Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
File: 3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa (raw, json)
Hash identifier: z3uLuXjjYtRSvrTDlj8kHBQt3uX9RZOLzv7y5NSD04Q=
Subject key identifier: DB:7C:A7:44:FA:03:7E:55:B8:8D:4A:1E:E7:1A:AF:90:DA:E0:38:68
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285849446948F549BDF9CC62F9EE00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 184.170.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:48:f5:49:bd:f9:cc:62:f9:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=e35a8a7f-51a2-4f9c-b2ce-925f2337fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:f2:c7:fd:d7:81:57:de:b0:8a:0d:c0:68:
9b:4f:01:25:d9:68:fb:1a:80:e2:69:18:75:14:1c:
d0:cc:4f:7b:56:c9:c2:88:c4:b7:00:a5:90:41:56:
e4:8a:19:dd:90:40:4e:87:75:71:29:db:43:83:c9:
8b:de:ee:ea:fb:b6:d3:bc:85:2b:ca:b2:74:bd:f5:
7c:7e:ca:2b:b7:95:8e:31:4c:84:6d:9e:b6:c8:6d:
bd:33:81:db:75:d4:30:13:b2:46:79:0a:02:80:84:
8f:6f:0f:bd:f0:68:cc:cd:3f:bf:ea:cf:ae:b4:33:
f1:5e:c8:24:27:92:f7:3f:5c:e4:0b:53:5f:f1:1c:
7d:9c:de:07:47:05:a2:20:81:50:91:d3:cd:cd:f3:
b4:c9:e7:83:8e:25:78:fe:97:9f:dc:57:86:fe:20:
4a:f3:28:a5:46:d8:1f:80:0e:4b:d4:fe:b2:0b:28:
3e:df:9a:a0:39:fe:df:e9:e8:3f:2b:ff:f9:08:ed:
9a:cf:63:18:e2:5e:62:da:bf:c6:5a:dc:a7:03:3a:
cc:31:51:1d:e8:6a:ba:13:11:bb:6c:03:2e:c6:c7:
10:1f:ba:54:0a:14:f3:84:be:d5:e5:71:ff:02:da:
43:56:23:81:42:25:ae:8b:ba:ef:52:36:05:13:3a:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:A7:44:FA:03:7E:55:B8:8D:4A:1E:E7:1A:AF:90:DA:E0:38:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3b52dda9-cb49-35fc-9ed2-53b54ae6134e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
184.170.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f6:be:ea:39:45:a9:a3:b4:ec:23:bd:08:b9:fd:f2:af:1f:
52:b4:01:ad:fc:d3:3b:1f:b4:c7:e5:a7:07:68:8b:b3:58:e5:
1a:1a:83:3c:2c:5c:ef:ad:6c:02:37:64:0d:27:e8:7d:61:fa:
41:09:ba:fe:a4:41:f1:56:b4:be:cb:2a:8f:b2:19:f6:9d:e1:
60:0b:aa:3f:c6:2f:73:42:c9:b8:94:48:44:12:20:b9:6b:f4:
d3:d8:7c:80:e0:3c:29:70:1a:73:af:f0:da:33:cb:1c:74:e7:
1f:9c:cf:0a:f8:f9:be:87:0f:a5:14:ee:be:8d:4d:cd:25:d9:
46:06:e8:5a:c3:79:a4:11:28:f6:d1:ce:0a:d0:35:ba:23:0d:
73:7c:17:64:86:fc:a5:f9:2b:2c:ba:58:27:9f:a5:05:e9:7a:
b2:f4:0f:cb:16:c2:1f:1d:cb:12:f5:9e:c2:01:0c:ee:04:b3:
83:9f:0c:cc:30:da:a9:c6:12:27:0a:aa:c7:b8:03:ed:2b:1f:
ea:be:e7:1a:89:7c:38:cd:aa:bb:fb:b0:14:ae:69:09:74:be:
d8:41:81:17:be:5c:61:bd:b7:64:b0:5f:c3:c7:67:9a:d5:19:
39:21:c7:a0:ed:47:0a:dd:ae:eb:69:5f:9c:cf:f3:3c:6d:be:
9c:7f:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:50 2025 by rpki-client