Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
File: c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json)
Hash identifier: JHRREQZYbXoIVyQUasF1zzwlguOMYvsf1eNHDCc9i1c=
Subject key identifier: B9:BC:42:74:D1:46:F3:D6:58:84:09:0B:56:19:3E:2C:CE:80:47:03
Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
Certificate serial: 010D0C9F43285848E16BD353D01294E51C490640
Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 13543
IP address blocks: 162.253.96.0/22 maxlen: 24
2620:f4:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d3:53:d0:12:94:e5:1c:49:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=5e4f920c-0322-4bcd-a1f8-af30b9ab3cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:a5:5c:c4:e6:22:55:11:98:70:9a:42:a1:
8d:fc:c3:2c:62:78:19:79:4c:bc:bb:3c:de:fc:bc:
61:f3:c4:bf:69:55:b5:cb:c7:6b:0c:7b:b1:80:2b:
b7:73:43:a5:b8:a1:b0:ff:f4:30:ac:d9:65:ae:f3:
4b:a6:67:4f:97:9c:3f:9e:87:25:3b:62:02:5b:b6:
e7:38:ae:2a:96:e2:ef:3e:ac:83:62:ce:8e:f0:88:
f0:4b:90:00:b1:ab:bf:6f:78:d4:f7:5d:df:f9:9c:
34:72:cd:b9:e0:1e:ed:fc:09:f3:d5:59:39:c7:64:
1e:d8:81:33:22:d0:67:40:2d:09:46:81:8c:73:e8:
9f:ae:44:ff:7b:bb:73:5e:47:e6:55:c7:92:af:26:
0f:7f:b3:01:d2:25:fa:9b:45:22:ab:2e:12:e4:a7:
6d:60:67:a2:47:27:5f:23:fe:20:82:72:74:f1:2b:
3c:33:f2:f3:7e:13:90:6d:36:f2:13:90:99:70:1f:
50:3d:b9:a5:45:56:09:cf:76:d9:91:e5:70:76:b9:
e2:62:d5:fa:3a:5b:01:f5:e5:a9:29:0a:e1:ac:4f:
96:34:4b:8c:d6:81:4e:5a:66:db:68:eb:ea:09:97:
41:9f:e2:38:63:f1:5a:cf:0b:36:87:2f:72:4c:9b:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:42:74:D1:46:F3:D6:58:84:09:0B:56:19:3E:2C:CE:80:47:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl
X509v3 Authority Key Identifier:
keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.96.0/22
IPv6:
2620:f4:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d3:79:b0:37:b7:e7:b9:bf:6d:85:6a:5a:9a:23:92:f9:81:
6f:11:c3:b2:e6:52:5f:94:78:83:55:d3:c9:28:bd:ad:f9:30:
e7:4e:7d:37:93:34:d7:a7:b4:09:85:0a:5d:44:a7:50:81:a7:
ec:29:86:7c:3f:f3:1a:86:5c:96:2b:73:0e:02:25:58:6b:a5:
60:af:51:a8:52:ff:d0:76:4b:1d:52:8b:3e:77:af:d4:b7:ca:
0f:d0:c0:c3:76:f8:24:57:61:bf:52:d1:b8:8d:b3:06:86:3e:
9e:fa:c2:8d:03:63:dc:fe:90:3e:35:21:c4:66:b6:e9:ab:9f:
89:46:21:2a:54:48:a3:ca:b8:be:a4:12:3d:53:a8:bf:7d:4c:
f2:64:24:5d:c9:57:61:9b:a9:b0:72:82:db:af:03:7e:78:8b:
30:a0:06:ed:bf:00:9b:fc:9f:b2:ac:a0:e2:93:b6:1f:ec:66:
51:40:15:3b:bf:d7:8e:b3:28:d6:cd:0c:0e:f4:8a:20:84:c7:
b6:13:f2:c4:80:5d:25:4a:07:0e:dc:ac:68:36:1e:1b:6c:4f:
9d:e9:f3:54:4a:d3:b0:ea:a5:54:e4:1e:cf:86:df:58:c6:31:
a5:02:cd:86:cf:24:77:45:f6:c1:80:22:09:1e:8b:6e:5f:42:
8f:55:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:16 2025 by rpki-client