Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa
File: afde5cdc-3c5d-342d-a648-49b9232529c6.roa (raw, json)
Hash identifier: 1MxdmjAPNnG81LoXb39CEU73/u4BBgDVivjXGcKuG0Y=
Subject key identifier: EE:29:FA:D2:9F:4B:0D:5C:C6:39:B9:35:25:4E:66:26:EC:E3:47:7A
Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd
Certificate serial: 010D0C9F43285848E4366FC794A4310F572C5C20
Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa
Signing time: Sat 15 Feb 2025 14:00:51 +0000
ROA not before: Sat 15 Feb 2025 14:00:51 +0000
ROA not after: Fri 16 May 2025 13:00:51 +0000
asID: 393844
IP address blocks: 167.160.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e4:36:6f:c7:94:a4:31:0f:57:2c:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd
Validity
Not Before: Feb 15 14:00:51 2025 GMT
Not After : May 16 13:00:51 2025 GMT
Subject: CN=8b5fab73-98ce-494e-a68f-750aa42350ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:d3:fa:3f:5b:fd:b9:38:b3:f4:24:fc:87:
f4:98:43:a8:39:59:c1:dc:f2:e8:15:5a:98:8f:d5:
3c:13:7e:99:54:50:58:1e:06:5a:01:32:ac:48:a4:
be:c1:96:7c:6e:e6:ed:df:d6:87:a5:e4:b0:40:b0:
a2:86:27:a4:19:51:50:92:15:4d:88:26:2a:de:20:
fe:45:90:ee:ca:fc:6a:cb:1e:00:e0:08:df:05:1c:
33:93:d1:6f:19:2f:6f:74:70:6b:03:57:7a:eb:be:
9a:84:55:ba:7b:14:fa:d9:36:e2:cf:05:91:fc:25:
87:b9:7f:7c:40:6d:62:d5:f4:cb:0b:b5:7e:40:57:
dd:54:17:74:05:4b:84:30:47:e3:eb:c9:be:d2:7b:
95:f5:5a:7c:76:8d:cf:f7:f5:2d:36:fc:4f:27:ed:
a9:5d:3b:d0:e7:06:9f:7c:2e:41:55:7c:a3:e8:b5:
96:e1:9c:03:b3:84:90:a3:0a:cd:48:64:30:89:b8:
a8:e0:94:b6:5b:7d:3f:de:7c:ba:6c:35:c4:08:3a:
23:2f:ab:54:3a:e2:42:c8:49:5c:68:b4:a0:5b:63:
d1:e0:ad:35:fe:72:65:cc:18:59:e7:c6:ab:3b:3d:
f3:ab:a9:c6:9a:3a:fb:56:56:72:89:1e:a2:9b:2b:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:FA:D2:9F:4B:0D:5C:C6:39:B9:35:25:4E:66:26:EC:E3:47:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl
X509v3 Authority Key Identifier:
keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
sbgp-ipAddrBlock: critical
IPv4:
167.160.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:09:1d:1d:2a:f8:9e:81:55:5c:33:03:10:9c:f2:97:4e:ef:
81:ee:18:a6:2d:8b:77:27:31:fe:ab:b4:5a:3f:1d:17:86:33:
34:13:5a:06:7f:f2:75:fe:6f:aa:48:cc:14:4d:4c:0e:51:86:
7d:b4:1a:b8:73:79:3c:98:94:e1:b2:d1:65:cf:6f:f5:57:1f:
04:b6:64:dc:6c:8d:26:41:00:f5:ec:37:8d:73:34:fb:a9:a9:
38:a9:d6:4e:31:c2:88:aa:4c:ed:c3:be:a8:0e:c3:61:b2:eb:
a3:ba:97:d1:7c:a3:cd:3a:35:14:d9:44:67:d4:08:37:46:f1:
31:02:91:0b:da:ea:20:f6:40:b6:a4:df:09:2b:ff:b6:13:10:
e2:96:c0:2f:0e:7b:6b:02:1e:2e:0c:00:91:a4:20:73:15:a4:
e0:59:06:2c:6e:90:d1:ec:72:c3:25:0c:81:f2:c2:6c:cd:9e:
cf:96:aa:3a:ec:39:3d:79:ad:ce:ac:e2:be:a9:f6:cc:df:59:
bf:cf:fa:42:32:7f:05:c1:ee:03:3e:05:30:e0:99:5f:b5:df:
9c:39:73:2c:2d:da:99:62:7e:23:14:10:7a:ec:93:24:08:bb:
f8:fc:f2:14:bc:43:b9:f2:fe:50:95:fd:66:35:77:12:95:38:
54:6c:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:22 2025 by rpki-client