Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/0cdc719d-4562-3d02-977c-30163b40bfff.roa
File: 0cdc719d-4562-3d02-977c-30163b40bfff.roa (raw, json)
Hash identifier: XoOTYW5Ac73+NXPi7h5upmbWGxmVUJtkAljp2h30hBA=
Subject key identifier: 26:BB:58:35:2E:91:4D:2E:DA:8B:60:FD:77:A2:2D:89:25:DA:F3:FD
Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial: 010D0C9F4328584891DB2F6887E32E59EC442D00
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/0cdc719d-4562-3d02-977c-30163b40bfff.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 160.79.108.0/24 maxlen: 24
160.79.109.0/24 maxlen: 24
160.79.110.0/24 maxlen: 24
160.79.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2f:68:87:e3:2e:59:ec:44:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=3ccb9837-c2bf-4fc3-a09a-9d1c60611c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:d0:90:9d:e9:f1:41:1a:74:e6:a5:5b:88:
1d:a7:5f:bc:a2:ad:cd:06:28:6a:8f:97:15:2a:60:
91:78:c4:73:71:16:c9:b7:57:7c:75:96:4e:a0:26:
1d:9f:c9:1d:21:7c:88:c0:85:cb:3a:6e:ae:b6:47:
f6:3e:5c:78:b1:19:07:ff:61:dd:59:6f:c2:40:c9:
b8:af:4a:f9:af:12:12:a7:55:23:d6:7e:b5:57:db:
f4:af:99:01:39:b9:7f:b6:b0:e9:67:3d:73:a9:fc:
49:a9:d9:a8:6c:00:a6:18:60:38:5a:e9:18:7f:c3:
f6:0a:3c:ad:83:8c:80:84:3b:49:db:b7:40:77:60:
92:73:75:3b:3d:e9:ed:94:e6:01:6a:60:29:a5:b5:
f4:78:77:d3:dd:32:3e:19:e7:4d:da:cf:f7:28:f4:
65:0f:46:3a:dc:c6:99:76:76:6c:5b:53:22:34:f0:
2c:52:48:63:0b:9c:82:31:3f:6f:12:c2:31:69:9c:
83:de:da:92:dc:19:ac:84:9a:88:ce:bb:82:1a:e0:
a3:3f:a1:63:c6:5b:b5:ca:36:94:88:9f:77:a0:d0:
7c:77:e2:5d:dc:dc:eb:03:f9:f6:aa:f6:b0:ff:99:
5a:11:c9:aa:93:7e:11:f1:13:15:27:85:64:c2:63:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:58:35:2E:91:4D:2E:DA:8B:60:FD:77:A2:2D:89:25:DA:F3:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/0cdc719d-4562-3d02-977c-30163b40bfff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
X509v3 Authority Key Identifier:
keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
sbgp-ipAddrBlock: critical
IPv4:
160.79.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ab:06:bc:cf:17:9c:29:c3:f3:57:3c:e1:ee:a5:dc:51:ca:
35:46:17:1f:08:34:73:e7:22:7e:a0:9d:ad:c1:a2:a8:24:c2:
a9:f0:91:c5:5c:69:cc:8c:74:39:06:29:b8:79:26:8c:6d:ed:
6c:21:a3:5d:a9:3a:62:f2:a8:59:cd:e7:60:83:8a:d2:97:7a:
49:e0:70:d6:86:1d:b0:40:24:69:52:04:3e:ff:5f:9d:02:08:
43:6b:07:95:60:5d:bc:50:37:31:46:ed:f9:19:ad:55:0c:b7:
a7:f5:94:93:70:9a:63:12:a9:1e:f2:ae:6f:f6:f5:d5:6e:98:
37:cd:01:c0:80:3a:4d:cd:50:90:17:01:51:d2:7f:b5:18:06:
c8:cb:4a:7a:64:10:fc:8e:cd:40:15:22:b5:99:76:34:cb:b6:
c2:d1:1c:4a:cb:43:16:5a:dc:6e:cc:1d:d8:de:98:8c:c5:b9:
05:0b:e7:00:83:4d:5b:ea:8f:f5:a3:62:c8:99:90:19:3b:4d:
8e:41:7a:eb:2d:66:a3:cf:a6:ee:6c:45:8b:d3:88:d8:75:83:
ef:87:4b:da:d1:8b:5c:69:33:9b:f0:24:9f:57:1f:27:fd:23:
d7:e6:4c:3d:ba:47:4c:26:87:c1:62:99:15:0b:f2:fd:0c:d3:
55:58:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:05 2025 by rpki-client