Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
File: c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa (raw, json)
Hash identifier: fWlfhnFyY29jAgIRJhfGoaJ/2chw9UJbNAf8D1/JB5I=
Subject key identifier: DF:10:9E:63:78:A4:99:5A:3B:C1:91:EE:C7:76:9F:3D:CA:33:A4:19
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F4328584921840E32501A192AA0E4B700
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 6461
IP address blocks: 162.249.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0e:32:50:1a:19:2a:a0:e4:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=b6e45029-27c8-48c2-887f-01bd7a3356e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:16:cf:c6:ba:46:91:e6:0e:53:f7:12:e2:
71:2d:b7:c9:25:f2:48:fb:8e:dc:66:42:f2:e0:80:
62:fa:a7:50:b1:2e:ad:9d:3f:99:44:c1:21:48:04:
9d:7c:72:5f:13:46:d4:43:1c:50:ed:7c:f6:54:17:
0c:03:e4:1c:ed:a8:9f:bc:73:79:40:0e:62:79:a5:
34:02:01:83:21:cd:19:3c:b7:8a:aa:5e:17:99:10:
cc:d5:ac:ba:e2:6c:78:76:ff:f3:50:d0:f3:df:d7:
7f:a7:5b:68:d8:80:51:a0:ba:6a:10:e1:dc:88:99:
d4:7f:16:c3:70:2a:7d:56:a2:a7:68:90:a0:23:fe:
3c:ea:5f:ee:65:1a:db:43:6c:09:84:5c:51:76:2f:
78:41:bd:a3:db:db:fc:d0:eb:5d:b9:fb:73:25:31:
ca:da:4b:1b:19:53:df:35:6b:ab:08:be:ee:d2:9c:
4c:91:08:33:7c:74:95:e7:57:fa:75:17:b3:8a:12:
c5:cd:d4:9f:b9:25:ec:89:e9:d4:ad:0e:8c:f7:c2:
9a:3b:73:6e:af:85:9b:24:7b:e9:5c:c9:2d:8b:15:
c5:ba:19:58:ce:84:26:45:25:c1:2c:ec:78:49:2c:
82:ed:6c:69:02:57:be:0b:0c:3f:fc:19:49:42:cb:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:9E:63:78:A4:99:5A:3B:C1:91:EE:C7:76:9F:3D:CA:33:A4:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:7e:68:77:2e:99:54:67:c5:57:ad:ec:21:97:4f:0e:76:3a:
d8:28:6b:59:3e:87:5e:2d:3e:f5:2d:96:c9:90:42:f1:df:87:
93:a4:80:78:66:8d:6e:2e:93:83:c1:57:02:4d:0e:14:bf:16:
8b:6b:3f:d6:b3:2c:bb:4b:87:e3:71:18:10:68:7f:8f:82:ab:
19:c0:14:07:51:e6:79:03:7b:1f:e6:33:0c:d2:44:3a:35:d7:
9e:38:9f:ba:e5:a8:79:1d:fc:1f:52:7d:f9:3c:fd:b9:33:31:
97:fd:1b:4e:65:9d:36:e2:87:8a:6b:8d:8e:a3:27:da:6b:af:
4d:5a:e6:6a:91:3d:f0:0e:a5:88:70:fa:e9:c8:bf:3b:c7:53:
07:13:b6:3a:95:6c:e5:bf:3d:02:00:41:ba:c1:33:20:a2:dd:
a8:3c:a4:44:be:3e:13:94:a2:32:09:b3:42:48:10:f7:28:81:
01:d8:1e:f4:75:f1:25:fd:68:1f:7a:af:c1:13:a9:11:dd:8d:
e6:0d:cc:17:c3:d3:68:60:ea:8d:41:55:a5:a8:4b:d0:b1:f4:
a9:9d:cc:d4:9d:0a:ef:5e:c5:6e:83:30:3e:8e:2f:54:9c:76:
b1:a9:d7:2e:96:57:e3:48:c6:e1:48:37:d4:d6:eb:c9:d6:e2:
2d:86:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:04 2025 by rpki-client