Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa
File: bd227794-03b0-3e1a-98e0-833817b1a3dc.roa (raw, json)
Hash identifier: X6dHd++Zr5j+jkw+oQhxaQGpztfvMOgKt1wzQdWF3ac=
Subject key identifier: F3:7C:FA:23:06:A0:F0:24:57:6E:93:8C:6D:F1:93:1C:81:5C:C7:C3
Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial: 010D0C9F432858488DAB426DA28B47CA32403980
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 53768
IP address blocks: 162.134.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:42:6d:a2:8b:47:ca:32:40:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=9b62a82f-6033-446b-880a-4cd75ed6f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:ae:a3:a6:f7:4f:4c:1d:f8:49:3d:e4:ae:
96:3e:56:75:87:8e:ff:7e:18:15:65:e3:d2:18:86:
99:8e:68:71:9a:52:d1:a4:71:b0:56:0a:4c:b9:a8:
a6:2b:e7:4f:5d:47:e1:29:f5:43:64:2f:da:d0:90:
3b:f4:dd:ee:06:1f:3d:1f:0c:d7:80:5f:7e:1b:bb:
0f:3f:7e:39:ee:f0:ac:eb:95:2f:d7:2c:58:bf:5d:
c6:1d:8f:67:35:21:e0:74:55:1e:2a:80:4c:80:38:
c2:0e:7d:41:5e:2c:97:70:f9:cc:4f:6f:ee:6f:00:
25:bc:fc:db:51:49:df:60:39:2d:bc:9c:5f:c2:1f:
92:80:7f:69:ed:eb:fe:3a:56:51:b2:bb:cb:7c:be:
50:3e:82:bc:69:bb:c4:22:11:fe:b2:18:76:3f:16:
4b:f6:67:74:58:71:cd:19:b7:98:10:09:49:c3:5b:
a5:ae:4d:d8:d0:6c:33:ef:9d:18:f6:fd:8c:45:50:
ee:cb:60:fa:10:a7:6b:39:6c:d6:05:9a:2a:09:dc:
84:df:0e:5d:c1:29:f9:c2:a3:ed:39:23:31:98:7a:
68:de:55:1c:90:79:0a:61:a9:dc:41:ac:5f:1c:65:
78:19:eb:6c:7f:bb:84:07:ab:05:a6:3f:23:20:41:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:FA:23:06:A0:F0:24:57:6E:93:8C:6D:F1:93:1C:81:5C:C7:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
X509v3 Authority Key Identifier:
keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
sbgp-ipAddrBlock: critical
IPv4:
162.134.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:29:90:19:34:4f:fe:c4:c2:fc:02:c7:c4:fc:9a:d7:28:64:
35:2c:c1:72:92:09:89:f6:1d:31:64:e5:d1:6e:61:0b:55:e6:
a1:60:69:ea:d4:b4:8e:57:71:57:d7:f1:9f:44:9c:91:05:7c:
89:a4:c3:8c:82:33:a2:3f:3b:ee:a7:cf:0e:81:3a:88:e2:59:
db:d2:97:a8:45:cc:fd:0f:92:49:3f:ad:9c:6c:e3:ae:f8:43:
32:1e:76:10:35:5b:9b:d3:50:aa:81:01:6d:15:f5:43:bf:a8:
bd:2e:34:42:95:d4:a7:bd:c1:07:55:ce:cb:d6:4e:2f:d0:04:
81:5d:eb:7d:45:6f:1b:4c:f7:1c:c8:b2:51:5e:02:5f:62:7e:
28:24:d8:44:bb:9d:c1:6b:82:3a:56:cf:1e:d9:07:3b:d0:dc:
7e:22:1d:8c:c3:d0:f5:db:bd:b3:56:fe:ef:d4:d3:cb:74:8e:
00:6e:db:ca:ec:03:5f:ed:c4:00:18:d9:3d:0c:b6:f7:37:aa:
03:df:94:b6:b6:17:e6:85:ea:b8:1c:13:b2:f3:3c:7b:4a:da:
bc:ba:3d:fd:77:c7:27:5e:7c:4a:d8:53:91:c3:13:06:05:e1:
6d:af:9a:2f:00:6a:ef:1a:27:ff:82:37:66:40:fc:5b:49:bf:
fc:c1:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:14 2025 by rpki-client