Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa
File: 7adc5a60-4651-3030-acd8-f244b3bbe0da.roa (raw, json)
Hash identifier: mFlBHFCmNVdFVI0UUHJXZTfjZk1DUvzsOC4OW9ieq6c=
Subject key identifier: 56:EF:1E:C6:95:7D:E6:11:B8:3D:90:7E:8A:B2:F2:F8:7B:39:44:ED
Certificate issuer: /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial: 010D0C9F43285848C580F8C81C16278ECF7C5EC0
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 6461
IP address blocks: 173.249.160.0/22 maxlen: 24
2602:fb15::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f8:c8:1c:16:27:8e:cf:7c:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a13454c1-d96c-4a68-837a-766d3855de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:a6:f7:b9:ef:b1:fd:8d:9f:9c:a3:4b:be:
7c:fd:de:9e:bf:c0:60:10:81:f5:f7:99:ba:cc:0a:
d5:2e:33:a0:68:e8:0e:c3:f1:f1:8d:ef:62:26:5c:
81:61:f7:ff:80:6e:86:26:db:a2:83:13:3d:64:51:
a1:af:62:53:72:e6:de:0f:1e:5f:57:f5:8f:4c:83:
c1:0e:43:7c:2a:63:0e:f6:6b:da:4a:04:2d:1f:dd:
bd:93:15:ce:39:d0:8a:c4:7c:4c:65:9c:ea:06:0e:
97:44:a9:44:d9:f5:f6:bb:40:a6:bf:39:87:e6:09:
f7:2d:4f:0f:e7:a1:28:7a:85:db:b5:c9:94:9b:15:
9d:c8:89:f0:f3:36:15:c1:52:3e:45:bb:e1:d2:e9:
86:62:f4:e6:57:e4:29:ba:42:d4:b4:a6:e5:ef:5f:
44:7f:11:d1:0d:d4:ea:06:cf:5a:c3:c2:10:ad:7b:
c1:ca:53:e3:97:be:22:dc:2f:4a:3c:42:95:0d:f2:
09:11:6a:2b:a3:2b:86:80:90:27:37:a7:78:2c:bb:
c9:7f:f7:3c:34:e6:20:9b:21:a7:db:6e:58:e4:16:
02:60:39:51:88:bc:5a:99:a9:8e:98:73:ea:b2:36:
0b:dd:fc:f3:2e:2c:4f:6c:84:9e:58:eb:08:5b:ce:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:1E:C6:95:7D:E6:11:B8:3D:90:7E:8A:B2:F2:F8:7B:39:44:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
X509v3 Authority Key Identifier:
keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
sbgp-ipAddrBlock: critical
IPv4:
173.249.160.0/22
IPv6:
2602:fb15::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ab:60:f5:33:f6:90:a2:60:8d:b9:2f:5f:c7:51:4a:5d:4f:
5e:cf:b6:59:9d:21:9e:7a:d8:9f:55:76:06:73:59:84:61:3c:
a5:ba:9a:a9:8b:91:d8:26:6f:9e:31:16:6b:ba:5b:94:bb:2a:
a1:e4:be:62:87:9a:48:6f:a2:9d:8b:f3:56:20:37:cb:a0:5e:
d7:bf:7f:94:94:67:4f:77:0b:7e:9e:a8:23:be:aa:4b:9e:1c:
9c:da:e5:cd:78:49:ae:a7:70:eb:75:85:4b:30:97:7b:9f:90:
c1:10:4b:6b:28:15:fe:a0:59:09:fa:a9:38:ec:ca:90:75:67:
51:84:b8:23:db:94:3f:c7:2b:4d:9a:ae:53:d0:ab:c6:71:60:
ef:99:d7:fe:6b:2b:38:d5:3c:2f:7c:24:82:be:49:ee:8f:93:
13:17:ca:ac:77:5f:5a:40:f8:ff:57:d8:41:5c:2d:53:6d:e7:
7c:ce:68:d9:88:42:b5:b3:ce:dc:9b:bf:82:f0:de:a5:65:1f:
fa:85:6d:2f:2a:38:a2:8b:ca:81:0a:ee:7f:e0:bf:56:1b:ac:
d8:ca:49:e4:6d:b4:de:19:e2:62:9c:cc:e9:8b:15:60:03:a5:
8a:90:18:55:58:75:10:78:59:45:00:7f:19:28:87:b0:f6:13:
3b:73:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:55 2025 by rpki-client