Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
File: 509acabd-b582-367e-a14f-c5a9330423c4.roa (raw, json)
Hash identifier: Jq48Ll5At9AvVk9jhQ2aZ3KpCASGfJq9wq6taQl52og=
Subject key identifier: DA:1C:2A:7C:E2:B9:9D:3B:D1:94:54:95:88:80:B7:45:88:A1:F8:1C
Certificate issuer: /CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
Certificate serial: 010D0C9F43285848EF613834C48E3D2E49C35BE0
Authority key identifier: C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 42473
IP address blocks: 162.220.220.0/22 maxlen: 24
162.250.0.0/21 maxlen: 24
2605:380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:38:34:c4:8e:3d:2e:49:c3:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=8d1b04c3-8c43-47aa-8b5a-f37ea41445f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:2b:5f:e4:f4:a4:ed:7d:ac:8b:0a:b8:19:
0f:87:53:33:db:7e:6c:3e:52:2d:60:b8:43:cd:06:
8d:cc:ff:6a:31:63:52:a0:14:97:22:7f:fc:7f:10:
f1:85:ba:36:11:b6:a2:45:4d:71:2e:ee:d1:04:04:
ae:35:05:fd:e6:97:86:83:db:f8:3c:27:f9:cf:11:
34:85:ba:14:ff:2d:13:fc:81:51:e3:28:86:55:92:
b3:38:b6:fe:1b:dc:31:78:42:39:c7:b2:19:18:95:
2b:70:e3:96:21:f5:89:69:79:a0:43:e7:85:a7:72:
4b:e2:19:32:cf:f0:3f:24:4b:6c:d9:2b:ba:1c:9d:
9e:79:83:93:99:2a:5a:5d:c1:a9:75:b7:19:83:c3:
49:eb:fb:a8:2c:7d:d5:f3:dc:80:e7:d0:b4:e1:2b:
0b:08:cc:1e:19:fe:6a:e3:b7:b6:0c:a4:9a:45:a5:
e9:41:bb:7c:66:9b:8e:6f:9a:3b:56:cc:70:f3:e9:
e7:cb:6b:df:f8:0a:7a:22:f7:14:5f:b1:a0:ed:7a:
46:c8:17:03:ee:f0:cf:ac:ec:41:e8:3a:3b:82:ee:
d9:e8:c0:f7:5e:07:73:b2:18:0b:dd:21:12:c8:d4:
7d:f1:71:7b:33:71:99:c6:2e:ee:c1:49:d8:26:2e:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:2A:7C:E2:B9:9D:3B:D1:94:54:95:88:80:B7:45:88:A1:F8:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl
X509v3 Authority Key Identifier:
keyid:C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.220.0/22
162.250.0.0/21
IPv6:
2605:380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:05:85:9c:61:4c:1b:e6:41:c8:87:89:13:c1:0b:50:8f:c2:
dd:3b:35:f6:e8:5c:dc:b6:38:48:af:93:d3:d2:ea:05:8a:61:
87:34:e9:bb:f1:e0:1b:6d:98:23:6e:db:66:f2:f1:45:12:0b:
06:93:1e:13:f2:6c:b8:c4:ab:31:1e:46:89:26:62:fc:80:91:
51:1c:8d:8d:8b:4e:36:ef:dd:17:bd:1e:9e:a0:76:14:07:54:
73:9f:aa:1e:c4:fe:51:fd:eb:ab:31:4d:ef:0a:5c:53:61:f1:
18:32:18:83:a1:4d:9e:45:2e:80:2d:db:d9:d0:11:73:4b:77:
ba:73:33:35:72:68:80:67:32:f1:b8:a9:71:01:ce:5e:d8:5f:
59:32:81:4d:57:dc:44:5a:5d:7f:f6:3d:5e:d8:49:76:11:de:
19:25:8e:ac:9d:c1:02:35:9d:e9:8d:9e:c3:cb:ad:51:f7:55:
e9:bf:3e:db:ce:1e:c0:08:8a:e1:28:60:85:98:42:9a:ed:d3:
83:60:c9:a5:e2:ab:be:ef:48:9d:04:69:77:96:92:5c:85:8c:
04:47:cf:1a:0f:83:62:c7:c7:c6:21:0b:cd:52:61:0c:20:15:
50:e4:74:1b:55:b6:93:cf:db:0e:11:8f:7c:7f:6d:05:c9:77:
c6:eb:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:11 2025 by rpki-client