Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/e25a302e-d423-30d2-8353-7e36d7320ccf.roa
File: e25a302e-d423-30d2-8353-7e36d7320ccf.roa (raw, json)
Hash identifier: VLnwN7Zp/GnvYN/jLSZL5dtvaexRusloggSsDJqpNeo=
Subject key identifier: EF:97:9F:77:15:69:7C:8F:C9:2F:A2:6F:42:5F:6D:3C:D5:42:FC:C1
Certificate issuer: /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial: 010D0C9F4328584840E5564B8CFC8AEF8B579F80
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/e25a302e-d423-30d2-8353-7e36d7320ccf.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 36295
IP address blocks: 162.254.8.0/22 maxlen: 24
192.153.46.0/24 maxlen: 24
192.245.118.0/24 maxlen: 24
208.93.220.0/22 maxlen: 24
209.141.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:56:4b:8c:fc:8a:ef:8b:57:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=9487e0b3-90ce-4663-b79d-95a6a231f5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:c4:28:78:52:15:31:f9:b5:ef:b0:d4:1c:
d7:01:6a:ab:79:47:9c:85:d7:fb:bc:5b:f3:df:88:
ae:6f:b6:7f:58:2a:66:03:cb:d9:fe:2a:a3:a5:47:
86:b8:30:20:dd:3a:e8:e0:6a:53:bc:56:80:bb:94:
e5:f0:2f:8a:55:50:84:7f:e5:60:b6:63:fb:2f:ab:
b0:db:77:4e:a9:dd:5f:df:10:89:1d:c9:be:66:ba:
4e:04:ee:e2:87:e8:fb:d1:8c:fd:e7:52:78:69:07:
ae:60:66:1b:c5:a6:28:d9:39:6d:87:67:de:4f:c9:
92:78:f8:47:10:9b:af:b7:8f:49:0c:a7:14:0c:79:
3a:e0:0e:ac:77:6d:75:68:ab:c6:91:62:c2:7c:c8:
02:e9:3b:f8:07:db:ca:45:25:46:b3:c7:46:69:7d:
9d:bd:71:09:18:4f:c3:7e:22:55:1b:1b:e0:de:51:
a7:dd:1d:e1:70:16:bf:7c:1d:e7:7e:34:11:9a:83:
9d:90:45:f8:69:8d:e6:c6:0d:a1:8c:44:0f:49:4d:
32:8d:a6:2a:e9:76:cd:4d:d2:47:36:fe:e1:20:7c:
12:ab:a4:0a:0f:e6:0b:17:4f:cc:d6:5f:44:2f:90:
cc:ca:ed:71:f9:bf:95:88:e4:a7:dc:14:e1:d0:09:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:9F:77:15:69:7C:8F:C9:2F:A2:6F:42:5F:6D:3C:D5:42:FC:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/e25a302e-d423-30d2-8353-7e36d7320ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
X509v3 Authority Key Identifier:
keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.8.0/22
192.153.46.0/24
192.245.118.0/24
208.93.220.0/22
209.141.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e9:e1:76:51:e6:f6:c6:05:2a:63:30:49:f2:99:ac:b6:5d:
99:56:17:1e:13:34:22:f6:80:54:7f:ec:ca:84:8e:2d:f8:1b:
c2:41:5c:3f:b6:80:86:52:78:21:42:b3:cb:98:e5:f1:38:88:
fd:36:3f:10:1e:b7:4e:83:3e:0d:4f:7c:d6:1d:ad:c4:d2:b6:
d9:77:07:63:2b:fa:16:74:77:8d:84:5c:d6:36:51:d8:98:7d:
cf:20:e4:af:11:65:66:ff:ef:07:cf:db:7a:eb:64:42:b1:47:
88:dc:68:a3:01:6a:6c:87:16:c9:81:f8:72:7b:37:10:ad:73:
f3:f3:05:73:9b:4a:2c:3b:f8:b2:f6:7f:a9:c6:63:6a:e2:3a:
01:29:1e:a6:09:18:b6:ca:5e:b7:0f:44:d6:f4:e3:5c:27:18:
88:5c:83:f6:73:64:67:89:b7:af:24:52:cd:d8:66:a2:09:34:
70:41:16:be:f6:4b:89:dd:e5:ae:e2:60:a2:5d:1c:27:7a:62:
c8:c5:36:03:f8:7b:fe:2f:86:da:15:84:e1:9d:49:eb:a5:76:
3f:46:1f:db:cf:c5:7b:04:35:83:28:fd:8f:1f:76:fd:d3:f6:
ed:e0:4f:f9:14:86:99:6a:71:de:d0:02:bd:9b:5e:84:f0:b0:
46:e3:79:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:52 2025 by rpki-client