Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa
File: cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa (raw, json)
Hash identifier: Rt38iAJEC8qp4IhsX2M2pWyiR7I9BkAcgAKo1M/KHyU=
Subject key identifier: A7:8B:C8:2C:20:11:12:1E:F9:E5:CC:ED:FE:A6:E6:0A:47:9E:A9:77
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285848A830B371999AC22F648A8480
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 203724
IP address blocks: 161.69.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b3:71:99:9a:c2:2f:64:8a:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=38f55874-28a7-44a0-909d-d625cadbdd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:22:f1:5f:34:5f:c5:fe:17:ce:ab:02:07:
b4:19:17:21:88:d9:c5:65:f1:49:3f:d8:17:7e:57:
e3:73:b7:4f:30:d7:2e:a1:0b:0f:8f:11:02:4b:ab:
ea:00:8f:53:4f:26:97:0f:20:63:7d:26:48:d4:d6:
12:40:16:ca:f8:6e:57:ca:a7:ce:d5:23:88:6a:e9:
22:fb:43:04:ba:d7:ae:36:82:30:a9:c0:10:65:38:
a6:6d:65:57:89:a0:06:a6:f8:46:e4:ca:a7:04:5e:
d6:60:11:c3:0e:78:37:55:af:a4:c2:39:7c:d4:87:
e1:ca:7d:e0:e9:54:cf:74:b9:88:8e:a2:8d:56:4c:
78:98:53:e2:c2:ac:81:fe:99:ac:ef:42:44:28:ab:
36:e0:e9:e1:08:20:15:4a:c8:2c:2d:34:6f:7b:c4:
28:e5:b7:cc:6f:47:07:35:71:5a:77:4e:83:ce:ea:
c3:d1:33:22:4c:44:19:bb:28:9c:8b:b9:46:11:c1:
23:be:68:d9:1d:75:16:be:ca:13:19:4c:ff:11:ec:
31:99:6c:66:ae:2c:c7:e4:52:24:8a:b0:c3:0f:f9:
0e:50:fa:bb:79:47:8e:76:0d:4d:ff:07:87:e3:0f:
3b:eb:1c:f3:21:29:82:55:d1:81:c8:af:19:e1:ae:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:C8:2C:20:11:12:1E:F9:E5:CC:ED:FE:A6:E6:0A:47:9E:A9:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:db:10:6b:ec:dc:89:2e:21:3f:7a:92:e1:e8:f2:a6:71:a5:
ea:6b:23:9d:43:b0:ec:65:cc:ef:56:ce:de:d4:bd:23:79:cf:
81:31:0b:ca:df:fc:89:7d:46:6b:b4:17:6e:05:79:40:18:c5:
19:ba:49:b2:71:17:a6:b8:37:f0:04:96:5f:56:80:d1:4e:8d:
6b:b1:c0:aa:08:83:4f:7e:46:84:b0:c9:6a:50:86:05:2f:a8:
a3:2f:95:03:12:13:f8:45:dc:96:5f:c1:42:d1:3f:50:1d:37:
28:27:c6:8c:76:1a:b1:31:0d:c7:a8:a9:c0:87:85:73:bf:2c:
75:18:2f:99:22:70:5a:fe:3b:17:f1:b9:f2:39:34:9b:3e:f8:
e5:e0:9f:c7:5b:55:05:88:d7:54:4b:14:3d:06:2d:4c:bb:41:
72:41:4e:9a:f6:7c:01:d1:ac:b4:e5:db:3e:29:19:58:a0:28:
48:7d:96:c1:e6:4a:b3:11:e1:a3:f4:89:ae:e9:70:3a:a5:ac:
ed:74:cb:7f:ef:21:c1:62:41:2b:e2:52:d7:a7:c1:56:b1:cd:
da:50:7a:7c:b9:22:51:1d:28:80:c5:40:ab:92:b5:02:06:ad:
21:e5:80:92:77:17:53:6b:73:78:53:be:ff:c6:f6:d3:e2:de:
a2:bf:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:01:49 2025 by rpki-client