Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
File: 984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa (raw, json)
Hash identifier: NvvJ7Qi1F9vmfm17v87oUk/It++BJtYG+RWWwxy9whc=
Subject key identifier: 5D:33:AD:04:7D:5E:9E:5E:80:4D:4A:94:77:7C:01:46:55:B9:67:72
Certificate issuer: /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial: 010D0C9F432858494CC943643BF46B4FAAED2840
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 393384
IP address blocks: 162.220.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:64:3b:f4:6b:4f:aa:ed:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=21dd7bf2-136d-4cb3-9f37-8d9f2244c4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:fd:40:83:15:fa:4d:b3:b5:d0:f6:e4:cc:
2f:dd:c0:36:4a:24:72:55:c3:d4:93:95:1a:53:d7:
08:5e:e9:20:24:79:82:97:52:1c:cd:13:27:8c:58:
84:4b:b6:7c:b0:4c:38:2b:3f:1f:19:91:db:61:f1:
21:2d:c2:42:6d:d5:45:0b:d2:e9:6c:52:3e:06:14:
3c:87:3f:4a:29:0a:0e:22:7d:0f:a1:74:57:69:e4:
87:39:17:09:d8:05:a3:13:e1:e5:98:6e:74:53:e5:
df:98:49:d3:c5:11:84:30:8d:2d:81:31:9e:8a:61:
aa:48:25:4b:f2:6a:e2:60:3f:bb:0d:50:7d:c1:88:
30:83:62:25:b7:2b:85:b1:49:c6:7f:1d:e4:d0:06:
c7:d4:70:5e:ac:a4:32:26:1e:76:27:84:7c:a4:ac:
91:80:f6:a4:09:dc:5b:cb:55:bc:7d:9d:e0:a8:99:
dc:5b:77:f5:92:bd:96:24:a7:47:af:94:4f:ba:df:
be:d7:f5:b4:66:fb:26:49:c6:ba:78:bb:55:ae:9c:
28:15:31:4d:b6:e5:50:2f:79:16:13:12:63:6c:7d:
3f:13:88:3c:92:87:2d:10:d9:36:68:b3:09:cc:82:
08:ed:52:8e:c9:3b:db:bc:98:24:e5:51:65:d7:a0:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:AD:04:7D:5E:9E:5E:80:4D:4A:94:77:7C:01:46:55:B9:67:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
X509v3 Authority Key Identifier:
keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:17:1b:74:f8:37:8e:8c:e2:71:9f:15:53:c3:e7:f5:d6:5a:
b3:c4:0e:b6:88:d0:86:a3:93:b0:db:60:41:33:a2:4e:b0:e5:
be:e1:0d:2e:ce:97:d1:97:27:6a:68:36:9c:59:42:38:62:0c:
00:4c:01:23:ce:da:5d:1d:db:c1:47:b1:87:71:1a:f4:d0:db:
d7:c5:6f:9d:37:82:3b:84:a4:1b:84:88:34:ea:80:85:9e:f6:
9a:79:0b:78:91:9d:dc:65:78:2c:31:31:d6:48:d0:09:94:a7:
a1:55:1c:d2:d2:78:09:ee:9e:68:e3:7f:80:07:02:4f:fe:67:
c7:b3:76:87:b7:82:ab:33:15:b5:17:a0:28:d1:38:4d:05:07:
fe:c9:64:22:b0:da:f2:ed:b1:2c:de:16:b4:58:28:ce:86:58:
0d:ec:d8:9d:09:60:ac:c7:23:92:c1:e6:5c:ea:f0:5b:f1:73:
8d:7f:5e:d2:13:2b:d2:29:70:f4:37:01:6d:f3:c3:52:8d:69:
cf:17:85:ae:f9:52:10:1b:5c:db:2b:4f:c3:47:31:5b:cd:f6:
b6:24:35:7e:fc:b9:e5:43:35:58:0a:26:c5:2f:bb:9f:60:f9:
06:7e:17:57:8e:d3:e8:12:89:6d:b4:18:11:2e:98:05:c9:d7:
9c:00:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:47 2025 by rpki-client