Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2e6e5199-c578-389f-a3c8-d212383a2137.roa
File: 2e6e5199-c578-389f-a3c8-d212383a2137.roa (raw, json)
Hash identifier: 9s3C5iZZj0+0ERGcHNhsy9m2Hwr0A9JuKc6efaYmYVw=
Subject key identifier: 51:D6:22:07:01:CE:D3:05:9C:97:9B:2E:C4:C5:97:24:07:D4:22:AF
Certificate issuer: /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial: 010D0C9F4328584790E86B533866D0A45F40B100
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2e6e5199-c578-389f-a3c8-d212383a2137.roa
Signing time: Thu 17 Oct 2024 01:04:39 +0000
ROA not before: Thu 17 Oct 2024 01:04:39 +0000
ROA not after: Wed 15 Jan 2025 02:04:39 +0000
asID: 7046
IP address blocks: 162.27.158.0/23 maxlen: 24
162.27.165.0/24 maxlen: 24
162.27.166.0/23 maxlen: 24
162.27.168.0/23 maxlen: 24
162.27.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:90:e8:6b:53:38:66:d0:a4:5f:40:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Validity
Not Before: Oct 17 01:04:39 2024 GMT
Not After : Jan 15 02:04:39 2025 GMT
Subject: CN=70dbb41d-547e-4aa8-8897-437a24c02e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:61:fa:c6:8b:c0:06:a0:73:c6:16:f7:15:
38:6f:5c:02:d4:4a:d0:f6:8b:36:ed:72:9e:12:8e:
13:a5:66:4d:1f:07:af:35:18:2d:07:e4:cf:1f:20:
ed:3d:48:bb:88:d5:a6:72:bd:e7:5e:54:ec:ea:46:
10:78:61:c1:b3:58:2d:b5:5c:ed:9a:81:bf:c2:65:
93:dc:f0:a3:1c:ad:e0:16:0e:8c:34:e3:73:9c:cc:
8b:e1:12:4f:6a:a2:7e:c0:f4:bd:d4:26:54:66:bb:
14:f3:cc:f6:c7:b4:5c:86:d8:30:ff:62:ee:29:6a:
3e:c7:1c:10:f4:e7:1a:81:94:e4:7a:32:b8:25:a3:
e7:c8:c4:b1:c1:fa:b0:fb:76:f7:89:69:7b:79:91:
d5:c6:8a:36:6d:d4:8d:6f:dc:4b:66:9c:27:1c:b4:
97:5a:e6:2f:fb:58:db:49:c9:08:c2:6f:ef:e3:b9:
1d:22:bd:66:68:9c:d2:5a:d5:72:42:b4:2a:f6:ce:
88:fc:46:d3:41:e6:df:d8:19:2c:02:d6:b4:3e:24:
4f:c8:5e:f1:ae:a5:14:07:06:f4:fc:e0:ec:46:58:
b9:26:3f:8b:66:11:39:1c:e8:ad:ad:29:24:56:39:
ad:10:5e:56:3c:2b:84:4d:00:93:b7:d0:0d:61:bf:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D6:22:07:01:CE:D3:05:9C:97:9B:2E:C4:C5:97:24:07:D4:22:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2e6e5199-c578-389f-a3c8-d212383a2137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl
X509v3 Authority Key Identifier:
keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.27.158.0/23
162.27.165.0-162.27.169.255
162.27.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:de:09:24:e3:a5:cc:c1:9f:e8:bd:2a:32:53:59:3b:d7:93:
26:45:1e:c7:57:0f:9e:ee:96:e9:1b:4e:c9:38:d8:54:07:bc:
13:0a:8f:8f:98:6f:ef:b4:6a:59:55:7a:6a:9c:48:23:89:81:
d7:4b:8d:30:d8:ed:e1:7f:65:bc:82:b8:16:d6:c5:84:43:1f:
64:31:60:76:64:0d:4e:09:66:91:63:37:0f:75:14:5c:63:6e:
8b:1c:a2:df:ff:98:da:ce:34:f5:0e:4b:44:18:ae:fe:c0:4f:
3e:26:8e:f4:d7:93:de:29:86:d4:41:19:01:16:cc:09:80:81:
98:cc:8b:0f:88:97:c9:6e:9d:46:5e:35:b4:40:ac:6f:c3:9d:
7f:25:c6:c2:14:53:85:2c:05:31:86:bc:5d:04:54:f2:cd:67:
35:12:51:9c:e2:6f:a3:0f:e6:76:37:8d:50:15:b8:92:18:9a:
80:f3:45:52:23:52:7e:47:8f:5a:0c:61:78:5c:d4:52:df:ca:
1b:da:88:a2:4f:03:11:1b:45:e8:47:31:a7:68:63:c3:bb:eb:
a4:ab:d0:4f:8c:eb:94:ac:99:f5:54:b3:4d:f1:82:d5:2a:f1:
e0:34:f4:fe:da:bb:cd:2b:d2:f9:3d:58:f6:08:f0:04:6d:c0:
f9:1e:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:34 2025 by rpki-client