Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
File: 61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json)
Hash identifier: ItlOHKdB82dZb3yP1tUSO9mhCPKqQOf8ZZePNTulxW8=
Subject key identifier: 4B:63:2B:A6:D2:4D:FA:51:B7:F4:C0:C8:6F:48:08:52:4A:77:05:23
Certificate issuer: /CN=e91007f4-8b69-443f-87b7-248480814a0d
Certificate serial: 010D0C9F432858491246ADABD755DDAEFFD97600
Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 11039
IP address blocks: 128.164.0.0/16 maxlen: 16
161.253.0.0/16 maxlen: 16
161.253.0.0/17 maxlen: 17
161.253.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ad:ab:d7:55:dd:ae:ff:d9:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a7a1b917-c2ba-4603-8497-2e1e92ac0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:04:55:0d:3c:8f:5b:23:08:9e:3b:bd:ff:
97:38:d6:3e:b4:ab:34:5c:44:20:b5:10:1a:a0:0b:
65:b0:5f:c8:94:61:8e:83:61:ca:2c:c1:16:96:33:
7a:54:85:71:7a:4a:ff:34:2d:11:e8:28:7d:ee:93:
72:73:04:0e:c8:71:17:71:e3:2a:8b:b5:48:d6:ba:
20:90:a2:54:d7:d1:f3:5f:3a:30:7e:b3:a3:5a:50:
36:2b:c5:db:7e:19:3d:47:90:da:c6:f1:cb:a8:b1:
03:a9:df:20:ca:02:6a:af:af:8c:70:b5:1e:04:ca:
77:2b:dc:f6:6d:d9:f6:8a:d3:79:fb:e6:89:75:cd:
b5:68:fa:76:b6:94:3f:0e:66:39:91:2a:e1:b4:58:
e1:7f:a0:ba:c1:68:f4:91:ef:30:e3:be:00:39:ff:
62:b0:50:92:5b:d9:63:5b:be:e6:c1:97:20:0d:49:
93:1f:03:21:ca:92:26:f5:7a:a7:73:1b:bc:ec:de:
36:2b:69:56:58:dc:16:67:c0:df:9e:3f:7b:79:4f:
a1:50:85:75:b8:9b:da:8a:bc:fb:2c:2a:3b:20:c3:
da:40:26:dc:6b:dd:52:eb:12:49:fb:aa:50:11:7c:
63:61:be:94:7f:cc:a0:2f:ea:a7:44:7d:f6:7e:3c:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:2B:A6:D2:4D:FA:51:B7:F4:C0:C8:6F:48:08:52:4A:77:05:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl
X509v3 Authority Key Identifier:
keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
sbgp-ipAddrBlock: critical
IPv4:
128.164.0.0/16
161.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:93:07:60:5e:31:42:e2:c9:1d:3f:ac:52:b9:02:1f:63:fc:
1d:a7:7c:b5:aa:36:44:44:d6:d0:b7:4f:2d:64:1e:c6:a9:2b:
f2:08:fb:98:18:ac:f3:cd:30:e3:b0:7a:e9:be:e8:95:f1:8f:
36:8a:ac:38:4e:b2:97:5f:02:c2:34:9a:67:d1:35:ec:6a:1e:
0e:72:78:b2:6a:ea:06:73:11:ea:67:39:c2:87:17:62:d7:77:
0f:f6:bc:d8:98:c6:af:16:40:7e:e4:b2:71:b9:4e:b9:5c:e0:
32:f1:70:a9:5c:57:7c:08:31:05:c4:29:ef:b7:b5:5a:8e:33:
a3:66:92:a1:27:7b:62:ba:a0:1b:92:98:dd:bd:7b:67:a2:65:
ea:a1:52:4f:ff:90:b0:a2:75:cf:09:4d:e0:db:07:29:21:a5:
d5:57:9e:ab:c5:54:00:65:25:ea:04:52:a7:08:ec:77:a0:f3:
cc:c3:95:ea:5c:34:03:06:45:bf:a4:10:4d:51:57:f5:f7:00:
0c:fc:fb:43:d2:8b:9a:c7:43:26:4a:2f:67:44:02:49:3c:67:
00:ff:f4:e0:90:d8:18:8c:e4:fa:8f:31:31:2a:d5:9f:3d:7b:
b4:e7:bb:cc:02:19:7a:4e:e4:b3:d9:da:81:67:cf:de:26:2f:
df:2d:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:34 2025 by rpki-client