Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
File: e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa (raw, json)
Hash identifier: 0FPyBbYtcPbE8bXaZbPR+bYxgIUY4JRdTkW1nHpGgZA=
Subject key identifier: 04:9C:B2:BF:9E:81:60:E6:DC:9B:CA:D7:F3:16:13:78:08:1E:A7:79
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285848E9CBE15D06C34A5B681B0080
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 22742
IP address blocks: 162.221.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e1:5d:06:c3:4a:5b:68:1b:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=45a273f0-1786-4108-85c0-f2d4aa45cb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:d1:fb:90:bf:76:e0:9d:ef:42:f9:e9:9c:
bc:9b:a9:8b:61:5b:97:1a:27:32:58:c5:ba:77:4c:
5d:e6:5c:6e:3a:38:30:21:89:dc:ed:1d:5f:7d:ed:
4a:29:21:65:66:42:3b:0b:98:46:78:c8:64:39:17:
de:10:ad:8a:dd:36:df:61:47:cd:59:b8:1f:bb:2f:
81:91:72:9f:de:34:3d:77:51:5e:80:d1:82:9d:e3:
bb:14:19:94:54:cd:03:34:f5:e8:0e:51:ee:2a:30:
90:6b:57:53:a8:eb:fc:c0:34:90:05:d8:da:71:dd:
15:62:da:b7:55:52:cf:8b:41:62:51:01:06:95:10:
01:2a:cc:ad:d4:a7:44:ed:24:4f:02:66:ae:b5:b5:
cc:bc:af:de:a6:7b:91:3a:3d:b8:b1:53:ee:3a:50:
e9:c1:c2:56:d0:70:54:8d:20:6f:74:14:74:33:b6:
b2:2d:a2:b0:a7:cc:bc:d6:2f:91:9f:5d:b7:46:d1:
2a:11:25:14:4c:fa:fa:6a:30:7f:ea:85:28:b4:de:
6a:11:71:6e:4c:4f:8d:21:b1:29:a7:20:d7:f5:c3:
99:19:70:e5:bb:70:4e:66:05:47:a8:5b:fc:0a:0b:
47:22:1f:cd:07:78:97:e0:1a:cb:27:6c:0f:8d:44:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:B2:BF:9E:81:60:E6:DC:9B:CA:D7:F3:16:13:78:08:1E:A7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:31:71:8c:26:5f:ac:d9:41:21:02:06:ed:3d:5f:fb:d7:a7:
4b:0e:5e:b2:b2:04:00:33:43:0c:57:02:42:5b:ab:5c:12:a8:
b2:01:75:d9:8c:f8:5f:e2:ea:8a:6c:57:e7:73:78:61:20:a0:
7f:10:f4:3b:02:1f:14:57:34:00:61:75:0c:ad:d6:08:e4:57:
c8:95:9f:43:43:6c:ff:8a:4a:99:bd:f2:a3:25:f4:fc:92:42:
8e:04:4e:a0:21:9f:5f:96:4a:b7:d4:6c:7b:86:55:6c:0d:39:
f9:80:7a:0e:70:54:d5:49:cb:6c:f7:e5:80:68:9a:7a:72:25:
99:e3:95:eb:a7:cd:c9:ac:03:d5:3f:22:4c:46:52:e5:ec:c0:
f0:76:35:52:6d:42:8a:dc:78:d9:41:aa:8c:11:cd:04:a9:ca:
62:d5:b4:cd:49:6b:d9:1c:9b:64:8c:4c:90:60:1e:7c:f2:33:
9d:87:b6:5f:2f:16:49:46:7e:4e:50:b2:b9:f7:88:79:a9:65:
95:93:67:bf:31:81:94:8e:2b:bb:1b:fb:e3:fd:2c:c3:ef:f7:
28:69:f3:2b:a4:27:f2:7b:a6:ea:7f:d6:1a:bb:70:98:18:84:
ff:24:50:1c:cd:97:a7:92:72:9d:9c:30:f0:6c:2f:dd:53:b5:
e1:cd:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:52 2025 by rpki-client