Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa
File: 3d59fe02-e286-37b5-a4e0-ee928379db85.roa (raw, json)
Hash identifier: RM8vUV2whEN3Yk6Qcza9CLLna6DKzXR59RoGxpzgWJg=
Subject key identifier: DF:28:49:ED:EF:42:A1:D5:36:91:38:99:52:F6:0B:81:5D:2D:E4:BC
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858493C093D44BECEDA802D5AF280
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 203724
IP address blocks: 161.69.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3d:44:be:ce:da:80:2d:5a:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=0c0a4d2e-3f8e-4b6b-8897-edabe16a1772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:a5:34:c8:29:06:85:9b:65:a0:9d:ea:6e:
be:49:07:71:e5:64:b2:98:5b:0a:df:51:3e:24:d3:
bd:b7:41:05:65:88:81:a5:22:24:47:ab:7c:58:79:
81:93:57:98:c3:27:28:28:15:dd:18:42:4e:36:5a:
89:97:e1:c4:5b:4a:34:1b:cb:8c:f8:b6:14:45:3e:
77:11:eb:8f:36:85:66:9e:c8:f3:55:c8:0c:57:e4:
b2:93:27:80:7d:84:49:2d:4f:fe:92:87:20:81:8b:
5d:e5:4c:91:f5:60:b2:68:c1:c4:84:3b:42:ca:09:
c9:cf:66:a1:d0:25:dc:1f:40:ff:1c:e8:b6:16:49:
9b:28:42:1a:04:27:f1:66:c3:11:c2:1a:62:63:95:
fd:d4:4f:f5:16:e2:6e:0f:e5:a4:e6:44:ef:57:07:
88:61:fb:65:fb:5f:74:b1:55:77:80:41:f5:28:8c:
67:12:ee:fc:74:e6:fd:f4:13:12:a5:04:47:42:6f:
29:e8:66:70:a9:dc:28:6b:cb:03:b9:46:ca:05:5a:
4f:38:53:e9:85:44:a5:27:53:37:e2:2e:ad:38:9b:
71:4e:43:7c:0f:9c:d4:cf:1f:dd:37:bc:ac:54:df:
16:63:cc:39:64:22:af:13:b8:ef:b1:5b:ec:27:16:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:28:49:ED:EF:42:A1:D5:36:91:38:99:52:F6:0B:81:5D:2D:E4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:42:5b:8d:b2:7e:86:08:ef:08:62:9e:c3:e6:12:75:eb:cb:
4a:7d:55:ee:5c:7e:2e:e7:8d:30:c9:f6:08:fb:95:ae:19:51:
d3:d4:9f:7a:cd:37:af:f2:59:1f:08:25:2a:a1:7e:f7:c1:5a:
12:be:bd:bf:43:57:b1:b5:11:09:79:64:fb:20:18:5b:d6:7b:
81:f8:0b:49:f2:a9:96:63:09:19:9f:78:a5:56:c1:de:51:ac:
cf:8e:49:bb:1a:ce:64:60:df:45:ff:d1:25:e9:92:43:15:21:
7b:4a:bf:7c:99:23:99:90:31:c9:7b:aa:f9:cc:38:dd:1e:00:
2a:89:78:28:25:9a:56:46:8a:28:dd:d3:8c:56:7b:6f:89:a9:
02:99:87:ac:b1:87:13:51:b3:b4:87:0b:c6:bb:44:e9:f4:2e:
ad:ad:95:a9:bc:ab:1c:83:ab:86:4b:f5:ad:95:60:9e:dc:f1:
1d:24:46:c5:8a:85:4e:dc:12:1d:7c:7f:57:bd:5f:28:99:a2:
38:fa:2d:7c:a6:39:2a:bb:0e:5f:92:22:71:a2:f3:f8:84:be:
60:c7:9d:60:2a:d6:f8:49:a6:1c:43:c3:4b:06:48:df:1d:66:
a4:fc:18:f3:29:f9:59:cb:1c:96:49:e9:3c:7f:46:19:54:08:
1f:eb:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:03:43 2025 by rpki-client