Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa
File: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (raw, json)
Hash identifier: hVEl7AGV1omCY6qLfeL0y/g53fQfzHQ61OQmCRyvnJE=
Subject key identifier: F3:60:EB:3C:CA:24:D1:78:90:81:8E:F0:69:28:65:93:23:08:DF:77
Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Certificate serial: 010D0C9F43285848CC7B9C4A38EC2F92C25CDBE0
Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 398203
IP address blocks: 169.150.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9c:4a:38:ec:2f:92:c2:5c:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=4d86fb65-e629-4e2b-972f-cdcb3673266f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:0a:e7:66:73:81:ac:36:74:b6:24:76:ed:
74:42:fb:13:e0:a1:4b:40:bf:28:75:86:9d:b4:bb:
53:27:13:b4:17:64:e9:b8:b3:10:85:84:30:71:d7:
24:c4:01:1d:ee:49:8c:d0:70:d7:29:4e:fe:c5:9f:
76:af:14:5b:67:df:aa:af:58:8f:07:38:0a:99:da:
88:d7:80:86:2d:3f:3e:c8:df:c2:56:aa:38:d6:f4:
d5:c3:5c:23:79:57:3b:6f:84:c0:b1:0c:c2:12:c5:
47:67:a5:ec:56:e8:43:63:96:41:f0:39:2d:2d:d7:
a5:c0:fa:12:0e:d0:70:fb:c6:b1:0e:8c:4c:c8:5d:
54:55:83:11:79:4b:fe:12:ed:48:7c:64:37:f9:02:
30:2c:17:92:10:20:d5:d7:af:d5:25:e4:25:f3:03:
14:8c:a4:d6:fa:6c:09:22:84:f1:cb:89:9f:4d:05:
3f:43:ee:98:20:30:9d:da:c3:8e:c4:0b:e5:a1:88:
f0:51:4e:da:5a:9b:19:ff:04:d1:91:10:bf:ec:44:
33:f4:44:11:3d:27:25:45:95:4b:bb:a5:ac:81:ff:
f2:c6:e0:07:4e:65:80:45:b9:7b:b4:db:31:73:7e:
e5:6a:02:d1:a2:fd:b6:b5:4b:34:9b:60:57:fe:38:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:EB:3C:CA:24:D1:78:90:81:8E:F0:69:28:65:93:23:08:DF:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl
X509v3 Authority Key Identifier:
keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
sbgp-ipAddrBlock: critical
IPv4:
169.150.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:db:e5:04:66:52:6d:1a:6c:e5:40:91:7d:da:a4:68:bc:d2:
b7:1b:f3:c4:16:66:73:94:f5:2b:e2:41:37:83:c0:fe:c1:02:
a5:d4:cc:8c:0e:c2:9b:41:c2:21:88:f1:6e:25:19:60:57:a1:
f4:8b:a3:5c:d6:ba:66:c8:7a:7f:ec:14:b2:bc:ae:e9:af:28:
d2:52:76:ee:aa:95:4b:cc:0f:fe:66:e7:9d:4e:47:de:51:fb:
a2:00:3f:a9:1f:dd:bd:b9:69:79:46:93:cd:5b:1b:ee:f1:6f:
ea:45:a7:39:5b:04:da:a5:44:b6:d6:32:bd:02:97:71:29:02:
0b:e7:6b:4b:ae:b4:27:30:e7:97:f8:3b:0c:d1:0c:e4:76:3b:
26:6f:49:b4:af:dc:1a:ee:54:7a:90:f2:74:46:92:1d:1e:cd:
ef:f9:df:f1:c3:d1:a4:bb:2d:d9:8e:e2:82:0d:f2:67:90:87:
42:e4:2d:68:32:17:11:f1:36:3b:04:90:b1:1d:a0:95:96:6e:
e8:cb:96:a7:4f:e2:88:cf:70:eb:35:a2:fa:91:13:ae:53:1f:
6a:4d:1c:66:a2:96:48:a5:55:a5:0e:03:83:64:0e:37:e8:4e:
07:5d:58:4b:b2:cd:a3:7f:16:00:cd:32:b3:2c:cb:41:3f:23:
35:01:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:09 2025 by rpki-client