3d:4d:
0c:9e:bf:fc:2f:11:12:61:e8:05:25:86:31:c0:24:
34:fe:a0:bb:77:59:d5:e2:fd:ff:df:4b:f9:e6:0e:
ec:55:c4:0a:e6:f4:19:f5:c1:15:23:f6:0b:dd:ac:
ad:19:57:d6:5c:65:56:e3:14:31:33:d5:9d:f7:e7:
b8:e7:d9:19:dd:10:9a:c2:2b:19:3c:65:d7:6c:d6:
49:7f:2a:a1:b7:b0:55:9b:f6:4f:6a:8d:2a:13:1c:
a2:1f:14:8a:58:5d:2b:38:0d:42:6c:cf:f7:ed:29:
12:41:65:c8:f2:38:2f:23:66:4d:43:bf:b1:0a:b6:
3a:24:1e:2a:49:ab:f0:b4:71:4b:1e:16:a6:7c:7c:
7c:91:69:20:75:92:81:15:57:cb:01:22:72:03:c7:
31:ed:72:4b:b5:19:bd:15:fe:cb:d7:54:f3:15:01:
f7:ee:c0:86:d9:3c:6c:7c:cc:ad:f9:d9:e5:44:d7:
06:d6:a0:67:08:6d:bf:f9:ae:d6:9c:a7:ea:1b:81:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:65:43:71:A7:D8:C1:CA:2A:02:2F:FA:94:B9:6A:F7:B2:06:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/7241d360-8b98-3868-8cc3-308a2527d3e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c9:9d:6c:73:4c:24:06:9c:9f:1e:a9:6a:7b:4a:c7:a8:b7:
2a:bf:70:60:9f:31:52:0b:2b:42:d7:b0:28:7f:84:9e:47:4e:
24:e3:c7:ee:50:9f:c5:db:b2:42:64:73:ca:47:b0:9c:b9:a5:
66:cd:44:13:6f:53:7a:bc:0f:40:13:83:ec:d1:dd:24:75:72:
20:b8:1e:2d:0d:ae:62:fa:05:1c:77:e6:ca:db:19:f2:4a:8e:
42:57:2b:8b:53:1a:09:13:d9:7c:2c:72:32:2e:c2:0f:5f:04:
39:10:6b:26:de:d7:bc:ea:0d:a1:d8:18:ce:6a:16:f0:ff:07:
59:4c:e6:89:39:30:6a:32:87:25:2d:a6:f6:d6:fd:11:af:e3:
cc:7e:09:6d:ea:69:79:e9:38:88:ad:c7:06:ba:16:02:df:8b:
7e:d7:54:e7:c0:2f:ff:6c:a7:1f:88:ef:81:e3:ad:84:e1:c2:
2c:d3:12:13:66:f1:ad:bf:ea:0f:54:46:3c:0d:e1:c7:54:4f:
ea:89:46:39:c0:0e:6f:52:27:0d:ff:85:af:01:5f:1f:63:84:
5f:be:22:ed:14:f0:c0:90:36:cc:d1:a0:f3:b2:70:da:c8:de:
9b:14:32:63:fb:a6:df:29:61:b0:cb:e1:0e:1a:6d:a5:bd:b5:
24:ba:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:39:20 2025 by rpki-client