Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa
File: 5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa (raw, json)
Hash identifier: XiR+rD+InntOx0u41dl24BQnyfB8WtlPbSIG8pOkTXE=
Subject key identifier: DE:6F:7B:2A:89:25:D2:46:B5:DB:C9:3D:9D:52:A8:88:48:1C:70:F8
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848CB164F7C19BE0185F7C9A2C0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16433
IP address blocks: 162.251.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4f:7c:19:be:01:85:f7:c9:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=be25fd19-f3bc-438e-a950-bee5dc88dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:d0:88:b3:92:30:67:73:37:20:64:d1:7f:
95:0b:91:5f:7b:5e:ac:27:e8:62:27:e3:56:4f:f2:
8e:31:1c:d4:f1:5e:ce:2d:fb:32:ae:b9:94:4c:34:
c9:24:64:c0:59:c6:69:6a:6e:b5:73:a8:17:9a:5b:
67:f6:88:1e:a9:90:88:b5:30:da:26:2c:8d:08:fa:
1f:0c:92:9f:ea:ae:e2:d0:f0:34:87:3b:94:94:74:
1f:0c:b0:1c:33:32:d4:66:4f:0a:f6:cf:7f:ec:e9:
96:ba:fb:d3:39:46:9b:7f:e0:24:c3:2c:70:ac:05:
75:0a:5f:d8:b0:68:6f:ee:d9:32:04:f2:04:ab:35:
47:79:3c:31:14:9e:74:cc:a1:51:4b:1b:87:7e:2d:
35:1d:6d:da:03:8c:de:fb:b1:3c:30:0e:b9:79:61:
d8:12:04:e7:3f:ca:8c:18:7d:06:49:c5:89:d6:93:
c3:bc:4c:a5:94:6c:fa:70:53:ce:fe:e0:57:56:8d:
e4:0c:17:13:59:b3:e3:87:3b:61:5f:a4:1b:e8:c5:
e4:bc:7f:32:e1:ff:48:6a:d2:40:2f:82:85:b1:cd:
e7:cb:53:57:dc:da:e8:c2:66:44:01:8e:c2:de:7b:
a6:0c:f2:ea:b9:61:a1:3d:4a:06:df:9e:59:5d:bd:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:7B:2A:89:25:D2:46:B5:DB:C9:3D:9D:52:A8:88:48:1C:70:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:29:44:fb:70:76:39:94:45:4b:cb:50:d8:da:a1:46:14:ce:
90:8d:bf:2b:d8:46:f8:71:7c:f6:e8:f6:b7:d5:ea:7c:34:d0:
c1:97:f8:a0:d6:7e:92:d3:0d:14:72:f3:d6:72:cb:8a:d1:7c:
ad:45:2f:06:f5:6b:66:73:5b:fd:fd:62:7c:57:f8:b3:e2:17:
41:f3:c7:c2:5d:44:b9:55:7d:ac:2d:63:f3:8a:c2:5a:d4:02:
65:53:9d:b6:e5:5a:6b:c6:1b:53:a0:74:a9:3c:01:60:c6:af:
6e:f4:80:cc:eb:3d:f5:22:83:76:84:86:58:e0:fd:94:74:08:
11:e5:3f:5b:aa:41:d9:e2:64:91:54:49:0d:73:00:42:cc:f9:
01:64:b6:cf:58:c6:a2:d5:59:03:21:57:f6:51:a8:68:03:e6:
8f:35:06:b2:42:36:11:be:85:60:36:d3:d4:5c:56:62:0b:e5:
45:2d:f8:c2:64:f1:e3:25:e6:f1:20:20:70:4a:17:59:4f:92:
6b:42:98:11:3c:7a:a0:fa:6b:c4:72:98:dd:20:08:a5:86:19:
45:76:30:ad:65:de:a2:22:06:2c:3d:ef:ad:85:95:92:b1:d0:
b3:1f:f2:2a:c9:c8:6b:4b:d7:cb:cd:51:ff:0b:8f:df:a7:ee:
05:fc:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:46 2025 by rpki-client