Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa
File: 35c988fe-48b9-3ac7-9d24-863b564701f3.roa (raw, json)
Hash identifier: 6YAg7Rcuhe0BAPXFEhKRpGEbRf1FzogqaUN+hp5cyOc=
Subject key identifier: B1:0A:68:F3:2D:21:F0:C1:CB:B4:EE:4A:C0:4E:D7:0F:14:9E:01:89
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584957F40DA05CB8C17CC4C1BF10
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 203724
IP address blocks: 161.69.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0d:a0:5c:b8:c1:7c:c4:c1:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=19a0b82d-82ec-48af-bbce-ad6dfaffbeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:33:51:12:7d:74:41:65:4a:b4:de:74:0b:
34:56:85:3f:3f:91:40:fc:a6:91:72:3f:60:9b:7c:
47:66:20:cb:07:73:53:c1:76:88:0c:ec:6b:39:c7:
aa:4b:7d:69:a2:1d:1c:8c:02:df:ff:48:c4:34:f6:
60:97:76:bb:59:db:24:2c:75:b7:62:f3:16:48:d0:
ff:65:83:64:67:fb:be:4c:1b:52:eb:61:6b:2f:e4:
54:8a:82:4a:c0:d2:c5:be:7c:31:ec:5e:1a:af:03:
c0:73:2c:c3:4c:35:03:98:81:13:ab:3b:7c:94:dd:
c4:78:4e:00:c1:2d:2f:49:64:9f:4d:42:6c:7c:7a:
53:bf:7f:77:a2:00:18:59:01:2f:19:3d:5b:19:a1:
57:51:b2:b2:56:f1:ee:56:d0:b6:0c:e5:ca:45:23:
ef:65:dd:59:1c:f6:24:76:62:31:db:28:a2:9e:c1:
79:8b:49:8d:22:4c:c8:81:53:62:54:3b:08:b4:0d:
10:eb:4b:cf:ab:66:bb:5f:42:fb:50:19:8a:e7:fc:
cb:e3:af:b4:bd:dd:15:d0:35:ed:16:9d:86:93:54:
4b:9a:86:dc:5f:bb:ca:71:66:63:12:9e:93:3d:5e:
12:07:82:2b:f9:61:93:90:3f:aa:a5:fd:8c:0b:e9:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:68:F3:2D:21:F0:C1:CB:B4:EE:4A:C0:4E:D7:0F:14:9E:01:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f0:db:0e:d0:67:de:38:81:e3:65:fd:df:01:51:93:1d:c6:
2e:3e:b0:29:9a:89:50:f8:42:5b:55:e4:15:74:79:8f:0b:db:
40:e4:2a:98:39:b1:5c:d8:74:16:dd:d7:74:a4:d7:e7:93:27:
8c:71:63:62:11:06:0a:99:ce:9a:75:df:bf:f6:32:26:89:c5:
ae:91:db:8d:dc:5a:85:ce:26:6d:e3:7c:30:f3:0b:ef:b0:6a:
e7:8b:14:ac:7a:f8:04:19:8d:33:97:3c:d8:4e:0b:75:d3:a3:
1b:92:0e:e3:d5:d9:31:53:32:64:e9:f4:62:b6:4d:e9:e3:9e:
cf:73:4f:20:55:93:f0:2b:5e:bf:d0:b6:15:83:76:3e:60:76:
3e:75:bc:14:03:2d:fe:9b:b4:85:1c:66:b5:6f:94:6a:0f:4d:
13:53:a4:dc:2d:48:e4:af:83:b9:23:c8:31:39:b1:f6:09:49:
41:fc:61:3d:4f:51:eb:a5:80:72:55:ee:f5:d4:ba:f6:d7:16:
f2:fc:6d:1a:57:ff:8f:39:75:6e:07:2c:be:ba:65:86:59:a5:
d0:a5:fb:f0:72:9d:06:7c:65:3f:6c:c0:0f:95:d1:d5:aa:0d:
83:79:08:c3:f9:fe:33:75:2b:aa:4a:28:fe:54:ee:f7:02:c0:
3f:c7:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:25 2025 by rpki-client