Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa
File: e554991a-5b06-3de2-9fa4-e22a8747951f.roa (raw, json)
Hash identifier: QiOjmSNc0whI+D4bQBDsMtJlcQD1w8ePcGXyskGG8f4=
Subject key identifier: 8E:8C:E9:C3:9F:BB:36:60:AF:3C:2B:72:4F:7B:55:BB:ED:27:02:FA
Certificate issuer: /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial: 010D0C9F43285848854B4FF4F75DD9A3DF070580
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 46133
IP address blocks: 2.57.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4f:f4:f7:5d:d9:a3:df:07:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=f47a4b41-46f8-4289-a11b-a4f6315867e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:13:e1:d3:fb:f9:10:e8:d6:68:ab:e4:3b:
40:48:73:20:ce:04:53:73:cd:e5:4b:fe:fc:81:d2:
cc:24:77:e8:9e:22:fb:ee:9d:d0:31:a1:07:bf:e2:
02:9e:60:23:07:7a:25:e4:84:d7:e5:c3:30:d8:49:
aa:d5:00:ba:63:dc:c6:cf:75:0a:e0:0e:9b:27:6f:
89:c3:56:dd:9c:0f:b2:9c:32:e7:3c:e6:d9:9c:ad:
75:0c:8c:b6:1b:1d:cf:8b:a1:77:06:c5:fd:3b:5f:
75:c1:f6:cd:17:59:6b:6f:a5:5e:4f:d3:a3:c2:ac:
92:39:9b:a7:4a:91:8c:8a:26:9b:12:c7:eb:e3:f6:
41:87:55:70:89:dd:8a:e3:2e:9b:57:a6:46:b5:e8:
59:09:1d:f0:44:ec:50:9d:49:e5:d4:13:3b:fe:b3:
a2:cd:70:8f:8a:1c:0f:74:25:4c:81:63:da:3a:15:
5b:7e:31:ae:72:8f:28:90:76:b6:ac:9a:83:ea:43:
8f:1b:3d:c7:a7:7b:a3:6c:b1:9b:43:e0:92:97:a6:
20:b5:e1:5b:ec:6b:68:e3:69:4c:94:dc:a5:a8:c1:
c9:1b:23:df:e7:a6:80:99:81:af:52:7c:7f:d6:d7:
6c:f8:54:38:84:51:2c:4a:db:cc:9f:f4:1b:9e:d7:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:E9:C3:9F:BB:36:60:AF:3C:2B:72:4F:7B:55:BB:ED:27:02:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
X509v3 Authority Key Identifier:
keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
sbgp-ipAddrBlock: critical
IPv4:
2.57.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:67:23:7b:33:fc:b5:b1:06:d2:d3:22:6c:31:25:a0:9b:45:
22:8a:64:12:6a:42:e8:b7:e4:f9:98:b0:63:e2:63:a8:e9:f1:
51:14:83:22:67:92:60:5e:bc:16:f1:de:d4:bb:46:cc:11:90:
01:84:9d:9f:3c:6d:ed:ff:53:a6:8e:0d:bb:16:5b:ca:41:1e:
a4:57:78:a9:11:b9:d0:81:6e:27:5f:b7:4a:c3:aa:41:02:c0:
38:7b:1c:2e:89:25:47:f6:3b:a3:e0:46:cf:5d:ad:ac:c9:71:
e9:d7:bf:8e:b3:13:64:c9:55:ac:c9:15:8e:21:b3:d5:1c:4b:
06:f3:b4:d3:3f:30:13:cb:ee:54:06:87:fc:a2:59:05:05:f7:
5a:73:c1:14:4f:1a:54:66:29:43:de:87:bc:2a:36:c3:b8:26:
3a:1c:38:f0:49:b7:3c:2f:47:62:fa:e0:b9:71:22:34:47:7c:
a3:77:95:09:ef:2f:23:6f:52:1c:19:63:eb:0e:6f:92:b4:4a:
5c:3f:fe:cc:4a:e5:5b:47:db:d1:2e:14:eb:47:f3:3d:37:ff:
65:f5:67:84:46:3c:b4:51:61:d5:58:90:63:e3:a3:48:9d:fe:
4f:d9:77:52:aa:bb:1d:e2:4f:36:3a:85:b8:b6:7e:1b:4a:46:
4c:3e:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:16 2025 by rpki-client