Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa
File: 7ffba404-d2ab-39a7-afab-901b940aa767.roa (raw, json)
Hash identifier: xkbdEGTxmVTstP5OaPMfzT+v7ntC1rFjDi46WOFFRlg=
Subject key identifier: E3:0C:63:70:23:CF:94:45:83:5C:E1:4C:5A:62:D3:1A:1C:00:35:D9
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69E4A9A61AF0651191F00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 162.222.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9e:4a:9a:61:af:06:51:19:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=31e0a314-d722-47c3-af37-e5a920a3ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:ad:35:cc:7f:a2:1a:0a:5e:9a:e6:e5:2b:
db:32:91:ff:45:dd:26:3c:71:c5:ed:fd:44:d2:03:
f0:25:13:28:36:db:56:54:c6:6b:2c:64:78:6e:5d:
45:02:25:18:92:75:23:db:9d:ab:5f:42:6a:62:22:
a9:5f:f2:c3:c0:67:17:76:bc:d5:e6:72:d4:ba:7b:
72:cb:b6:4b:c8:51:d7:22:42:4e:7a:41:d1:89:d1:
04:98:a7:3e:b1:6e:8a:a6:ad:51:0e:00:b9:ab:6f:
4f:03:52:82:7e:fb:0b:03:4c:0c:6a:5a:ab:57:17:
4c:35:97:4d:41:5a:3f:c6:01:f1:04:87:8f:f4:b3:
2e:ce:d2:3d:93:fc:cd:10:d2:cb:0d:a3:cc:0d:d0:
0b:8a:63:74:f3:0d:33:0e:b9:11:b9:d7:97:11:1c:
ff:09:06:18:de:58:e8:5e:4d:36:36:d4:dd:4e:34:
67:64:d5:66:ab:32:cc:b5:d3:d3:4b:f6:14:63:2e:
24:9d:c5:0d:fa:1a:c1:2a:84:67:c2:3d:7c:e9:4f:
16:49:b4:54:4e:8a:f3:5e:57:26:6e:6e:99:a1:b6:
0d:c1:32:34:21:2e:c6:86:06:d3:fd:be:dd:22:c3:
50:8f:b9:92:97:17:b1:52:8b:8f:67:b6:23:72:55:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0C:63:70:23:CF:94:45:83:5C:E1:4C:5A:62:D3:1A:1C:00:35:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:da:d0:57:4d:ec:d7:43:a0:83:09:30:35:9e:76:df:e6:da:
4a:84:4c:87:42:1d:39:68:59:e8:67:bb:66:57:52:9f:60:c7:
df:1d:d4:e3:76:a9:30:22:5e:45:ad:75:0b:58:40:84:62:90:
04:78:83:97:2a:d2:4c:66:7d:93:70:4e:ac:3e:cc:73:04:43:
20:96:7f:68:ad:3f:37:3d:5f:47:6f:e7:c9:c5:12:ee:74:6d:
41:d5:c6:08:bb:14:4d:08:30:c9:cc:95:e9:7c:23:27:8d:c6:
c0:78:a8:10:34:dc:9a:19:ba:5f:3e:56:3b:bd:7f:dc:cb:18:
b6:1f:64:e3:f4:20:11:fe:04:cc:24:f2:10:7f:3d:53:dd:85:
44:a3:89:5e:bb:df:38:ee:7b:c8:15:93:93:78:cf:8d:06:a0:
ef:3a:84:41:56:8a:32:cf:25:ae:b3:4b:d8:a0:12:2d:8a:f3:
ef:e1:40:9a:b1:d3:36:f9:ab:c5:dc:d8:a4:b4:3c:a0:f5:2a:
4c:52:6b:b4:0e:ed:68:0d:c1:48:a8:68:be:f5:db:4e:9b:ca:
30:b1:6c:d0:8f:40:6b:c9:ab:69:14:62:ec:51:46:a6:e3:34:
bd:9e:71:01:d8:ef:c5:bc:c7:f5:74:60:8e:c4:32:a4:fc:a5:
ff:b6:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:45:56 2025 by rpki-client