Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa
File: 97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa (raw, json)
Hash identifier: ePksfMUaqtNDQVnAvn06R5a90fmk10Y5BzgM1excW3A=
Subject key identifier: C6:A5:E2:6C:A3:B9:A1:4E:58:F2:36:A6:22:C2:63:05:45:2B:37:17
Certificate issuer: /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial: 010D0C9F43285848EF6163EBEC4B44E6D7D5C600
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 40555
IP address blocks: 162.211.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:63:eb:ec:4b:44:e6:d7:d5:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=dd5ef517-880c-4fa4-bf69-0f12ebd28f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:df:f7:9b:6b:19:16:24:c5:d2:45:05:07:
ff:f3:38:98:99:d8:9f:71:1f:eb:c8:56:80:05:85:
59:f6:15:2a:5c:20:e0:49:8c:d3:f3:1e:20:1d:9a:
f8:ad:94:9f:72:e3:6f:e3:8c:6f:10:d5:84:2c:f0:
25:b0:27:ff:5b:08:2e:27:89:06:6f:9a:39:e9:bb:
a9:b7:fa:1d:ed:15:49:75:dd:ef:e0:2b:70:ef:88:
78:5b:08:a3:5f:d5:74:bc:f1:b9:2c:a9:55:74:b4:
c9:ef:71:92:a2:c2:ff:58:e1:d7:4a:04:ba:5d:78:
fc:90:a2:61:00:e6:2f:0a:cc:79:f2:e0:de:4b:13:
64:28:2f:38:56:c2:f3:9d:f7:d1:5f:13:09:11:a1:
35:75:0c:d1:fa:84:fb:55:23:b0:af:68:bb:9e:47:
e3:15:66:aa:53:2d:92:51:f7:3a:51:45:be:5b:a6:
3b:87:58:40:75:28:b4:4e:bc:d4:f3:4c:fe:68:97:
f0:06:a9:2c:5f:5f:80:89:b3:06:ca:89:2d:55:1a:
b1:6e:a5:d5:b8:4d:c8:30:66:63:71:db:7d:00:29:
1e:d5:42:97:87:b7:78:9c:9c:69:2d:95:68:08:c4:
b2:3a:ca:14:9e:83:3a:62:1f:dd:23:5c:b5:0c:cf:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:E2:6C:A3:B9:A1:4E:58:F2:36:A6:22:C2:63:05:45:2B:37:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
X509v3 Authority Key Identifier:
keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ea:88:61:79:95:86:fa:ed:ea:77:8a:f3:d8:e2:fd:a1:39:
bd:6a:17:ab:15:1c:76:1a:4f:0d:90:ac:64:63:c8:03:60:c3:
0f:95:77:a5:5f:d5:f5:40:97:be:67:e7:d6:be:6d:0a:03:f3:
16:db:dc:ff:cb:e1:ce:6f:fd:d7:14:d7:6c:22:15:26:37:f9:
6e:ac:bd:e9:e6:13:d8:43:f9:18:2e:d4:1d:93:8a:3a:62:a6:
e7:b0:8b:6c:d1:2a:8a:46:5d:24:8b:de:cc:b2:24:64:32:f2:
4b:2a:5e:dd:5e:c3:bd:b7:90:15:5e:c3:19:2b:13:a5:ca:cf:
3e:b3:ff:e8:cc:cb:e9:73:1c:b4:c4:81:ee:b2:b2:32:c6:42:
55:ca:77:83:8a:4e:75:51:b3:f8:e2:32:b5:7e:6b:f2:43:08:
8c:eb:6e:05:93:18:46:e7:74:0e:c9:da:8d:eb:c2:a0:fd:ae:
7c:f4:6d:84:4f:52:75:ac:3f:f9:43:3a:cf:85:83:3b:88:75:
34:35:44:29:05:f8:cc:4c:b0:79:a7:73:d4:f3:71:29:85:fe:
4c:75:e9:42:2c:84:42:9d:44:95:15:39:5d:e5:28:ea:db:71:
2b:f5:a0:8f:8d:be:87:af:5a:88:8f:cf:45:43:13:04:c2:2a:
96:de:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:04 2025 by rpki-client