Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
File: 2782020a-b333-378b-976a-19c150b5397c.roa (raw, json)
Hash identifier: U2iCp012/qcmVHiJmJMiPHbni3sAB8VDViEK3jGD97c=
Subject key identifier: 86:CB:66:01:31:A1:8E:44:BD:9B:4B:4A:4B:40:60:E0:7A:D6:C9:A6
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F432858491246AEAC40FD0767729483E0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 8075
IP address blocks: 161.221.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ae:ac:40:fd:07:67:72:94:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=4397e996-5732-4c1c-9682-d11cfe8def75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:c5:2a:99:8d:b0:4e:e6:38:67:92:6e:8e:
86:dc:e8:99:55:f6:b8:95:a0:13:ac:20:f9:75:67:
40:72:28:10:b6:a8:e9:95:20:0e:fb:8d:5f:0e:a2:
dc:89:ef:ea:e9:26:6a:f9:7d:fd:40:b7:a6:bf:76:
14:82:20:6d:cd:60:04:20:e2:ef:c5:10:58:a6:9c:
12:db:b7:2b:24:f6:75:db:db:6b:dc:59:f4:4a:9e:
22:e1:e8:68:1c:05:eb:ea:50:c7:af:21:56:a1:96:
21:54:a1:9a:3c:2a:ba:1d:69:f6:cd:cf:da:28:00:
57:29:e0:b4:65:81:dd:47:3b:e9:3f:a4:32:98:3b:
d4:5a:65:5d:40:a4:02:33:36:60:3c:ab:26:bc:4c:
d3:10:c7:23:3a:bc:13:5d:6e:43:a1:5b:34:42:ea:
ee:75:09:de:db:1b:f1:67:ae:8f:25:d5:a8:0c:f7:
c0:e5:64:0b:3a:e2:a4:16:eb:e9:47:2a:3e:8a:54:
2f:4c:c0:82:fd:9e:8f:df:cb:f8:e6:da:84:a3:38:
cc:a9:04:d4:37:40:7e:57:8c:6d:d0:ad:00:97:b8:
c5:23:bb:29:2f:aa:70:01:4a:92:b8:ad:bb:03:9d:
1e:6d:a2:30:ac:8a:70:98:50:4d:c7:cf:0e:85:6f:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:66:01:31:A1:8E:44:BD:9B:4B:4A:4B:40:60:E0:7A:D6:C9:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:80:59:7d:de:20:19:66:f2:c0:71:0f:bf:e3:2e:13:94:9f:
11:dc:ce:5a:bf:6d:28:9b:fb:63:77:33:26:26:7f:b9:73:ac:
8e:1f:dd:0c:d9:03:e0:c0:b3:4b:02:cc:c7:46:07:ff:bc:79:
74:0b:fa:1e:ec:e2:da:49:a3:ab:c4:2d:9c:0a:40:16:cf:65:
6d:3c:7e:17:51:e5:05:e9:8b:f9:8c:81:35:d1:d4:a8:34:a1:
c5:d5:b6:6c:f4:16:09:e0:17:34:50:4f:66:01:5c:d3:2a:1c:
28:b2:59:18:88:56:14:14:2e:8e:e2:aa:07:fe:8e:87:26:9d:
6f:50:07:89:57:34:9d:5b:b5:f8:a6:46:cd:cb:1e:7f:11:32:
42:b0:03:0b:0c:44:c1:22:85:42:df:b9:5c:12:62:aa:ae:27:
b6:ac:05:6b:66:79:99:ff:f0:b2:ea:b0:86:05:92:aa:d3:5b:
d3:7e:ba:a9:f0:e2:78:7f:87:46:a2:0d:c5:e2:f6:9b:61:7b:
04:7b:57:97:81:1b:3f:ef:7c:bc:a8:71:61:81:35:d5:2c:9b:
3c:24:6f:e5:ae:1c:c7:d0:38:fd:12:1d:58:1d:cd:5b:d5:e2:
17:2a:f0:59:1c:32:8a:48:05:f9:96:65:8e:84:6d:a8:9a:58:
82:4d:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:39:59 2025 by rpki-client