Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
File: ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa (raw, json)
Hash identifier: x0xvshu+ZtwZNq5q8gUsOa2wcoAUCC5RsKAbWlsTWnE=
Subject key identifier: 04:E8:E2:19:A5:80:82:A2:9A:E9:A0:EF:27:8F:88:7E:F5:83:0D:35
Certificate issuer: /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial: 010D0C9F43285848ADC6157F3664879917920980
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 40102
IP address blocks: 160.253.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:15:7f:36:64:87:99:17:92:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=e9281456-d070-42ef-a30e-4d98e58da6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:22:14:ea:e9:2d:ba:c2:5f:17:8c:1b:72:
54:c7:e8:63:56:a3:2c:1d:63:25:7f:b0:96:fa:29:
e2:13:18:72:da:db:fa:26:42:e8:9c:8e:6b:5e:7e:
b6:13:1b:b1:7d:89:17:b8:3c:7f:58:38:5c:ec:59:
a2:04:f1:f1:95:06:c2:92:d3:bc:88:ad:87:bb:ed:
cf:ed:f2:53:49:b1:8d:ea:d6:74:93:79:fc:91:e7:
8c:9a:26:43:f8:16:6e:20:f7:64:ea:75:03:d4:76:
9c:33:0e:2b:24:7e:25:17:54:d3:db:c5:9a:4e:33:
6f:d4:f4:1f:88:ff:61:ea:8a:3a:f4:ba:eb:9f:4f:
b1:2a:f2:15:6d:9c:f5:b5:28:35:c1:3b:e9:9c:65:
14:3e:35:75:28:dc:08:cc:88:c3:77:0b:31:85:d9:
94:c1:81:05:56:f3:69:85:f5:67:14:d8:88:80:13:
e2:07:95:d6:1e:9c:84:ec:ab:03:bf:c8:d7:a7:be:
0c:d7:0d:c7:fa:ef:dd:c8:f3:ad:8e:a3:00:df:5b:
11:40:28:37:17:ed:6c:e7:17:60:dc:85:12:13:3b:
c4:bf:e3:46:0f:fa:6c:63:3f:79:49:ae:58:c7:19:
35:ec:3e:54:4f:10:f8:16:db:ad:82:c9:0d:05:fd:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:E2:19:A5:80:82:A2:9A:E9:A0:EF:27:8F:88:7E:F5:83:0D:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
X509v3 Authority Key Identifier:
keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.253.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ce:2c:75:6b:ff:82:1c:99:67:ee:8b:3d:fa:aa:f5:13:1c:
8c:7f:26:9f:24:f4:f1:e4:00:f7:df:9d:02:1f:67:a5:6c:b1:
dd:61:57:f0:dc:47:ab:b6:0d:4b:ca:fd:e1:4c:63:8d:04:47:
5b:04:d0:12:dc:38:25:d1:d4:74:25:68:76:9e:1e:34:68:b4:
d8:1e:6d:cf:80:f6:c3:31:b4:36:fd:37:48:86:71:0a:45:f0:
ae:08:ca:00:34:6d:b2:53:5a:18:de:97:8b:9d:83:50:ef:c9:
32:4a:4d:1f:a9:7f:df:65:19:04:27:bb:43:a5:b7:c7:5e:f4:
3e:c2:87:0d:6a:09:ac:84:93:51:2f:6f:b3:42:cf:35:23:bb:
d3:f8:34:62:66:71:10:e3:72:c6:c7:0a:43:68:f3:2c:0e:69:
90:e2:8f:6a:02:d6:d5:91:46:4e:34:48:03:8f:ad:87:c4:a0:
10:7d:f7:41:db:57:87:d4:bd:5b:bb:2f:d6:dc:11:f0:be:d5:
e6:e2:b6:d5:b2:a7:59:b4:08:5b:ef:f4:08:23:aa:81:36:1f:
58:b3:ac:fd:c0:55:87:50:8c:cc:1d:b5:0d:dd:c4:c4:07:50:
bd:88:36:3b:c4:b3:01:f8:9e:94:6a:69:49:40:58:01:b6:0d:
00:1a:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:38 2025 by rpki-client