Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa
File: 0ccd293b-4237-33a7-aafe-24d59d62dd47.roa (raw, json)
Hash identifier: fWUn/6cJtSQ4SxLHv5b1OeB3i8mMTrA8W6756gdFtBg=
Subject key identifier: 99:E7:1B:F1:62:25:96:B3:41:C1:37:A8:95:E6:92:7E:20:C1:58:25
Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial: 010D0C9F43285848A6CB6A1D989391880B77EA80
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 162.138.64.0/24 maxlen: 24
162.138.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6a:1d:98:93:91:88:0b:77:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=856fae50-75d2-4c20-ac3d-a6a54d625e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:1e:f0:e6:16:b7:95:f6:ab:a3:81:71:b5:
2c:c7:03:60:f0:0c:8b:c2:b3:f0:ab:e1:e3:cf:13:
70:e3:59:e1:b0:6b:a1:89:8f:b3:72:0c:8f:ea:fd:
1e:c8:f2:fe:e8:77:ef:be:58:b6:4d:53:e4:0a:e5:
2c:50:77:5a:6a:3a:4e:32:eb:6a:3a:f9:f2:77:58:
9f:b1:15:00:26:47:f8:c9:24:f2:5d:53:6f:3b:0e:
7b:19:d0:c5:e6:b9:81:8a:05:38:22:ae:ca:0e:45:
fc:b9:2b:f0:85:16:11:67:f4:b6:37:62:18:9f:04:
24:02:31:67:a6:f2:cb:cd:05:e1:e4:c2:31:0a:22:
24:68:3b:7c:dc:aa:c9:88:0a:6f:a7:fc:86:ed:0d:
1e:8f:e6:51:8d:46:2b:f4:dd:f0:04:1c:88:2b:86:
89:cd:1b:3e:57:84:8d:d1:bf:b0:af:62:30:e5:cf:
12:cf:cc:26:df:65:89:4d:4e:fb:3f:86:2b:6b:25:
71:07:fa:fc:00:d7:2e:c5:cb:e2:8e:66:b7:70:21:
cb:af:e5:c2:0d:26:50:40:ca:85:cb:0d:4b:0e:cc:
ea:0b:aa:8f:a4:81:7a:91:e8:aa:c3:e3:ef:00:cd:
dd:3b:d0:c2:05:18:84:a5:21:d9:1f:19:9f:06:62:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:1B:F1:62:25:96:B3:41:C1:37:A8:95:E6:92:7E:20:C1:58:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
X509v3 Authority Key Identifier:
keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
sbgp-ipAddrBlock: critical
IPv4:
162.138.64.0/24
162.138.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a7:08:7b:f2:75:1b:56:35:41:dc:cd:14:1a:0d:35:06:00:
ab:f9:a1:6a:5e:30:8b:fc:d8:62:1c:18:b3:e2:04:0f:0e:b7:
b5:81:a9:ac:36:ec:58:ba:80:fe:07:2f:bb:17:ef:d5:69:8a:
5f:e8:3a:dc:e2:bc:b1:f3:64:d0:a8:68:63:b5:7e:e8:38:bb:
fe:e3:7c:dd:6d:ac:c3:a1:9e:60:e2:71:fb:82:cd:fb:ad:bb:
4b:b2:bd:ff:d5:4a:21:93:60:4f:7d:c2:03:a1:3f:8d:37:01:
24:35:ee:33:79:8e:2e:56:15:97:94:ac:64:ca:25:bd:39:e8:
74:40:1b:35:82:c7:fd:6b:34:ff:63:93:54:c7:c3:49:b6:30:
9c:6b:07:24:fd:08:24:84:2b:9b:e8:a4:b1:71:e1:a4:d0:11:
5e:36:97:78:af:e8:5d:ef:da:bc:4a:36:06:91:19:b7:e8:1c:
ea:c8:79:87:d2:32:6b:b2:73:1b:77:a3:c3:fa:a5:af:01:80:
99:e4:34:54:77:17:5a:93:3b:a0:67:df:64:12:72:7f:7a:2a:
05:7b:15:b1:f1:55:22:b7:77:84:f8:62:83:3d:1b:95:4f:f0:
5b:13:3f:f4:82:85:a9:51:34:33:97:48:80:5c:29:29:9a:af:
b5:dd:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:10 2025 by rpki-client