Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/de25375f-f9d0-3b8a-bf68-618ff4a4da60.roa
File: de25375f-f9d0-3b8a-bf68-618ff4a4da60.roa (raw, json)
Hash identifier: jrvFh2D1Utp2I4RWD6kEOf7IdiIK0cqKUAVS76ug504=
Subject key identifier: 8C:E3:41:83:15:2A:08:C8:A2:2C:A2:0D:97:D5:BB:79:70:E2:BA:FC
Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial: 010D0C9F432858494BDA7C1113CA0B2D86803280
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/de25375f-f9d0-3b8a-bf68-618ff4a4da60.roa
Signing time: Mon 24 Mar 2025 16:59:40 +0000
ROA not before: Mon 24 Mar 2025 16:59:40 +0000
ROA not after: Sun 22 Jun 2025 16:59:40 +0000
asID: 18841
IP address blocks: 155.63.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:da:7c:11:13:ca:0b:2d:86:80:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Validity
Not Before: Mar 24 16:59:40 2025 GMT
Not After : Jun 22 16:59:40 2025 GMT
Subject: CN=9a7a9b88-f850-4b5f-95d1-4cfafe1185ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:c5:84:db:8b:a8:08:4a:b6:32:dd:15:f1:
57:ee:77:c2:51:94:d5:fd:15:40:60:1d:b1:18:e8:
44:8f:d0:9d:d5:40:d4:53:11:6e:1b:2c:f3:c8:cc:
f0:8e:1e:73:3c:66:ec:a3:94:d1:25:3a:8d:22:bf:
cb:fc:12:18:da:b7:38:54:3c:3e:46:63:b8:6d:4c:
2b:a9:25:01:fc:b2:5c:ae:09:4d:2b:c6:57:2d:42:
43:b4:50:18:f2:61:16:20:4b:43:e4:17:2b:35:2f:
a4:fd:e3:50:21:38:5a:a1:43:8f:62:03:a7:72:7e:
fd:70:ff:e2:33:f1:01:8e:d5:c6:8c:92:71:9a:81:
d0:f8:0b:1f:31:10:36:2d:ac:85:52:72:02:3a:f4:
e2:f0:f5:3b:b0:6f:cb:6f:d2:47:99:a5:57:ee:f1:
9b:8b:e4:bb:3b:ac:a6:fa:7b:b5:dc:ed:5a:55:6b:
f9:93:86:f5:71:56:2d:fb:fa:e7:6f:68:b8:ae:0a:
dd:27:3a:d9:31:96:05:77:d7:d2:be:c0:43:25:1c:
ab:a9:25:f1:7c:1c:a5:0b:96:57:99:01:98:f0:4d:
c9:5b:98:55:26:c0:48:1e:a7:e9:09:0b:bb:77:be:
9b:5a:ab:8e:b7:c4:d1:48:75:72:c0:b7:ec:d6:9c:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:41:83:15:2A:08:C8:A2:2C:A2:0D:97:D5:BB:79:70:E2:BA:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/de25375f-f9d0-3b8a-bf68-618ff4a4da60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
X509v3 Authority Key Identifier:
keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
sbgp-ipAddrBlock: critical
IPv4:
155.63.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b9:e0:ad:8a:1d:94:5e:95:b1:41:47:e0:3b:8f:fc:9f:c4:
1a:ce:ec:3c:95:dc:db:4e:d1:01:51:08:cf:99:55:f3:16:73:
e2:36:a3:15:d1:c0:6b:b4:d9:9b:63:5e:b3:d9:85:bd:17:99:
bd:e5:ac:5c:4f:a1:29:1c:c0:a6:34:80:30:69:03:ac:18:b9:
ae:7f:c4:1f:6f:fc:08:e5:47:3e:af:9c:e4:af:73:43:da:0c:
3d:c9:f0:2d:d8:39:99:26:69:50:0a:6d:ac:6e:43:60:08:99:
8c:73:e7:2b:d9:a9:a1:87:ef:d2:2c:8d:b6:9d:0d:49:b8:13:
cb:cb:d6:d0:27:75:51:06:b3:2b:64:ac:ef:a8:57:57:ab:55:
7d:3d:10:0f:f6:cb:5c:af:95:e5:76:62:80:71:8d:a3:70:6f:
3d:35:80:a9:ec:c9:7f:1b:03:5d:c4:04:7c:56:9a:e1:30:ee:
a1:78:0d:46:ec:db:27:e5:fb:1b:6f:35:3e:69:c2:f9:ea:49:
32:28:f9:02:56:9c:9c:5b:33:7b:0f:33:e5:06:aa:4c:dd:57:
75:99:c3:34:bc:d4:3b:c7:69:35:ce:59:29:f3:52:ac:0d:34:
8e:d4:e7:6b:9a:a0:a2:80:f1:8a:30:15:d1:37:90:27:e5:e6:
37:df:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:25 2025 by rpki-client