Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
File: 84a0a74c-cc53-3066-8960-1cddc270afad.roa (raw, json)
Hash identifier: W1iVvGwlGnlMFM9E+CiEvWU0UojE2pAha4zt9Fpyhi4=
Subject key identifier: DF:2A:9A:BF:BF:72:13:2E:4E:08:32:63:54:2F:60:24:9F:DE:1D:4A
Certificate issuer: /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial: 010D0C9F432858489E6B6B974523AA0E3B2DFF80
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 62739
IP address blocks: 162.220.116.0/24 maxlen: 24
162.220.117.0/24 maxlen: 24
162.220.118.0/24 maxlen: 24
162.220.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6b:97:45:23:aa:0e:3b:2d:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1d00721f-f990-47a8-b6e9-f7348a9b6e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:c5:10:6d:64:ba:ff:07:e9:70:60:2b:64:
c9:f5:3a:9c:04:51:93:fa:4a:59:4f:60:f7:89:f5:
7d:3a:ff:ca:d5:f0:da:19:a3:dc:26:29:e5:fc:6c:
98:5d:38:a3:2d:b3:bd:70:49:b3:91:33:9a:44:c5:
e1:a9:08:2d:5b:88:f1:e0:70:47:bd:45:fa:5b:e3:
da:1a:fb:8e:6d:83:b6:23:6c:8b:82:b2:87:06:d6:
88:41:60:76:65:2f:39:96:fe:74:ba:4e:14:c7:05:
b0:31:a3:7d:fc:7f:bf:7b:a4:8e:59:d0:f9:95:7c:
dd:44:2a:ff:98:45:da:21:1a:00:f7:65:59:5b:31:
41:73:20:ac:65:be:75:1a:6a:3e:b2:9c:a7:d6:a5:
ec:18:18:6e:29:14:91:d6:47:d5:ab:54:29:7f:c9:
af:af:7c:f4:35:6c:4f:ec:44:42:86:c0:08:05:4e:
fc:12:c0:29:64:13:ba:71:ed:61:cc:c3:9e:64:21:
e7:a7:77:bc:37:f9:38:32:59:56:2d:57:26:a5:17:
5e:44:3e:a5:fb:fe:4b:c8:f8:58:79:35:f4:93:94:
b5:f8:fe:54:23:8a:aa:6c:d0:11:7d:24:ce:6a:e5:
bb:39:fa:11:58:c6:b7:70:85:8f:81:ed:dc:57:b4:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2A:9A:BF:BF:72:13:2E:4E:08:32:63:54:2F:60:24:9F:DE:1D:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
X509v3 Authority Key Identifier:
keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fc:be:79:c9:63:02:a1:56:2b:46:d9:e9:fb:2f:1c:74:6c:
09:b8:d4:33:5a:d5:7e:e9:75:66:2b:30:0d:f2:30:76:06:e2:
76:09:b3:ce:7d:c5:d2:a6:6b:27:4d:6d:25:5c:be:6f:90:7a:
cf:56:5d:5b:aa:cd:68:7c:b8:80:c7:1b:18:bc:3f:b5:7d:ef:
25:14:d0:0e:3e:fb:db:85:a9:df:2f:a5:1d:fc:c2:a3:5a:96:
4d:5c:32:7f:44:da:28:ef:b5:7c:73:3f:42:05:60:6d:6a:ab:
a9:6a:dc:70:54:c7:97:b0:14:1a:49:d2:6a:e6:6a:0c:60:87:
b4:07:24:56:02:4e:bf:35:7c:bb:42:38:aa:87:c9:dc:23:28:
95:2a:93:ff:b4:c5:73:76:16:28:66:dd:f6:b3:96:a1:7b:e6:
15:fa:67:74:56:71:31:92:33:25:ac:f6:6b:05:7d:03:8c:1b:
cf:54:e5:ed:a2:91:82:1f:6c:97:ce:af:60:d7:6e:4e:09:67:
9f:b3:6f:e4:8e:21:43:07:3f:a6:f7:24:8b:19:68:a6:c0:86:
20:5f:7b:00:c6:02:0e:00:d2:26:e1:99:4a:9a:84:ad:5c:6a:
06:06:55:5d:17:08:88:b2:f8:05:3d:f9:ac:c0:28:08:d2:a3:
b9:f9:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:01 2025 by rpki-client