Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa
File: ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa (raw, json)
Hash identifier: EAIp8VL7W6On15jx9nhgfMtyllBszKCCGu9JEAxKY24=
Subject key identifier: 25:67:DD:EA:96:0D:1E:7F:E7:8B:EE:1B:CB:97:BF:A4:1F:30:7B:7F
Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial: 010D0C9F43285848F4F6A0E89FDA2012EEC89120
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 22504
IP address blocks: 162.118.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a0:e8:9f:da:20:12:ee:c8:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=18203f54-1baa-4aa7-bd1d-c6ca856e6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:2c:a3:ce:3c:94:dc:0a:04:51:1a:c8:fe:
bf:fb:a7:31:48:a8:d8:33:73:a4:05:eb:a1:f5:86:
dd:95:e9:1b:bf:96:96:65:ea:dd:14:69:4b:0c:81:
df:eb:87:e1:6e:82:a0:38:14:d8:d1:98:d3:36:c7:
d1:a7:a4:d9:b0:e4:ba:33:8d:a9:5b:23:25:62:09:
36:8c:ed:4b:f2:1b:27:ba:06:b2:07:b1:06:b9:47:
82:ad:e5:15:aa:a0:75:4c:6a:7f:31:0b:e1:b0:ed:
7a:77:3b:03:13:eb:31:81:bf:b7:52:b4:4e:fc:eb:
e1:6e:09:d5:6f:de:2b:e3:a4:11:e3:24:4e:3b:37:
24:af:20:91:89:2b:36:6c:f0:e9:8d:e9:7a:0b:e8:
01:0d:ce:0f:9d:24:3c:96:08:27:bf:ba:d8:17:96:
00:4f:5a:b5:a4:fc:3b:20:03:c2:4e:16:6d:ba:55:
0e:32:59:fe:4c:f0:e4:e0:9a:5e:72:40:b5:91:e2:
10:5d:e9:5c:21:f3:79:79:e1:16:fe:4b:41:19:10:
c1:d1:e4:a1:34:bd:50:9f:75:4e:73:db:60:a6:46:
79:d6:14:02:a5:85:a7:08:44:f1:84:19:ff:97:9f:
f1:c2:2a:ea:59:7a:18:75:f3:17:4d:36:1a:6e:ab:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:DD:EA:96:0D:1E:7F:E7:8B:EE:1B:CB:97:BF:A4:1F:30:7B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
X509v3 Authority Key Identifier:
keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
sbgp-ipAddrBlock: critical
IPv4:
162.118.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:89:dd:d3:66:5c:2a:13:df:d9:72:45:02:46:7b:52:bd:d9:
fb:a3:68:70:48:ee:dd:78:1e:4b:4a:4a:d9:cd:fd:2e:d7:eb:
1b:cb:48:e8:17:81:70:73:98:c9:f2:90:d9:44:b4:86:73:e0:
a0:1e:48:ee:c7:9a:77:35:b4:47:05:77:5a:b5:45:51:90:d4:
ce:5c:c9:96:18:ae:11:d5:7d:d6:d7:45:e4:63:d0:e6:28:a4:
e4:4d:6c:9f:91:07:16:87:fc:43:bd:0b:22:b8:43:52:0a:d6:
9b:80:4b:59:e6:c5:34:08:dc:4c:42:66:3a:2d:29:2a:c0:bf:
bc:7a:b0:ce:2b:b4:e9:10:b7:fb:68:8b:91:5c:9e:45:7c:aa:
22:52:a6:60:32:aa:92:5d:27:43:88:b6:35:5f:32:90:ec:5c:
f3:ca:72:5d:71:19:2c:3f:84:fd:07:92:56:10:1c:4b:0e:95:
62:8c:33:6e:6c:33:8e:93:c8:9e:87:a7:41:7b:84:2e:56:c2:
bf:20:f4:68:3e:a5:0f:c9:4c:24:6d:15:3b:a4:8f:0f:09:17:
35:a5:e1:a7:2d:e2:f2:73:cd:3e:39:c9:9c:96:47:68:8e:3b:
79:2d:6a:d3:2a:88:75:92:e1:da:cf:bd:89:f9:d7:37:ae:09:
3e:d4:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:58 2025 by rpki-client