Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
File: a8952ba0-0688-3408-8645-ab4893961008.roa (raw, json)
Hash identifier: b793B2HzrZpc7wIRPEumilz0ct1K+7zd4s9HBuy7m08=
Subject key identifier: 07:24:13:E0:0D:A5:CE:FB:47:95:25:70:60:ED:F1:FC:DE:81:E7:44
Certificate issuer: /CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
Certificate serial: 010D0C9F43285849287E6EFF32DF1C8742BCBB00
Authority key identifier: AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 25844
IP address blocks: 162.90.0.0/16 maxlen: 16
162.90.0.0/22 maxlen: 22
162.90.1.0/24 maxlen: 24
162.90.96.0/24 maxlen: 24
162.90.97.0/24 maxlen: 24
162.90.98.0/24 maxlen: 24
162.90.99.0/24 maxlen: 24
162.90.112.0/24 maxlen: 24
162.90.114.0/24 maxlen: 24
162.90.116.0/24 maxlen: 24
162.90.118.0/24 maxlen: 24
162.90.144.0/20 maxlen: 20
162.90.160.0/20 maxlen: 20
162.90.176.0/20 maxlen: 20
162.90.192.0/20 maxlen: 20
162.90.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6e:ff:32:df:1c:87:42:bc:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=afb2fe74-4026-4987-ba9f-cab9a51846ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:6b:46:07:88:5f:28:0d:d0:af:f2:68:e7:
59:cd:4f:1b:c1:60:76:fc:11:bd:fe:e7:dc:b1:69:
23:6e:2a:49:ff:9f:3d:08:28:98:7a:85:4c:1e:a4:
d6:fb:c2:35:36:b6:36:20:c2:a1:b3:a8:13:b9:a0:
3b:48:48:e2:e2:95:78:c4:6a:df:37:a0:e9:45:a2:
5d:cd:8b:4e:a9:ec:19:d3:3d:b9:8a:c0:ef:b4:b3:
c0:8e:dc:5e:b0:7e:45:b7:ba:f4:5e:bf:41:8a:b6:
9a:35:92:73:9f:15:94:d8:a0:c0:f2:99:d6:46:a9:
fe:00:30:49:26:7a:dc:97:b6:f7:10:8d:af:ad:e1:
1a:bf:9d:7f:a5:b8:34:12:46:9b:09:89:57:71:2b:
c7:e5:1c:75:87:e8:c3:75:79:9c:80:f0:ec:0b:e2:
1f:c6:86:71:00:56:40:02:84:ab:00:75:0b:d1:ae:
55:f2:0d:59:67:fa:69:c2:17:1c:7d:51:69:53:a0:
13:81:9d:f9:fe:0e:2a:5d:30:4f:30:0a:2d:e9:c6:
8b:4c:cd:f0:42:27:b8:61:69:1b:8a:1a:73:ad:94:
e2:b3:11:59:a8:5e:92:a2:7c:c4:65:07:e5:ab:cd:
e8:82:96:80:1b:c1:14:f1:2e:95:d2:f8:c9:bb:6b:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:24:13:E0:0D:A5:CE:FB:47:95:25:70:60:ED:F1:FC:DE:81:E7:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.crl
X509v3 Authority Key Identifier:
keyid:AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cc:c1:55:38:53:ad:f4:91:c0:bc:0d:c8:08:dd:80:2e:28:
69:4d:1f:f3:b2:ca:1b:a6:04:d1:84:60:0b:f4:15:6b:78:51:
da:e7:6f:98:f1:95:fc:13:94:2a:07:54:60:4c:41:5a:ce:fc:
f9:a1:b8:5f:fc:d6:71:05:05:5c:2e:06:c2:0e:eb:29:52:59:
4d:c5:d0:b5:8e:90:c6:83:85:6e:28:3d:09:6f:b4:e6:8a:3e:
25:3f:0e:00:fe:e8:ab:3d:b6:90:ad:cd:0d:88:9f:3a:74:19:
62:54:f7:12:e3:ac:c1:6e:f5:45:af:db:8a:e7:55:7d:2d:78:
08:b8:7a:66:b1:53:7b:78:ba:06:1d:0f:6d:70:13:44:f5:3a:
5c:90:ca:c1:05:37:c1:b1:8b:34:ff:a5:2a:71:6e:dc:77:fd:
f0:3d:d9:5f:b4:f8:1a:95:48:f4:2c:d3:90:43:51:3e:5b:90:
a9:fd:50:c9:c5:77:b7:5b:23:b4:9c:51:cf:39:14:48:2e:12:
47:0f:68:57:e1:05:05:b4:3b:92:56:b4:ec:90:a5:75:98:74:
72:54:41:ea:71:67:85:58:6b:fb:fe:8a:4f:88:35:db:95:16:
55:a2:9f:b6:76:ca:db:bf:e3:87:c9:c6:c9:ec:32:c5:d7:e0:
c1:e3:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:31:58 2025 by rpki-client