Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
File: 3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa (raw, json)
Hash identifier: xxL2vVYZTy2cBZU0XEC7fKjznBXsus90YGij+7VBxe4=
Subject key identifier: 03:E9:76:35:EA:E9:1A:33:AA:91:1D:8B:DC:79:B6:09:07:AD:3A:B7
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494CC9556C3D91CB225AD95180
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11232
IP address blocks: 137.22.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:55:6c:3d:91:cb:22:5a:d9:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=aa90c533-ec02-4672-a3ff-d5290916af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:aa:2c:9e:a0:2a:65:98:5b:9d:f2:5a:05:
e1:1f:b0:c0:42:97:0e:cc:6f:12:eb:f8:24:e5:68:
9f:cb:4f:79:96:ee:90:b0:72:ac:35:16:14:82:70:
83:eb:5f:4e:f4:e0:04:3c:89:22:fb:b1:c0:a9:d7:
96:bc:60:e2:ce:27:c6:ad:8c:e6:e6:f4:a3:71:37:
f8:bb:40:68:43:0a:b6:d6:76:1a:2c:81:6c:24:74:
80:33:e1:4b:86:17:db:d4:c7:62:14:39:45:88:e3:
e2:d2:97:11:e0:df:38:12:b4:76:02:57:10:2b:3d:
b8:f7:fd:e7:96:1d:e1:92:c4:be:38:e2:f7:ff:a9:
76:39:9d:e1:65:b9:4d:74:d1:79:73:16:92:b4:bb:
ac:54:ab:d4:a3:e3:8b:34:a5:90:1d:ec:29:8e:b5:
c4:eb:f6:84:22:39:08:0a:ce:02:3c:d8:d4:4b:82:
6f:cd:3c:b3:12:91:cc:98:21:fc:0e:cd:90:7c:e2:
aa:0f:29:29:ef:b1:b4:e7:30:9d:f2:d7:0a:aa:2c:
44:68:03:b5:bb:8a:1a:b5:d7:25:2f:ce:43:93:74:
f6:89:8d:a5:23:4f:59:23:f6:ef:b1:c0:27:a1:03:
fb:26:ca:b3:a1:22:8a:8f:e7:51:78:47:1a:63:14:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:76:35:EA:E9:1A:33:AA:91:1D:8B:DC:79:B6:09:07:AD:3A:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
137.22.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:86:d9:f9:59:30:fe:8d:70:b8:89:1c:17:12:e5:74:09:eb:
96:b8:8b:68:f5:21:74:1b:61:86:5f:b4:36:66:41:2e:a3:44:
76:c8:96:21:af:35:62:d5:ae:bb:f2:18:73:c5:ae:4d:52:e0:
ca:e9:62:29:69:52:10:68:01:5c:fd:55:58:19:ed:08:b9:65:
8a:1b:7a:f1:ae:a0:c8:1b:e6:c2:61:17:20:2c:04:e2:42:3d:
54:33:57:d1:5e:f2:4e:80:21:3b:bc:ab:3a:db:2a:3f:62:cb:
fb:e0:03:d3:09:78:76:fc:a4:fd:0b:6c:e9:1e:e5:a0:d7:75:
be:33:10:98:19:3e:76:a4:38:1f:7f:fc:2a:ff:ff:57:13:cc:
51:01:0a:4e:a0:99:10:f0:d0:20:37:52:b0:8e:6e:b9:16:88:
31:a0:6e:ee:d5:1a:09:b5:41:f0:6e:6b:ac:2b:1f:2a:ba:93:
38:ab:b9:fd:fb:59:91:d1:f3:d7:de:d8:49:76:65:22:2b:6f:
9b:81:a9:08:59:4a:0d:70:9b:f3:77:39:ca:af:44:f8:9d:54:
af:ee:74:27:e7:8f:b8:39:4f:69:98:03:b6:05:e6:88:57:58:
ae:8d:51:98:73:75:fb:36:41:99:f5:2b:3a:77:ae:a4:7d:49:
25:3d:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:57 2025 by rpki-client