Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fea8ddb6-3204-34c6-8875-5878f1d1e316.roa
File: fea8ddb6-3204-34c6-8875-5878f1d1e316.roa (raw, json)
Hash identifier: qii7WVrhW/0FH6yAW2Md0NakDU/IFaxAvrm/KVblpPM=
Subject key identifier: AE:09:48:97:7E:4D:BF:DF:75:61:F4:45:42:CC:B0:C1:C6:0B:10:18
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6000A4D06C1B240932480
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fea8ddb6-3204-34c6-8875-5878f1d1e316.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:00:0a:4d:06:c1:b2:40:93:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=db884c4f-7be1-4808-95e5-005976d3af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:58:d7:06:62:f0:a7:6e:a1:4c:54:a6:3e:
eb:5e:00:d0:b8:11:f7:52:78:24:87:0e:76:bb:a1:
9d:ce:aa:17:72:ab:ae:04:07:d5:65:5a:0b:ad:0b:
a6:2d:a1:c8:b5:e0:69:db:f7:45:b9:ea:4c:63:eb:
40:53:80:34:62:3c:7f:b9:c4:c5:33:71:8d:64:24:
b5:20:28:13:7c:61:e0:ce:76:a0:f8:dc:e3:2f:f2:
0f:49:5d:de:e6:ca:a0:76:ff:95:8d:3d:91:7d:87:
12:bb:a1:df:49:e7:46:47:2c:82:2f:d5:7b:e8:2c:
d3:88:77:9d:18:ef:1c:ee:8d:31:22:21:d5:b8:70:
62:a6:7a:52:25:6b:9c:01:94:5c:5a:ca:43:9f:21:
80:69:59:56:ca:f5:e9:e5:78:f6:7d:a3:46:f6:cf:
33:e8:56:9a:11:39:1d:29:6c:93:9d:76:38:0d:11:
54:93:05:a0:fe:d1:49:50:5d:f2:8a:40:81:2f:12:
51:31:61:6e:f7:0d:42:6c:9a:e9:48:47:5a:cb:2b:
7c:b1:dc:39:f7:f1:ce:ed:d0:c9:6c:ac:44:94:55:
1c:03:95:21:8e:4f:34:03:48:48:ec:b1:d8:04:43:
3d:92:45:0f:37:7d:6f:19:b5:55:19:c2:ba:92:4d:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:48:97:7E:4D:BF:DF:75:61:F4:45:42:CC:B0:C1:C6:0B:10:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fea8ddb6-3204-34c6-8875-5878f1d1e316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:98:55:bb:d3:87:9f:36:80:b2:52:ae:a5:d1:d3:c6:14:73:
de:17:a9:35:83:2c:81:a7:5c:a6:95:d2:29:37:c4:0e:af:c3:
6e:49:80:98:4c:85:91:85:0a:ef:5f:cf:7d:d0:77:fd:12:d5:
65:7c:7e:f9:9a:2d:65:33:cf:fc:ff:2b:f8:f1:74:04:0a:8a:
73:4d:53:28:77:05:c3:86:17:7e:22:40:27:ed:6a:dc:70:40:
3a:20:2c:d9:88:51:aa:53:ac:d7:9a:fe:07:d4:63:c4:c4:60:
fa:2a:b5:2b:0b:9b:cd:24:89:19:03:1b:8e:ca:65:e7:5e:4d:
01:f9:54:48:86:ec:54:86:b4:8a:eb:a7:b2:14:b4:34:8c:35:
f5:7d:bd:01:1b:49:31:94:c6:be:13:c2:0a:b4:9c:c9:7a:d9:
e0:65:68:c5:1f:83:7d:fb:e8:5b:7a:ee:c6:93:40:a1:81:44:
95:e9:3b:aa:e0:89:88:dd:fe:e6:9b:3c:7d:40:d4:b3:e0:2e:
f8:5b:bc:31:8b:5c:7a:16:cb:cb:35:56:82:e7:59:ab:7a:8b:
1b:e8:3f:ed:3f:ef:a0:8e:6e:b2:45:59:19:63:58:7c:7d:5f:
a4:d1:47:b7:c5:73:e3:c7:c8:98:e3:88:6d:e0:6c:df:6c:cc:
a1:22:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:03:36 2025 by rpki-client