Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
File: b822bf14-e184-3b36-81d3-0ada1b344013.roa (raw, json)
Hash identifier: 2PzqYlu0JbHmJyrRDW5x9r6NKjKbZjYoop2xb4EXs8w=
Subject key identifier: 91:6F:EB:2B:71:86:98:08:00:FD:3E:1F:F2:CE:6A:55:EC:F0:A0:5F
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584957F40D4F1327C28A7999E500
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 203724
IP address blocks: 161.69.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0d:4f:13:27:c2:8a:79:99:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=16403467-9680-4061-b844-55950ca47ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:96:73:68:b7:60:aa:58:9a:80:4d:b5:88:
ec:31:4f:25:e7:b6:0a:64:ef:ca:ce:78:58:78:fa:
50:78:9f:e4:9d:f6:b0:d8:60:94:fc:04:8a:66:af:
aa:df:c1:02:2b:b2:7b:eb:17:d6:b7:af:49:88:61:
e9:3d:56:0e:c2:2e:17:41:57:cb:a9:b7:a7:ed:7e:
de:fd:23:52:15:c5:b5:7b:e1:98:69:14:9b:f4:60:
c6:67:f7:3a:da:9f:c2:c6:46:c9:7b:69:83:de:1b:
af:77:a9:39:00:ff:57:18:06:38:1a:12:78:bc:f6:
8a:66:f5:1c:7f:89:d1:3f:d1:28:a8:11:ae:a0:37:
fb:9f:f2:2b:7b:9d:2d:ed:03:82:57:79:03:13:06:
77:6f:70:4c:dd:bf:b4:30:75:f2:31:8d:ea:72:e9:
99:df:d0:7a:02:dd:e3:bb:6c:38:0b:ab:87:96:55:
fd:21:6d:15:51:f6:c6:32:8c:26:60:1e:ae:ee:1b:
f9:a8:2b:b1:21:d3:e1:6d:4d:3f:6e:04:04:86:41:
0b:68:dd:77:1e:54:cb:ab:10:f5:50:e7:42:6c:ca:
04:ed:8b:b8:0a:02:1e:74:1b:e5:68:40:55:f9:b3:
52:0e:f8:7a:3a:5c:01:f3:b2:92:af:0c:15:e2:c2:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:EB:2B:71:86:98:08:00:FD:3E:1F:F2:CE:6A:55:EC:F0:A0:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b7:ae:d1:2c:ca:0c:b7:a2:06:11:e6:0a:8e:3a:04:15:e0:
4e:28:08:71:e9:2e:dc:dc:64:26:cb:e6:bd:ac:47:93:5c:ae:
20:3f:9a:8a:aa:80:3c:73:f8:44:58:1a:1a:4b:aa:87:66:14:
52:ad:41:61:04:22:d9:33:71:b3:27:85:c0:e7:a2:87:bc:81:
f7:b7:c0:40:24:bd:da:2f:d1:bd:60:f1:f4:1d:0d:ac:97:dc:
77:f1:7a:07:ce:71:b5:13:e5:af:67:b5:e0:72:7d:cb:64:4c:
bf:8f:63:12:88:31:64:55:c5:a1:a5:c6:18:46:9a:f3:d1:40:
96:a0:f2:f6:80:20:1d:f1:89:d9:34:93:5b:30:95:f0:f0:69:
08:5e:1f:64:36:3f:63:b6:bd:81:d7:18:83:7f:f8:4f:1d:dc:
be:50:16:01:39:67:48:40:f5:4f:3c:37:a0:55:46:66:a5:16:
a3:02:70:46:1d:36:74:ca:7c:21:f9:66:4d:08:6e:2d:3a:f7:
0e:d3:88:b8:ee:2a:06:57:3e:59:9b:d9:c2:8b:47:76:e6:6c:
2a:53:be:4f:f9:19:d9:26:21:70:a1:cb:ae:dc:ad:bb:46:41:
a2:e4:3f:e2:20:56:6e:f8:f3:f2:ea:1e:47:25:f0:3c:c0:45:
ad:f3:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:23:10 2025 by rpki-client