Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa
File: 5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa (raw, json)
Hash identifier: N8ceSChcRQScaNT3IMg9r58Lh3j1aYV4fRzB3OUIjYg=
Subject key identifier: 8F:40:F6:20:CF:36:DA:F6:32:A6:44:8E:72:80:F6:C5:EB:6B:A7:8E
Certificate issuer: /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial: 010D0C9F43285848854B452D16EE5030F96AE420
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 168.238.4.0/24 maxlen: 24
168.238.5.0/24 maxlen: 24
168.238.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:45:2d:16:ee:50:30:f9:6a:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=38218e5c-f05e-4cea-8176-8dd2c57ca353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:99:26:bc:e5:57:f7:fb:ae:bf:cb:20:43:
3b:38:df:ac:0b:b4:ef:f8:c9:bd:ae:01:eb:7b:48:
5d:e0:38:29:7d:80:76:3a:f4:28:a8:34:60:fb:0d:
fc:26:ed:08:95:27:d7:6f:b9:ef:a5:16:e3:ca:02:
79:23:ae:14:12:c2:c8:11:5d:bc:18:55:41:75:09:
2b:5c:6f:d6:5f:d3:ca:18:3d:66:31:23:6a:80:d9:
ba:2d:2f:11:ae:d4:ab:10:68:8d:63:14:ba:cb:46:
0d:54:b6:b0:e7:96:57:bb:1a:d8:08:af:a3:fb:b5:
8d:90:bd:d8:ac:9e:66:19:b8:89:51:07:9b:0d:e2:
11:33:9a:d8:c5:74:2e:02:29:95:e0:ac:c6:58:e5:
e6:1e:33:f1:2a:d3:a0:c4:5d:76:09:69:b9:1f:5c:
7e:49:c3:27:1c:ef:28:bd:41:dc:62:be:01:7d:4f:
13:8b:50:de:bb:e1:09:36:5e:7a:22:77:0a:94:41:
0e:e4:4e:3a:a0:9f:8a:3c:12:2f:91:c7:04:9a:75:
b1:9a:73:71:4e:c6:15:58:a0:23:e5:0e:14:77:95:
e6:06:d0:dd:aa:8f:f9:43:ce:d5:b4:48:52:72:37:
30:e9:62:eb:9b:69:82:f1:8e:8f:02:01:5e:7c:d6:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:F6:20:CF:36:DA:F6:32:A6:44:8E:72:80:F6:C5:EB:6B:A7:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
X509v3 Authority Key Identifier:
keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.238.4.0-168.238.6.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:e2:8f:8f:bb:71:33:5c:5f:12:c0:b2:81:af:54:1f:6c:1b:
39:68:3d:c5:2f:09:5f:b5:37:da:1a:27:cb:00:55:58:de:1e:
e7:ad:84:5e:3b:a6:07:f4:f6:71:f5:f1:60:ab:e2:db:be:2f:
58:0d:5c:36:06:a3:de:f8:8b:9a:a9:d1:50:57:09:21:0e:21:
33:4c:9c:64:51:c3:ef:38:a6:a6:2c:e0:cf:98:83:c4:45:99:
c4:57:bf:0e:0c:4b:5a:4d:2a:bf:be:cb:fb:52:c9:bc:8a:c8:
d2:18:e3:2a:84:70:16:26:c7:c6:da:b4:87:6d:36:d6:cb:c6:
8d:9b:be:46:7f:1d:f3:50:00:32:76:a2:48:d3:16:bd:94:05:
e9:d3:7f:42:93:bf:6c:68:ef:b8:31:b9:48:75:81:df:ef:15:
06:e3:e2:dc:5e:97:39:e7:22:c3:70:ba:30:f1:91:09:85:ef:
5e:74:ae:f2:e5:33:80:4d:95:3f:58:ab:9f:b8:1e:d5:90:6e:
df:b9:73:1b:a8:20:63:c9:e1:34:a0:76:d8:0a:00:11:c9:9e:
b5:f1:b9:74:fe:04:59:42:a9:db:f9:04:33:be:1b:68:38:09:
64:82:3d:ee:f0:76:6a:be:05:bd:b7:73:2e:fa:86:c6:a2:4c:
f6:05:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:51 2025 by rpki-client