Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa
File: 7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa (raw, json)
Hash identifier: bqI/0vxpjY2hwEQD0UDHhYUG77TzMm13D7J7KyF4RpI=
Subject key identifier: 6A:F2:79:F5:13:5E:5E:29:B3:86:82:76:4C:F6:16:2E:E7:6A:FB:3D
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858491246C5A69ABDEE9AD433CC80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 22925
IP address blocks: 162.221.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c5:a6:9a:bd:ee:9a:d4:33:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5e6d7fda-6c17-41e4-8ee4-9ff074f263c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:84:c0:e1:87:66:91:17:2d:c5:a5:35:4f:
a3:85:88:48:66:fa:da:69:d4:be:cd:47:a9:78:63:
15:f0:53:17:32:0f:f1:84:37:23:f3:f8:f2:fe:a7:
c8:23:ef:14:aa:1e:90:49:e3:bc:12:38:3d:61:fe:
08:a1:41:0c:eb:9e:e5:ac:ef:f9:54:79:d6:a2:86:
d2:c3:dc:85:21:2e:24:1b:e9:67:ad:32:87:24:b5:
23:ac:a1:68:93:3e:f1:18:1e:37:c1:51:f1:86:bb:
60:90:62:b1:53:24:a7:18:9f:e9:04:37:c4:73:4f:
6f:1c:df:24:48:5e:55:18:40:41:13:cd:c4:ca:21:
39:af:b4:a6:39:f7:ca:b2:8f:82:54:7a:e4:b6:86:
0d:f3:da:d2:fb:f3:c4:4e:e6:78:16:e8:3d:46:bf:
0e:91:3e:c1:0f:eb:81:45:71:96:e0:ed:c2:ef:7e:
56:be:8a:8b:d3:59:19:2d:90:45:a6:cc:41:46:8b:
64:4b:39:6b:13:89:fd:9e:0d:a3:af:fb:75:57:4f:
f6:80:63:86:51:17:03:29:cb:8e:ad:cf:b3:4f:a9:
52:fa:d0:cd:ab:d9:46:e0:54:6e:b3:0b:fb:1f:f0:
6f:45:a6:48:c6:0c:78:61:2b:f7:6d:a2:c2:92:43:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:79:F5:13:5E:5E:29:B3:86:82:76:4C:F6:16:2E:E7:6A:FB:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7f43a0dc-e9ca-3da8-ab74-890e20c39735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:46:8c:22:bf:29:90:98:47:7a:b0:c2:7c:94:43:95:1b:ef:
6e:ff:86:e8:0b:96:c4:3c:db:2a:25:4c:96:ef:11:04:7c:2a:
03:f7:64:32:53:c2:48:47:aa:80:12:39:a9:cf:9b:4c:06:11:
24:8c:3c:7d:13:79:09:e4:d4:8e:56:15:da:c2:2b:94:10:dc:
2b:b8:e1:ac:3d:2a:2c:c2:2b:c6:83:2a:08:7f:a0:07:fe:0c:
7f:27:e8:f7:2d:3c:c8:11:b4:15:d1:69:e0:13:a0:f4:eb:4a:
31:b0:2c:ff:1e:4c:a6:86:54:fb:11:7c:09:23:fe:94:ca:62:
79:e0:df:1e:40:b0:ef:45:34:58:99:9a:79:ab:9f:17:91:79:
3f:df:35:33:21:9c:9d:e5:12:5d:18:66:f7:94:70:2e:54:63:
38:16:06:b2:84:08:2c:f2:7c:47:93:66:61:d2:6a:00:86:3c:
6e:73:cc:a7:04:8a:d2:e4:63:4f:e7:51:67:5d:37:13:aa:ff:
90:f4:b2:af:86:df:38:ff:fd:9b:43:a2:a1:fc:4b:f8:c8:61:
97:95:90:08:dc:3f:0f:58:4a:78:b3:9f:92:2a:77:c8:9f:bc:
78:1e:b2:92:39:2f:14:c1:6e:69:c5:70:1d:44:76:6b:73:82:
fb:24:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:45:59 2025 by rpki-client