Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa
File: 32df2551-b0bc-351f-bb8d-07bd37404e7d.roa (raw, json)
Hash identifier: XyZC/CYma/0MRAxOTHqoStIMITmIGTLOZ2Im0zfohjI=
Subject key identifier: D5:78:A6:AC:DE:A7:A6:57:A2:06:A6:C9:1A:36:17:D9:09:DA:4F:18
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285848D37658023140FC47E1E18A90
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 203724
IP address blocks: 161.69.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:58:02:31:40:fc:47:e1:e1:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=29dae018-a9d2-45ca-85a8-fc22e97cefc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:59:42:85:b6:6c:5a:98:c2:d8:1d:a4:ea:
2e:eb:db:e2:b3:69:bc:44:d1:91:be:63:34:1e:75:
18:0f:1a:3d:05:d7:f6:20:ca:c6:ab:9b:10:70:3b:
d9:ed:c8:08:c4:e3:cb:f3:39:e5:b8:0d:e2:f5:ec:
d9:d5:35:d3:a9:23:c6:aa:88:2b:65:96:d8:2d:30:
e0:9d:61:5e:f2:35:44:0a:67:b3:5f:d2:27:31:0f:
bc:8a:b6:f4:ac:e5:6d:fc:39:36:b3:53:5c:0a:87:
d8:a3:67:7d:62:8f:9c:39:8e:16:43:1b:b3:1d:51:
49:e5:cc:7d:3a:78:88:d5:9a:9c:2b:08:fa:d1:cb:
e9:79:6f:1f:40:23:44:f8:ad:51:eb:37:37:de:73:
19:5a:27:40:81:58:27:96:26:48:f6:24:5e:c3:22:
41:6b:c5:ad:a5:ec:2a:65:dd:ac:2c:44:e6:3e:db:
cd:b2:33:de:98:df:fd:e0:b2:c3:b1:7d:0b:c5:83:
46:b8:7f:63:b2:bc:6f:f2:7f:4c:20:e3:f0:58:b2:
f1:c1:b0:9d:e1:03:77:f5:f4:af:16:35:7a:10:90:
d4:b4:86:93:4e:42:d1:96:30:26:f9:c6:78:4a:7f:
d3:c1:b8:8a:f1:0c:3f:9a:66:fc:6f:c4:f0:1e:3d:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:A6:AC:DE:A7:A6:57:A2:06:A6:C9:1A:36:17:D9:09:DA:4F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3c:e1:dc:86:64:2e:81:75:0e:d7:0d:28:ca:5c:f3:12:11:
d4:f3:b7:19:ed:60:82:9b:57:a2:d6:14:9e:10:62:38:25:07:
16:42:65:1c:e7:5f:42:ef:33:36:07:43:bb:4c:ba:26:9e:e5:
8c:8b:d4:f2:1b:59:42:bf:1b:b1:65:61:3d:ef:9e:a4:e1:3a:
f2:1e:ff:a4:e0:95:e4:4f:30:8a:3d:0d:3d:a0:4e:f7:5d:3e:
bb:6a:12:75:07:d4:f2:f6:ff:af:3c:3f:4e:37:a7:35:0e:1a:
2a:81:a1:ed:02:c8:96:c4:70:fa:a3:32:aa:c3:4d:13:6c:2c:
66:99:29:8f:26:02:71:b5:06:2b:17:bd:1d:89:41:12:49:21:
8a:9b:db:e4:09:94:2e:18:7b:21:5a:e2:57:bd:c8:ca:03:da:
c7:a8:61:76:4c:4b:d0:10:2d:da:c2:89:e2:98:fb:74:47:ae:
16:59:e4:6a:2f:59:e9:20:1a:e6:3c:9a:9f:c7:db:78:49:c5:
fb:f4:3f:37:a6:01:e3:ae:67:c6:74:94:c4:36:93:44:ed:53:
e6:84:53:d4:64:4e:15:a8:f1:ee:af:a1:07:27:cc:a2:65:6f:
95:e2:99:e6:ab:7d:77:cf:be:63:e3:ba:69:b9:af:2c:73:07:
70:4e:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:30 2025 by rpki-client