Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
File: df1d5c84-0603-3a6e-8b97-6347fffa8312.roa (raw, json)
Hash identifier: uc+a9b+9o83lISjl6kVRXxy95XH6zF8YNEWC5VXrIAk=
Subject key identifier: 75:69:C9:3E:67:12:33:18:5C:01:20:66:67:2D:02:D2:50:C5:F2:1A
Certificate issuer: /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial: 010D0C9F432858487FB5E46F89CF6E5C18DB3CA0
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 14579
IP address blocks: 167.80.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e4:6f:89:cf:6e:5c:18:db:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=e9860236-6ff9-47d2-b2ae-23b7b329bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:b0:a9:8a:04:85:62:ca:2f:1b:30:ab:7f:
64:92:39:c0:c0:a4:17:08:4c:a9:66:bc:7b:cb:bd:
f8:2f:cf:5f:07:49:49:a9:be:4f:cf:cb:0f:b5:ec:
86:4b:e6:bd:30:10:51:96:42:e6:c8:7a:46:e3:4d:
de:b3:0c:5c:da:3d:08:ad:8a:21:33:4c:43:64:50:
a1:d2:d9:b5:f2:f2:46:f7:b5:fb:49:69:08:b1:f2:
08:8e:97:3c:27:8f:a1:de:da:b8:eb:97:43:bf:93:
8d:00:9c:70:0c:2c:ee:03:55:5d:6d:a6:e6:b4:db:
94:7a:f3:f8:ab:78:e5:61:86:83:d1:d7:26:6a:e7:
62:06:cf:df:c1:36:6d:f0:ed:35:32:d2:39:bd:af:
7d:68:28:e9:ac:23:c2:33:7d:2d:2d:43:a5:c0:a1:
33:4d:a0:65:5e:ed:4e:4b:84:d6:90:a1:14:3a:13:
f1:80:61:9f:e0:92:d5:34:4b:78:04:ad:7b:e0:05:
67:96:1b:48:45:60:d4:d2:41:d8:1e:1d:22:a7:2f:
47:0b:aa:a6:21:fd:9a:48:1c:7c:e1:58:a3:ef:fd:
04:65:40:cc:4b:55:4e:8e:0f:30:3b:d2:a6:e6:09:
5e:96:32:4c:e8:06:33:cc:9d:8d:3b:44:30:ae:ea:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:69:C9:3E:67:12:33:18:5C:01:20:66:67:2D:02:D2:50:C5:F2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
X509v3 Authority Key Identifier:
keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
sbgp-ipAddrBlock: critical
IPv4:
167.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:27:dd:67:7b:40:44:1c:17:38:2c:40:a3:da:b3:49:26:15:
64:61:42:b2:c0:ae:dd:68:3e:44:6f:e7:4f:d0:90:10:0f:4d:
2e:dd:09:1c:fe:ed:09:12:b4:62:2f:6f:97:50:89:ef:5d:4a:
f6:41:6c:94:82:25:1a:f4:fd:9d:1d:94:d6:15:2a:83:d2:20:
6a:12:27:3c:b3:8e:dc:7c:0c:84:61:0d:36:3e:42:4f:fb:3b:
bf:bc:fe:ba:c6:c3:03:39:73:d5:ce:3b:04:6c:10:3e:b5:44:
c3:dc:0f:03:8e:80:90:5d:0e:d7:b1:ec:ee:09:11:9d:37:96:
af:fd:65:30:b8:ac:da:28:8d:e1:30:ed:be:49:60:27:53:06:
75:ba:34:2c:91:00:90:4f:ef:fa:b8:74:c1:fa:4a:fa:af:47:
90:32:8b:38:16:96:50:b8:0d:a6:47:a5:e9:a9:7f:dd:b8:8e:
14:b4:38:b1:a1:54:4d:2f:8d:17:f4:27:7d:b3:ab:91:93:2d:
32:38:82:33:7f:14:3a:5d:4b:e6:f4:e4:f2:70:51:e3:10:12:
44:19:36:19:e1:ee:03:34:7c:85:5c:00:f2:fe:78:45:a1:38:
93:89:51:55:92:c0:66:ae:98:2e:08:ef:76:3b:3e:10:38:79:
66:91:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:34 2025 by rpki-client