Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa
File: 337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json)
Hash identifier: JWDMs/CUByMeeGviO/1rpRt5h7sJAyeAe2jCKBhxRzQ=
Subject key identifier: 0C:8B:0C:27:27:80:8A:12:76:5C:4D:95:A8:3C:D5:A1:57:3C:60:CF
Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
Certificate serial: 010D0C9F432858493C092261262D4670E0E01800
Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 198949
IP address blocks: 162.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:22:61:26:2d:46:70:e0:e0:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=c0236518-d102-4b9a-851f-9b3e7f30468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:f8:f7:6b:65:b8:c1:58:91:de:3a:0e:9c:
7b:09:2c:cd:3f:d8:04:7c:be:82:d7:37:00:58:f2:
ae:3e:1e:9f:46:2d:a5:1c:03:6e:37:f5:9e:2b:ff:
44:1a:57:d4:9e:7c:81:6a:f7:35:35:85:45:eb:e3:
46:99:41:f7:b0:54:c3:7b:74:ff:5b:40:1d:69:43:
ee:11:2a:7e:a4:bf:5f:74:0c:8a:44:9a:25:41:83:
1d:d0:82:1c:b8:58:fe:ea:99:2e:e7:2d:b6:c0:16:
b5:09:56:d9:1e:a6:32:a6:91:77:fb:87:8f:da:52:
2d:80:c8:cc:c8:9c:d3:f7:68:06:09:d7:f0:30:3e:
72:b8:86:e0:de:9b:11:12:b6:fb:80:ab:0a:6b:22:
c9:52:ee:e5:40:7a:59:c6:fe:52:5d:15:e2:86:d9:
b1:ef:8e:40:3d:16:73:de:b9:c4:d1:c3:e5:f8:39:
1e:ab:aa:8c:cb:3f:9f:01:3b:00:f7:32:6c:8c:45:
aa:c3:ee:c3:78:19:d1:93:dc:1c:0a:25:df:85:6e:
74:cb:f0:56:fb:a5:54:70:59:9f:0e:f2:9b:b7:4a:
2d:0a:4c:88:3c:46:f7:fb:ef:85:e0:88:07:48:e0:
94:e7:a4:3b:e8:29:a0:88:59:5a:b6:85:f5:70:01:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:0C:27:27:80:8A:12:76:5C:4D:95:A8:3C:D5:A1:57:3C:60:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl
X509v3 Authority Key Identifier:
keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
sbgp-ipAddrBlock: critical
IPv4:
162.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:17:c3:1d:db:f4:a2:1a:a5:32:0f:58:a9:a8:4a:b7:14:84:
d9:63:36:4e:bc:e5:d7:4e:7c:89:d2:38:7a:7b:b5:99:42:60:
f7:ab:2b:ab:58:78:19:29:b5:58:df:24:60:38:64:d6:d3:6a:
5d:8a:3c:91:4a:81:72:38:0a:8e:27:c7:41:e1:4f:54:91:d1:
70:bb:97:26:62:9d:a3:45:0d:87:9e:8f:8b:6f:10:06:d6:a2:
e1:fb:78:02:5f:b4:c8:9e:ff:ee:b4:1d:ce:5d:ed:b6:2f:0c:
ca:41:29:4a:b4:fb:d3:f4:73:44:81:ef:ac:85:51:b0:40:1f:
e6:b4:44:dd:07:eb:5e:21:5a:a6:df:37:d4:fb:51:a5:25:57:
1f:b8:44:5f:81:74:cc:74:1b:86:62:d5:ee:ee:7b:06:53:81:
18:de:99:17:84:e0:68:23:e2:28:05:de:37:bc:7b:d1:ab:e0:
f3:06:09:dc:fb:cd:99:a9:2e:4b:1e:7b:24:3e:d8:49:ef:e8:
86:9d:ac:73:fd:20:2e:29:ee:5c:59:31:a5:05:47:12:c4:53:
e5:ba:da:e5:2d:e3:0f:68:8a:af:76:9e:86:67:4f:42:ce:da:
5d:65:77:61:08:7d:7d:81:e9:5c:44:73:fd:09:b5:0d:af:59:
cf:cf:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:43 2025 by rpki-client