Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/c8824502-e1bb-3747-98a0-85793b763699.roa
File: c8824502-e1bb-3747-98a0-85793b763699.roa (raw, json)
Hash identifier: wi9MVEr7jfq5CZJXFZDnoBygzUDoGSg9ovJdc7pYm38=
Subject key identifier: E7:EA:89:45:10:9C:21:88:94:E1:1A:07:65:66:8A:02:D8:75:D1:F4
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F432858490881955E6FE7F9AE9F247700
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/c8824502-e1bb-3747-98a0-85793b763699.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 169.145.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:95:5e:6f:e7:f9:ae:9f:24:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=a7f3938d-dbaa-4218-a212-b0e5887333e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:1f:5f:6b:a0:6b:9b:73:64:fb:f0:e2:dd:
f6:2e:7a:7c:a2:30:75:92:79:2c:0b:7f:5e:f8:47:
d9:8d:bd:83:12:48:4e:52:83:71:f6:0d:95:4c:61:
05:52:60:06:b3:f7:2b:33:8c:9d:f6:16:81:71:96:
14:2c:8e:aa:d1:28:6b:14:14:02:9a:7f:6e:dd:99:
f5:db:ab:fb:a2:53:45:d4:51:81:15:fb:ae:a5:ee:
e0:d7:0c:ff:57:9f:7b:73:ef:85:75:4c:f8:6a:cd:
05:d2:2f:5c:44:78:26:24:2b:ae:ef:36:41:f9:f5:
9c:d4:00:bb:2e:bc:24:1a:23:af:c5:ff:c3:63:11:
53:7a:51:c0:2d:49:69:69:79:29:f6:b3:de:da:53:
34:22:89:af:42:ed:86:1d:68:32:8f:32:42:34:e3:
98:56:6f:48:d6:53:a4:2c:a3:80:e9:65:30:35:33:
81:dc:75:36:3d:5f:68:f4:56:ca:3c:59:3e:bc:49:
44:68:e8:5e:15:d2:f1:24:ff:7f:1c:61:8b:5d:b8:
09:5f:29:4b:5d:85:ad:90:da:f6:a8:7d:24:b1:cc:
2f:6c:36:7f:1f:93:66:1b:3f:89:cc:2c:da:d5:a4:
38:13:1a:4c:7d:e1:80:70:d1:18:b0:49:2f:12:36:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:89:45:10:9C:21:88:94:E1:1A:07:65:66:8A:02:D8:75:D1:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/c8824502-e1bb-3747-98a0-85793b763699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:40:92:18:e8:ea:70:05:d1:f3:32:8a:44:05:74:fd:5b:74:
45:0c:36:48:b2:52:2a:e3:7c:3b:76:d8:cd:e8:87:fd:4c:99:
fd:d6:67:60:ad:2f:bd:1b:73:7e:0d:46:85:c4:93:9d:08:69:
6b:d2:e0:07:a4:2a:28:23:ed:b5:aa:7f:8d:68:2c:4b:fe:28:
1c:99:ff:2c:66:89:05:51:7b:a2:00:54:0f:9c:99:c3:98:ba:
9a:bd:9d:1d:78:bc:d3:b8:34:da:80:98:27:7a:ad:d9:00:f3:
a0:d3:16:6a:84:83:c8:9a:a4:3a:44:a8:5d:af:b2:ca:7e:14:
00:10:97:93:d3:60:a2:e0:e3:20:37:50:8a:87:d8:90:a4:3c:
14:37:38:68:c1:76:f3:76:5e:fd:af:41:8f:ed:81:ec:c6:00:
e4:91:a4:de:b5:2f:ac:87:6d:94:7f:0d:37:21:89:22:de:72:
68:fe:29:48:b3:d3:cd:b4:03:11:ae:ae:79:7b:30:f2:cc:ce:
41:e4:b2:f7:04:0a:92:92:30:14:b7:df:a2:5d:c4:a9:3f:32:
b5:e6:c5:c2:68:6f:d6:0e:b1:ac:75:9e:4e:d1:e9:43:ce:1d:
7b:7c:9b:42:f9:3e:d4:98:a7:d1:19:c6:01:ae:b2:f1:92:5a:
85:5d:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:50 2025 by rpki-client