Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
File: ca96c743-26b4-3af6-9b1c-895a1d32be10.roa (raw, json)
Hash identifier: jUI026+XOpoPHg5qIQ6KNztgbf6Nb478bWkAZNG5mA0=
Subject key identifier: 7D:43:9E:DC:1B:F2:93:58:4A:A2:25:95:7B:72:AE:60:F8:BD:28:7A
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F43285849446930493DEF8B788543DA60
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 13807
IP address blocks: 162.221.232.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:30:49:3d:ef:8b:78:85:43:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=8123e210-2e64-4468-8b91-b419bc9cc505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:23:11:cd:93:b4:00:3c:e8:8f:14:3f:b4:
92:1f:c8:29:d7:7d:24:88:e9:34:5a:e1:96:8f:15:
de:28:0b:af:07:f8:97:ff:4a:9d:2a:2e:2f:21:53:
27:e8:03:78:e8:ee:2a:24:7b:9f:0c:f3:63:35:61:
28:d2:d6:86:25:ab:b0:9e:06:68:c1:ed:78:ea:dc:
64:9e:f9:c2:ca:00:42:f2:e5:55:62:94:e8:cf:ff:
00:fc:3f:48:17:2f:c1:7b:b9:8d:cc:1c:0c:77:f5:
0d:ae:94:b9:4b:d9:2a:06:c7:39:23:9c:d0:60:ef:
76:92:ff:ce:9f:15:a1:ee:b1:87:4f:3e:07:ba:fb:
ab:44:66:54:1d:c9:70:3c:02:b0:e8:09:e5:9a:19:
05:8f:ad:51:eb:47:b4:42:c0:68:29:9e:b3:79:86:
be:d9:dd:05:0c:44:1e:1d:01:1d:80:53:f6:7f:40:
0c:ec:31:56:b6:96:16:95:ca:d7:46:42:30:3e:4c:
39:39:8d:9d:b0:d3:e3:dd:3d:0f:52:c2:13:71:d7:
40:bd:5a:3d:a4:6d:c0:09:2b:ad:49:18:a1:a6:0b:
de:d7:b8:ac:a2:b8:f9:c8:a7:ee:74:ca:16:bd:a7:
f2:09:57:a2:92:a6:73:3e:fc:39:7b:ac:b6:f6:aa:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:9E:DC:1B:F2:93:58:4A:A2:25:95:7B:72:AE:60:F8:BD:28:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:27:93:fc:36:b1:f8:43:1e:c7:f6:3d:fb:7b:71:e6:e0:c4:
47:a7:bb:4c:e2:b2:03:c1:25:9b:39:ac:bb:56:97:5b:c2:48:
b4:2d:0c:e9:cf:77:13:50:53:fd:83:f9:8d:d5:d4:fb:4b:bd:
c4:cc:b5:09:97:50:07:ff:a1:ca:63:28:3e:3a:ed:0a:6f:09:
dd:7f:7f:b1:e1:96:14:11:16:31:41:c8:c8:b2:f4:e5:39:e1:
2b:db:96:c9:7a:f6:fc:fa:6d:ff:0a:03:fc:7f:f7:ed:2e:3f:
d0:9b:61:c0:3b:b7:f2:88:1d:33:75:c6:5d:97:e2:a0:39:89:
d6:25:66:b2:0c:4f:46:29:d2:b3:16:ed:4b:3b:be:ed:46:b4:
b5:b9:78:79:4b:09:45:42:ea:b9:e5:1d:7d:af:bf:37:d5:08:
73:7e:49:76:08:e7:fc:fd:34:42:93:ed:b1:8f:00:36:42:ec:
78:47:f9:fa:c7:86:2c:01:38:52:f7:06:72:3f:81:e7:c7:6a:
0a:ca:35:ab:67:21:22:d9:f9:97:fd:4c:c5:76:3d:14:34:d0:
ca:25:d1:83:85:88:ac:9f:4d:b4:a3:c1:d4:ce:f2:b5:14:c8:
f3:7a:60:51:ae:f6:c5:68:d6:31:ff:50:cd:ad:bd:a4:c8:c8:
4d:7c:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:36 2025 by rpki-client