Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
File: 25b57fbd-9358-3be7-a98f-a532b62c0739.roa (raw, json)
Hash identifier: 0fzPFBPMV55nz/axmM/CEwPkZDVCUPLkx3LDCzdOe30=
Subject key identifier: 69:A8:D6:AB:C5:C1:9A:0B:BF:C3:C3:A1:2A:B5:B4:05:6D:F0:1A:69
Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial: 010D0C9F432858494CC937BA51D8B54B8F0B7456
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11766
IP address blocks: 162.211.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:37:ba:51:d8:b5:4b:8f:0b:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=8e5f015d-554c-472a-a2f9-3aa0d71b8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:da:f6:79:5e:3d:73:c8:c8:82:af:5c:26:
f1:fe:06:68:e4:f0:e2:dc:43:7c:c7:7e:fa:9d:b6:
57:f9:83:a8:07:83:e6:8b:89:ff:a5:03:4a:db:06:
19:11:05:95:30:75:76:16:14:78:6e:70:78:47:0a:
22:63:f4:b7:6e:c6:a0:15:ed:18:ce:ed:35:4a:4a:
18:47:9f:64:c3:b5:90:ea:8f:42:c1:d2:72:66:81:
ff:c4:52:95:85:0e:bb:a5:7c:5e:ac:62:7f:d7:87:
4c:41:fe:7f:16:2c:7b:ab:ab:3f:b7:cb:fa:42:6a:
ab:c9:a8:10:da:68:3d:11:de:15:8f:54:ec:b9:6f:
66:4d:53:17:98:33:3f:2f:e5:d9:65:46:3b:d0:ff:
68:45:f8:10:b3:b1:f2:00:dd:dd:42:d5:3f:1a:fe:
61:83:1a:d7:a2:c0:10:72:96:46:17:61:bd:90:fe:
ff:82:3a:4a:01:21:51:7d:6b:14:24:70:e5:3d:dd:
00:a5:3e:46:ba:a1:42:4a:d8:52:77:a2:c4:04:83:
7c:83:40:39:48:e6:d6:37:ca:55:b2:2a:c7:19:44:
d9:51:e3:be:75:74:7a:95:02:4e:4f:22:b2:18:6b:
57:4e:95:44:6e:1b:48:f3:5f:c3:87:df:9a:46:b4:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:D6:AB:C5:C1:9A:0B:BF:C3:C3:A1:2A:B5:B4:05:6D:F0:1A:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
X509v3 Authority Key Identifier:
keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:72:75:8f:a9:53:f5:a7:69:49:1d:4e:a0:7e:78:65:1e:51:
56:b5:93:99:ad:91:4c:98:6f:d9:74:91:b0:83:82:29:14:09:
d2:32:be:6b:86:ca:19:22:94:ab:bd:db:86:58:64:97:eb:da:
3c:f0:8e:09:07:f4:93:52:9e:5f:ac:d5:17:01:b4:79:7f:d9:
7c:90:d0:8e:de:3c:85:2e:c5:42:e7:8c:eb:76:3a:f3:74:73:
d8:8a:8d:ba:68:85:b2:ad:e7:a5:53:48:46:00:33:05:17:01:
9b:fa:b6:d9:48:19:f6:fc:d2:c7:8b:8f:26:a9:e5:7e:78:84:
99:f9:19:54:b6:b0:3d:0f:33:29:c3:9d:7c:b1:16:24:bb:c0:
6b:a1:d2:00:62:2a:bf:48:b0:31:27:c9:c2:31:a4:6c:d1:06:
65:f9:5b:42:ad:89:7a:b6:7a:cf:27:8c:58:cf:72:f6:32:63:
3c:49:64:cc:35:44:e8:e1:70:7e:2b:b3:4f:77:3e:29:b9:e9:
bc:c1:32:5c:ea:00:3e:df:d7:6e:0a:90:08:48:6f:84:74:02:
6c:49:5c:f1:5d:93:c1:71:1d:67:3d:1b:4b:6b:36:53:03:ae:
04:a7:22:a0:f3:a2:cd:75:e0:83:ea:dd:25:b0:b3:6b:fe:e9:
63:2d:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:21 2025 by rpki-client